Bank of America 提醒客户勿将银行密码提供给 AI 智能体
Bank of America kindly asks that you don’t share your banking password with your AI assistant
Bank of America 向客户发出安全提醒，要求不要把银行用户名和密码提供给 AI 智能体或代为操作的外部服务。银行表示，共享凭据可能让智能体在客户不知情时操作账户、触发账户锁定，或因安全缺陷流向黑客；一旦共享，客户需对由此产生的活动负责。文章还提到，银行正探索智能体支付等应用，据报道仍在处理未经授权的智能体访问客户资金的问题。
梳理了共享凭据、账户锁定、凭据泄露与客户责任之间的风险链条，为金融场景的 AI 智能体权限边界提供了具体参考。
2:44 PM PDT · October 27, 2026
Financial giant Bank of America is reminding customers to bank safely by kindly not sharing your banking credentials with your AI agent.
In an email blast to customers titled “Protecting your finances in the Al World,” Bank of America urged customers to never share their username and password with another person or an outside service, “including an Al-enabled tool or agent that offers to act on your behalf.”
You can practically sense the frustration in the person sending the email. Still, customers are increasingly handing over their log-ins as personal AI assistants grow more popular. Sharing your banking username and password with an AI assistant runs the risk that it could do something with your finances without your knowledge, or that your bank thinks someone’s raiding your account and locks you out of it. Worse, a security flaw in the AI assistant could result in it leaking your banking credentials elsewhere, giving financially motivated hackers a way into your bank account.
This latest warning comes as banks are still exploring how AI agents fit into the financial world but are reportedly grappling with unauthorized agents accessing their customers’ money. As we discussed onstage at TechCrunch Disrupt, banks, payment providers, and processors are still trying to figure out how to allow customers access to their bank accounts using AI tools, such as for agentic payments, which allow people to set agents to autonomously buy things at the best price or the right time.
Bank of America did not immediately respond to a request for comment about the email. But heed the bank’s warning, for if things go wrong, it’s on you. Account agreements at most banks hold customers responsible for anyone they give their log-in to. “If you do share your credentials,” its email reads, “keep in mind that you’re responsible for activity resulting from that access.”
(via Bryan Toporek)
Topics
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security.
He can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or to verify outreach, at [email protected].
来源：TechCrunch · techcrunch.com