JPMorgan blocks outside AI agents from reaching customer accounts

JPMorgan Chase will not allow outside artificial intelligence agents, including Muse and Instinct, to access customer accounts, CNBC reported¹. Chief executive Jamie Dimon said the bank is putting up gates to protect against “rogue agents”^3,6, and Forbes reported that JPMorgan is not using external AI agents itself⁴.

Dimon’s message to customers was about responsibility rather than capability. He said clients using AI agents need to understand the risks of letting them into bank accounts², and Banking Dive reported him warning of a “liability transfer” to the customer who authorises one⁵. JPMorgan executives said the biggest concern for clients adopting AI agents is security⁶.

The context for the decision is Meta’s Muse, whose arrival has reignited fears over artificial intelligence-driven deposit flight⁵.

Why it matters to investors

This is the first clear line drawn by a major bank on who may act inside a deposit account, and it is being drawn by the largest one. If an outside agent cannot reach the account, it cannot move the money, which blunts the deposit-flight scenario that Meta’s product raised^1,5.

The liability point is the commercially sharper half. Banks generally carry the cost of unauthorised transactions; an instruction given by an agent the customer themselves installed is a different category, and Dimon’s framing of a transfer of liability is a claim about who pays when such an agent gets it wrong^2,5. That allocation, not the technology, is what decides whether consumer AI assistants can plausibly operate on accounts at all.

It also sets a competitive marker. A bank that refuses outside agents while declining to use external ones internally⁴ is betting that customers will accept a closed system, at a moment when rivals may calculate differently.

What to watch

The immediate question is whether other large banks follow. JPMorgan’s position was announced as its own policy¹, and the value of any consumer agent that handles money depends on how many institutions it can reach.

The second is regulatory. Dimon is asking customers to absorb a risk rather than asking a supervisor to rule on it^2,5, and bank regulators have been taking a closer interest in how institutions use AI models. Watch, too, for how the blocked firms respond: Muse and Instinct were named¹, and their businesses assume access that the largest US bank has now withheld.

Finally, security is the stated reason⁶, so any incident involving an agent acting on an account elsewhere would strengthen JPMorgan’s case and the gates it has built³.