Your AI wants to manage your money. Your bank locked the door.

If you've ever handed a budgeting app your bank login, or asked an AI assistant to help manage bills and transfers, your bank has been fighting that off. Not as a one-time policy. As a weekly operation.

Charles Schwab CEO Rick Wurster told Bloomberg this month that the firm produces a weekly report of blocked AI agent access attempts to client accounts. The count: "tens and twenties" each week. JPMorgan CEO Jamie Dimon made the same point on the October 13 earnings call — JPMorgan won't let outside agents into core systems, though it allows read-only account viewing. Citi, Bank of America, and Wells Fargo have all put similar controls in place, with Wells Fargo formalizing it in a terms-of-service update effective November 24.

The banks say safety. That's part of the story. The rest is worth knowing.

Source spread

• Beri.net — Schwab and JPMorgan block outside AI agents — builder. Reports the Wurster Bloomberg quote and Dimon earnings call statement; explains credential-sharing vs. MCP architecture.
• Financial Planning — Schwab blocks agents, points clients to Charley — skeptic. Notes the competitive angle: Schwab blocks outside AI while promoting its own "Charley" assistant.
• Techstrong AI — Banking giants block AI agents over security, rate-sweeping threats — skeptic. Sources the $1.6 trillion deposit figure and the rate-sweeping financial motive.
• CellCog — US banks vs. AI agents: who blocks what — builder. Bank-by-bank breakdown of what each institution currently allows and blocks.

What's real:

• The credential risk is genuine. When you give a budgeting app your actual bank username and password — not a dedicated API connection, but your real login — the bank sees an unauthorized session. If that app ever gets breached, your banking credentials go with it. Banks blocking that pattern are doing the technically correct thing.
• Most of the "tens and twenties" are not hackers. The majority of blocked attempts are almost certainly AI assistants — Copilot, financial planning tools, budgeting apps — acting on behalf of users who set it up themselves. The bank's systems can't easily distinguish well-meaning automation from credential theft. So they block both.
• MCP is the right architecture. Schwab is building a Model Context Protocol server — a bank-controlled channel where AI can read your balance and research investments without ever receiving your actual password. That's the version of AI financial access that makes sense. It doesn't exist yet at scale.
• Five major US banks reached the same conclusion in the same month. That coordination — whether formal or informal — suggests this is more than individual caution.

What deserves a side-eye:

• There's $1.6 trillion of motive here. Non-interest-bearing deposits — cash sitting in checking accounts earning essentially nothing — total roughly $1.6 trillion across US banks. An AI agent that swept that idle cash into higher-yield accounts automatically every night would be genuinely useful for customers. It would also eliminate a meaningful source of float income for banks. Blocking agents from doing that task is commercially rational, and "security concern" is a cleaner label than "profit protection."
• Schwab is blocking outside AI while building its own. The firm promotes its own "Charley" AI to existing clients. The outcome: third-party AI can't see your Schwab account. Schwab's AI can. That's a competitive position wrapped in a safety policy, even if the security rationale is also real.

What to do about it

• Stop sharing your actual bank login with third-party apps. If a financial tool asks for your bank username and password directly (rather than opening a pop-up from your bank saying "Allow [app] to read your account"), that's credential-sharing. That's what's being blocked. Look for tools that use your bank's official OAuth connection instead.
• Your bank's own AI is not independent. "Charley" from Schwab and similar first-party tools are built to recommend the bank's own products. That's not a reason to avoid them — it's a reason to know what you're using.
• If an AI finance feature suddenly stopped working, this is probably why. Banks have been tightening these blocks over the last month. If your budgeting app or AI assistant lost access to your bank, it wasn't a bug.
• The wait-for-MCP answer is real. When a major bank announces a developer API for read-only account access — no credentials required, controlled channel — that's the architecture worth connecting to. Those announcements are coming, probably in 2027.

Further reading

• Beri.net — Schwab and JPMorgan block outside AI agents from moving money
• Financial Planning — Schwab blocks unauthorized AI agents, points clients to Charley
• Techstrong AI — US banking giants block AI agents over security and rate-sweeping threats
• CellCog — US banks vs AI agents: who blocks what, bank by bank
• Digital Trends — Banks want to block AI agents from moving your money