JPMorgan CEO Dimon Bars Third-Party AI Agents From Customer Accounts Over Security Fears

Jamie Dimon, CEO of JPMorgan Chase, announced Tuesday that the bank is preventing external AI agents from accessing or taking actions on customer accounts, citing dangers from "rogue agents."

This decision sets up a potential clash between banks and consumer-facing AI assistants over who controls access to financial data. According to a BeInCrypto report on the State of AI Agent Payments 2026, agentic payments are predominantly used for microtransactions and are not yet deployed at scale within institutions.

What JPMorgan Decided and Why

An AI agent refers to software that performs tasks for a user, such as checking account balances or booking travel.

JPMorgan views such agents as a threat when they use a customer's banking credentials to log in.

"We're not going to allow just any outside agent to come in inside the company because that's just too risky for clients and for JPMorgan… You don't want rogue agents," Dimon said during JPMorgan's third-quarter earnings call.

Several factors underlie the decision:

• JPMorgan will not permit external AI agents to log in to or act on customer accounts.
• The bank considers outside agents too risky for both customers and the institution.
• It blocks third-party agents that attempt to acquire customers' banking credentials.
• It continues to support customer-authorized data sharing via open banking providers.
• The stakes are high: $15.3 billion in third-quarter net income and $5.1 trillion in total assets as of Sept. 30.
• A Cloud Security Alliance note indicates a campaign used three open-source AI agents to breach at least 27 organizations.

These factors collectively explain why the bank is drawing a clear boundary.

Can AI Agents Still Manage Your Money?

Some firms have already embraced them. Germany's Scalable Capital, for instance, opened its platform to ChatGPT, Claude, and Grok in August.

Users could analyze portfolios and place trades through prompts, but every trade required approval, and the assistants could not make payments or withdraw funds.

Meta's Muse follows a similar approach. Launched in September, it links to financial accounts via Plaid and provides guidance on balances, transactions, and investment holdings.

Retailers are pushing back more aggressively. On September 20, Amazon started blocking Muse from its website, causing shoppers using it to see pop-ups stating that the usage violates Amazon's terms.

According to Fortune, Meta did not comment on whether Muse could continue offering financial assistance if more banks block outside agents. Meta is working on Poppy, a personal agent protocol with Sierra that informs companies when an agent is acting for a customer.

Dimon warned that greater reliance on these agents would increase risks for banks and customers, but added that JPMorgan is creating its own tools to safeguard customers.