AI at Work

J.P. Morgan blocks third-party AI agents from customer accounts

J.P. Morgan will prohibit outside AI agents from accessing customer accounts to mitigate agentic risk. The decision marks a strategic divergence from competitors like Shopify that are opening their platforms to third-party automation.

· 1 source · Banking security

J.P. Morgan announced it will block third-party AI agents from accessing customer accounts, a move designed to mitigate the risks associated with autonomous software. CEO Jamie Dimon stated, "We're not going to allow just any outside agent to come inside the company, because it's just too risky for clients and for JPMorgan." CFO Jeremy Barnum confirmed the bank is implementing these restrictions to protect customers, noting that the institution will not indemnify faulty agents. A spokesperson told CNBC that while the bank supports secure data sharing through open banking providers, it does not permit third parties to log in with customer credentials. This policy effectively limits agents to read-only tasks, such as budgeting, while preventing them from executing transactions like bill payments. Dimon argued that customers do not fully understand the liability transfer involved in such arrangements. This approach contrasts sharply with the strategy of companies like Shopify, which opened its API to agents from any provider, including Muse, to facilitate agentic shopping. The move highlights a split in the industry, with J.P. Morgan, Amazon, and eBay locking down platforms to control customer relationships, while Shopify and Salesforce adopt headless interfaces to accommodate third-party agents. Bob Su of AI for Finance argued that while banks are correct about the risks, they are wrong about the fix, suggesting that scoped permissions are a better solution than total blockades.