What is screen scraping: handing over your password so software logs in as you, and why banks now block AI agents
Screen scraping is when you give a third party your username and password so its software can log in as you, read the screen and press buttons. Korea banned it for financial MyData services from 4 p.m. on January 5, 2022 and required APIs; in October 2026 Schwab and JPMorgan began blocking AI agents that use browser automation, which works the same way
The three lines
- Definition — software logs in with your credentials and reads or acts on the screen
- Alternative — APIs with scoped, revocable tokens instead of passwords
- Status — banned in Korea's MyData since 2022; US rule stalled; banks blocking agents
Key questions
- What is screen scraping in banking
- **Using a customer's login to access a bank's website and extract data.** | Item | Detail | |---|---| | Needs | Customer credentials | | Does | Log in, read screens, click | | Bank sees | Cannot tell customer from proxy | | Replacement | Open APIs |
- Screen scraping vs API
- **Scraping hands over the whole key ring; an API issues a pass for specific doors.** | | Scraping | API | |---|---|---| | Shared | Password | Token | | Scope | Whole account | Consented items | | Revoke | Change password | Cancel token | | Bank knows who | No | Yes |
- Korea MyData screen scraping ban
- **From 4 p.m. on January 5, 2022, licensed financial MyData providers had to use APIs; 33 providers started under the new regime.**
Screen scraping is handing someone your whole key ring. A program takes your username and password, logs in as you, reads balances off the screen and can press buttons for you. Early budgeting apps worked this way.
The term is back. In October 2026, Schwab and JPMorgan said they block outside AI agents that log in with customer credentials or browser automation. An agent that looks at a page and clicks is screen scraping for the AI era.
1. Scraping vs API
| Step | Screen scraping | Open API |
|---|---|---|
| Connect | You give the app your password | You consent on the bank's own screen |
| Access | App poses as you | Bank issues a scoped token |
| Data | Text pulled from screens | Structured, consented fields only |
| Scope | Everything you can do | Agreed items and period |
| Stop | Change your password | Revoke the token |
| Site redesign | Breaks | Unaffected |
2. Why it is risky
| Risk | Detail |
|---|---|
| Concentration | Thousands of passwords in one vendor's servers |
| Invisibility | Banks can't tell you from the proxy, weakening fraud checks |
| Over-permission | Read access comes bundled with transfer power |
| Liability gap | Unclear who pays after a mistake |
AI agents add judgment, and therefore misjudgment, plus exposure to hidden instructions on web pages.
3. Where countries stand
| Country | Measure | Date | Status |
|---|---|---|---|
| South Korea | Scraping banned for financial MyData; APIs mandatory | Jan 5, 2022, 4 p.m. | 33 providers launched on APIs |
| United States | CFPB Section 1033 personal financial data rule | Finalized 2024 | Enjoined amid bank litigation; CFPB rewriting it |
| US firms | Schwab, JPMorgan block credential-based agents | Oct 2026 | Read-only sharing continues |
Korea settled this by regulation four years ago, after a pilot from December 1, 2021. In the US, the rule meant to push data sharing onto APIs is stalled in court, and banks are drawing their own lines in the gap.
4. FAQ
| Question | Answer |
|---|---|
| Should I give an AI assistant my bank password? | Not advisable; it may breach terms and complicate reimbursement |
| Will agents ever handle banking? | Via bank-built APIs and in-house assistants, starting with read-only |
| Is scraping illegal? | Depends on sector, country and terms; banned for Korea's financial MyData |
Sources
- Korea Financial Services Commission — API-based financial MyData full launch (2022-01)
- Byline Network — API-based MyData launches (2022-01-05)
- Open Banking Tracker — Section 1033 status
- Orrick RegFi — CFPB's 1033 Rule: Where to From Here?
- Financial Planning — Schwab blocks unauthorized AI agents (2026-10-15)