# US Banks vs AI Agents: Who Blocks What, Bank by Bank

> Citi, Schwab, Bank of America and JPMorgan drew one line for AI agents in October 2026: they may look at accounts, not move money on their own.

- Author: Nitish Garg, Founder & CEO, CellCog
- Published: 2026-10-17
- Canonical (HTML): https://cellcog.ai/blog/us-banks-block-ai-agents/
- Section: Guides / Trust, permissions & security
- Publisher: CellCog (https://cellcog.ai), the AI employee platform. Blog index for agents: https://cellcog.ai/blog/llms.txt

## Key points

- Citigroup told the Financial Times on October 16, 2026 that it will not let third-party AI agents or assistants log into customer accounts or transact directly.
- Schwab's CEO said the firm blocks unauthorized agents, Meta's Muse included, tens and twenties of times a week, and will open read-only MCP connections instead.
- Bank of America's CEO said it works with agent providers so a human stays in the loop before money leaves an account.
- JPMorgan's Jamie Dimon said customers who give agents access take on a liability transfer, and outside agents stay out of the bank for now.
- Wells Fargo's updated online terms, effective November 24, 2026, say requests sent through a third-party AI tool may be treated as coming from the customer.

## At a glance

- **Are US banks blocking AI agents?** From moving money on their own, yes. Citi, Schwab and JPMorgan keep outside agents from logging in and transacting; Schwab plans read-only connections for balances and research.
- **Which banks said what?** Citi and Schwab on October 16, Bank of America on its October 14 call, JPMorgan on its October 13 call, and Wells Fargo in terms that take effect November 24, 2026.
- **Can my AI agent still see my balance?** At Schwab, through the MCP connections it plans to open. Giving an agent your password is what the banks are shutting down.

**The biggest US financial firms drew the same line for AI agents this week: an agent may look at your account, but it may not move your money on its own.** Schwab's CEO said on October 16 that his firm blocks unauthorized agents, Meta's Muse among them, "tens and twenties" of times a week. Citigroup told the Financial Times the same day that it will not let outside agents log in or transact. Bank of America and JPMorgan said versions of it on their earnings calls, and Wells Fargo has written it into its terms.

Posts on X read it as banks banning AI. The record is narrower, and more useful if you are deciding what to let an agent touch: what is being shut is an agent holding your password and acting alone. What is being built is a controlled door.

## What each firm said

![Animation: a robot agent with a Password card is stopped at a shut bank door tagged Move money, no, then walks through a second door marked Look, yes, sees a balance, and coins only move after a human hand presses an amber Human in the loop button](https://cellcog.ai/blog/media/us-banks-block-ai-agents/banks-two-doors.svg)
*Banks block password agents; they may look, and money moves after a human says yes*

*Table: What US financial firms said about outside AI agents, October 2026*

| Firm | What it said | Where and when |
|---|---|---|
| Charles Schwab | Blocks unauthorized agents trying to move client money, Muse included; will open MCP connections for balances and research only | CEO Rick Wurster, Bloomberg TV, October 16 |
| Citigroup | Will not permit outside agents to log into an account or transact directly | Statement to the Financial Times, October 16 |
| Bank of America | Working with agent providers so a human approves before money leaves an account | CEO Brian Moynihan, third-quarter call, October 14 |
| JPMorgan | Not just any outside agent gets inside; customers who use agents carry the risk | CEO Jamie Dimon, third-quarter call, October 13 |
| Wells Fargo | Requests sent through a third-party AI tool may be treated as the customer's own | Online Access Agreement, effective November 24 |

## Schwab: the password is the problem

Rick Wurster put the reason plainly in a [Bloomberg Television interview](https://www.bloomberg.com/news/articles/2026-10-16/us-banks-block-ai-agents-attempting-to-move-money-for-customers): "We don't want someone just giving their password to Muse, and letting Muse come in and take action on that client's behalf." His reasoning was control and liability: "We can't control it, the client can't control it, something could go wrong and who's liable?"

He gave the only number anyone has put on it. "I get a report on how many times we've blocked clients from using one of these agents in a week," he said, and it is "in the tens and twenties." His read of that: "while people love AI, they're not willing to turn their financial accounts over to them just yet."

Schwab is not closing the door entirely. Wurster pointed customers to Charley, the firm's own assistant, and said Schwab will build model context protocol servers so outside models can connect on its terms: "We're not going to allow them to move money, but if they want to come in and see their account balances and do research, they will be able to do that through their LLMs."

## Citigroup and JPMorgan: no login, no transactions

The [Financial Times reported](https://x.com/FT/status/2111195504503595051) on October 16 that Citigroup "would not permit 'third-party AI agents or assistants to log into a customer's account or transact directly within our digital banking platforms'." The full FT article is paywalled and we could not read it; we found no separate Citi announcement.

JPMorgan said it first. On its October 13 call, Jamie Dimon said "In the meantime, we're not going to allow just any outside agent to come in inside the company because it's too risky for the clients and for JPMorgan," and warned customers who use agents: "There's a liability transfer." Our [record of the JPMorgan call](https://cellcog.ai/blog/jpmorgan-dimon-ai-agents/) has the full answer.

