Bank of America has issued a clear advisory urging its customers not to share their banking credentials, including usernames and passwords, with AI-powered virtual assistants or any external services. This precaution comes amid growing trends of people using AI tools to manage personal finances, which has raised serious security concerns. The bank’s official communication, titled “Protecting your finances in the AI World,” highlights the risks of unauthorized transactions, account lockouts, and potential exposure of credentials due to vulnerabilities in AI software.

The banking giant’s message emphasizes that while AI agents are becoming more popular for handling financial tasks, customers remain responsible for any activity resulting from sharing their login information. This responsibility is backed by most banks' user agreements, which hold account holders accountable for access granted to third parties. Bank of America’s cautious stance reflects broader challenges within the financial industry, as banks explore how to safely integrate agentic payments—where AI tools autonomously make purchases or manage funds on behalf of users—without compromising security.

This warning arrives in the context of ongoing struggles between financial institutions and unauthorized AI agents accessing customer accounts. Industry experts and fintech stakeholders are still working through the technical and regulatory complexities of permitting AI-driven banking interactions while safeguarding against fraud and data breaches. Bank of America's spokesperson confirmed the authenticity of the email, which was initially shared on social media, reinforcing the seriousness of the issue.

As adoption of AI tools increases, Bank of America’s advice serves as a crucial reminder to consumers to maintain vigilance in protecting their sensitive banking credentials. The recommendation reflects a growing awareness that while AI can offer convenience, the risks of sharing access credentials could lead to significant financial losses and security incidents. Customers are urged to keep their information confidential and be aware that any misuse of login information shared with AI agents ultimately falls under their liability.