On October 13, 2026, leading US financial institutions established a coordinated defense line against autonomous consumer software bots. During the third-quarter earnings call, JPMorgan Chase announced that it would block external AI agents from directly accessing retail and checking accounts. Citigroup and Bank of America quickly joined the initiative to enforce similar restrictions. The major lenders are responding to the rapid proliferation of new consumer agents designed to conduct financial business independently on behalf of account holders.
Jamie Dimon, CEO of JPMorgan Chase, justified the measure to analysts by citing unresolved legal uncertainties. Central to the decision is the unresolved issue of liability transfer if an external autonomous agent triggers erroneous bookings or falls victim to manipulated inputs. Currently, no clear legal framework specifies whether the bank, the customer or the bot developer assumes liability for unauthorized actions by rogue agents. Dimon explicitly warned of the systemic dangers posed by thousands of uncontrolled bots navigating retail banking interfaces.
Bank of America underscored this defensive stance by mandating a strict operational requirement for all outgoing transactions. The bank clarified that outgoing fund transfers must continue to involve a mandatory human in the loop for approval. This human oversight effectively prohibits fully automated click and payment sequences initiated by third-party algorithms within the core banking architecture. Executives emphasized that preventing unmonitored scripts from emptying checking balances remains an existential priority.
Beyond the publicly highlighted security concerns, a potent economic calculation drives the defensive wall. Following the widespread rollout of autonomous personal assistants in September and October, financial institutions detected bot networks systematically draining unremunerated deposits. These bots automatically shifted idle cash from checking accounts into higher-yielding money market funds and arbitrage instruments. For commercial banks, this programmatic deposit flight presents an acute threat to their low-cost retail funding base.
The newly imposed barriers do not represent an absolute shutdown of third-party interfaces. Standard read-only Open Banking interfaces remain accessible through certified providers, allowing customers to view aggregated account data and balances. Instead, the blockade specifically targets transactional write privileges that would permit third-party bots to initiate transfers and transactions autonomously. By establishing this boundary, Wall Street banks retain direct control over consumer fund outflows while waiting for clearer regulatory standards.