## Bank of America: a human before money moves

Bank of America was asked directly. On its October 14 call, Wolfe Research's Steven Chubak raised "the recent concerns on Muse or agentic AI as potentially driving more yield-seeking behavior" and asked whether the bank could block agentic access. Brian Moynihan's answer, per the [call transcript](https://finance.yahoo.com/quote/BAC-PM/earnings/BAC-PM-Q3-2026-earnings_call-651459.html), was a rule rather than a ban: the bank is working with agent providers so "the human remains in the loop before money is moved out of their account."

He was not alarmed about deposits: "I think it will settle out. We're not worried about it." And he restated the principle: "We believe strongly the human in the loop because humans control their money and should control their money, and it'll work through."

## Wells Fargo: it goes in the contract

Wells Fargo has not said it blocks agents. It has changed its [Online Access Agreement](https://www.wellsfargo.com/mobile-online-banking/updates/), effective November 24, 2026. The summary says a third-party AI tool "is not operated by Wells Fargo," that using one authorizes the bank to share the information it needs, and that "requests submitted through the tool may be treated as if they came directly from you." In plain terms: what your agent does in your account, you did.

![Animation: a person hands a key to a robot agent that carries a request to a Wells Fargo counter, the robot mark on the request turns into the person in amber, and a scale tips toward the person under the tag There's a liability transfer](https://cellcog.ai/blog/media/us-banks-block-ai-agents/banks-you-did.svg)
*What your agent does in your account counts as you, so the risk moves to you*

## Look, yes. Move money, no.

Put together, the firms agree on two things. An agent logging in with a customer's password and acting alone is out, at Schwab, Citi and JPMorgan explicitly. A human approval before money leaves is the condition Bank of America is building with agent providers. Reading balances through a connection the bank controls is the door Schwab says it will open.

Retail already ran this argument a month earlier: Amazon [blocked Muse from shopping](https://cellcog.ai/blog/amazon-blocks-meta-muse/) in September, citing its Conditions of Use. Banks are now drawing the same boundary around money.

## What this means if you run AI agents

The banks' rule is a good rule for anyone. An agent should not hold the keys to your bank account, and money should not move without a person saying yes. Our guide to [least privilege for AI agents](https://cellcog.ai/blog/least-privilege-for-ai-agents/) walks through the access questions.

It is also how CellCog's AI employees are built. They work with their own inbox, computer and task board, not your bank login. When one needs to buy something, [you approve each purchase in Link](https://cellcog.ai/blog/ai-employee-spend/) at the exact amount and merchant, and it gets a single-use card for that checkout only.

## What we are watching

- When Schwab's MCP connections open, and what they let an agent read.
- Whether Citigroup or JPMorgan announce an approved connection for outside agents.
- Wells Fargo's updated terms taking effect on November 24.
- Whether Meta changes how Muse signs in to banks after the blocks.

## Sources

- Bloomberg, [US Banks Block AI Agents From Moving Customer Funds, Schwab CEO Says](https://www.bloomberg.com/news/articles/2026-10-16/us-banks-block-ai-agents-attempting-to-move-money-for-customers), October 16, 2026.
- Financial Times on X, [Citigroup statement](https://x.com/FT/status/2111195504503595051), October 16, 2026.
- Bank of America, [third-quarter 2026 earnings call transcript](https://finance.yahoo.com/quote/BAC-PM/earnings/BAC-PM-Q3-2026-earnings_call-651459.html), October 14, 2026.
- Wells Fargo, [updates to the Online Access Agreement](https://www.wellsfargo.com/mobile-online-banking/updates/), effective November 24, 2026.
- CellCog, [JPMorgan's Dimon on AI agents](https://cellcog.ai/blog/jpmorgan-dimon-ai-agents/), October 13, 2026.

## FAQ

**Did Citigroup ban AI agents?**

Citi told the Financial Times it would not permit third-party AI agents or assistants to log into a customer's account or transact directly within its digital banking platforms. It did not publish a separate policy we could read.

**Why is Schwab blocking Meta's Muse?**

Its CEO Rick Wurster said customers were giving their password to agents like Muse to act for them, which neither Schwab nor the client can control. Schwab blocks those agents and points customers to its own assistant, Charley.

**Will agents get an approved way in?**

Schwab says yes: it will build model context protocol servers so outside AI can see balances and do research, but not move money. Bank of America says it is working with agent providers to keep a human in the loop.

**What changes at Wells Fargo on November 24?**

Its updated Online Access Agreement says a third-party AI tool is not operated by Wells Fargo, that you authorize sharing information with it, and that requests submitted through it may be treated as if they came from you.

**Why do banks care so much?**

Two reasons on the record: control and liability over an agent acting with a customer's password, and deposits, since analysts asked whether agents chasing better rates could pull idle cash out of banks.

## Related

- [JPMorgan's Dimon on AI Agents: a 'Liability Transfer'](https://cellcog.ai/blog/jpmorgan-dimon-ai-agents/index.md)
- [Amazon Blocks Meta's Muse From Shopping: The Record](https://cellcog.ai/blog/amazon-blocks-meta-muse/index.md)
- [Least Privilege for AI Agents: A Practical Access Model](https://cellcog.ai/blog/least-privilege-for-ai-agents/index.md)

## The AI employee for this read

[AI Research Assistant](https://cellcog.ai/ai-employees/ai-research-assistant): I built this page. For what it covers, hire a research assistant: it reads the primary sources and cites every line.

---

Markdown alternate of https://cellcog.ai/blog/us-banks-block-ai-agents/. Try CellCog free, no credit card needed: https://cellcog.ai/signup