Schwab and JPMorgan block outside AI agents from logging in as customers and moving money
In mid-October 2026, Charles Schwab and JPMorgan Chase said they block outside AI agents that log into customer accounts using customers' credentials or browser automation. Read-only data sharing continues, but moving money stays with the firms' own tools, because no law yet says who is liable when an agent makes a mistake
The three lines
- Blocked — agents using customer logins or browser automation
- Allowed — read-only sharing; in-house assistants like Schwab's Charley
- Why — unresolved liability; critics add a business motive over idle cash
Key questions
- Schwab blocking AI agents
- **Schwab blocks agents that use client credentials or browser automation.** | Item | Detail | |---|---| | Blocked | Credential sharing, browser automation | | Alternative | In-house assistant Charley (announced Sept 30) | | Outside LLMs | Secure read access planned | | Moving money | Not for outside AI |
- Jamie Dimon AI agents JPMorgan
- **On the October 13 earnings call, Dimon said JPMorgan won't let 'just any outside agent' in.** | Item | Detail | |---|---| | Quote | 'Too risky for clients and for JPMorgan' | | Blocked | Third-party agents seeking bank credentials | | Kept | Customer-authorized open-banking sharing (e.g. Plaid) |
- Why banks block AI agents
- **No one has settled who pays when an agent errs.** | Issue | Status | |---|---| | Liability | No federal rule; Congress still debating | | Security | Credentials held by third parties | | Business | Agents could move idle cash (Schwab sweep ~$493B) |
AI agents have reached brokerage accounts, and the big firms are shutting the door. Schwab CEO Rick Wurster said in mid-October 2026 that the firm blocks outside AI agents from using clients' login credentials or browser automation. JPMorgan's Jamie Dimon told analysts on the October 13 third-quarter call that the bank won't let "just any outside agent" in, calling it "too risky for clients and for JPMorgan."
The trigger is Meta's Muse assistant, launched in September, which connects to bank accounts through Plaid and shops on users' behalf. Amazon began blocking it on September 20.
1. Where the line sits
| Charles Schwab | JPMorgan Chase | |
|---|---|---|
| Blocks | Credential use, browser automation | Third-party agents seeking bank logins |
| Allows | Secure read access for outside LLMs (in development) | Customer-authorized open-banking sharing |
| Own tool | Charley assistant (Sept 30) | Internal protections in development |
| Money movement | Not for outside AI | Not for outside agents |
The rule is simple: look, don't move. Schwab plans to let outside models view balances and eventually help with trades, but says moving money out carries too much risk.
2. Why — liability, security and deposits
| Reason | Detail |
|---|---|
| Liability | Wurster: "We can't control it, the client can't control it, something could go wrong and who's liable?" |
| Law | Federal AI-agent liability rules remain under debate in Congress |
| Security | One campaign used three open-source agents to breach at least 27 organisations (Cloud Security Alliance) |
| Business | Schwab Q3 net interest revenue ~$3.48B, much of it from ~$493B in cash sweeps |
Critics point to that last row. "An outside agent serves the client, while Charley serves Schwab," said Tim Welsh of Nexus Strategies. Wurster counters that clients who trade with AI keep more cash at Schwab, not less.
3. Who else is drawing lines
| Firm | Response |
|---|---|
| Amazon | Blocks Meta's Muse since Sept 20 |
| Citi, Bank of America | Reported restrictions (single source) |
| Scalable Capital (Germany) | Opened to ChatGPT, Claude and Grok in August, with per-trade approval and no withdrawals |
| Meta | Declined to say whether Muse keeps financial features if more banks block it |
The pattern mirrors what Korea settled in 2022, when it banned "screen scraping" for licensed financial MyData services and forced providers onto APIs; see our explainer "What is screen scraping."
4. What remains unconfirmed
- Schwab's block counts are anecdotal.
- Citi and BofA have not confirmed publicly.
- No law yet assigns responsibility when an agent moves money wrongly.
Sources
- Financial Planning — Schwab blocks unauthorized AI agents, points clients to 'Charley' (2026-10-15)
- Yahoo Finance (BeInCrypto) — JPMorgan Blocks Outside AI Agents From Customer Accounts (2026-10-17)
- Digital Trends — US banks want to block AI agents from moving your money
- OnInvest — Citigroup and BofA are the latest U.S. banks to restrict AI agents