JPMorgan Chase is blocking outside AI agents from logging in to or acting on customer accounts, CEO Jamie Dimon said Tuesday, citing security risks from “rogue agents.”
The move puts banks and consumer AI assistants on a collision course over who controls access to financial data. BeInCrypto’s latest report on the State of AI Agent Payments 2026 found that agentic payments are mostly being used for microtransactions, but not within institutions at scale.
What JPMorgan Decided and Why
An AI agent is software that carries out tasks for a user, such as checking balances or booking travel.
JPMorgan see such agents as a risk when they log in with a customer’s banking credentials.
“We’re not going to allow just any outside agent to come in inside the company because that’s just too risky for clients and for JPMorgan… You don’t want rogue agents,” Dimon said during JPMorgan’s third-quarter earnings call.
Several points explain the decision:
- JPMorgan will not let outside AI agents log in to or act on customer accounts.
- The bank says outside agents are too risky for clients and for JPMorgan.
- It blocks third-party agents that try to obtain customers’ banking credentials.
- It still supports customer-authorized data sharing through open banking providers.
- The stakes are high: $15.3 billion in third-quarter net income and $5.1 trillion in total assets as of Sept. 30.
- A Cloud Security Alliance note says a campaign used three open-source AI agents to breach at least 27 organizations.
Together, these points explain why the bank is drawing a firm line.
Can AI Agents Still Manage Your Money?
Some firms already allow them. Germany’s Scalable Capital, for example, opened its platform to ChatGPT, Claude, and Grok in August.
Users could analyze portfolios and place trades through prompts. However, they had to approve every trade, and the assistants could not make payments or withdraw money.
Meta’s Muse follows a similar model. Launched in September, it connects to financial accounts through Plaid, offering guidance on balances, transactions, and investment holdings.
Retail is pushing back harder. On September 20, Amazon began blocking Muse from its site. As a result, shoppers who use it now see pop-ups saying the use violates Amazon’s terms.
According to Fortune, Meta declined to comment on whether Muse could keep offering financial help if more banks block outside agents. Meta is developing Poppy, a personal agent protocol with Sierra that tells companies when an agent acts for a customer.
Dimon, for his part, warned that more people relying on these agents would raise the risks for banks and customers. Still, he added that JPMorgan is building its own tools to protect customers.
