美国银行邮件提醒客户不要把银行密码交给 AI 智能体
Bank of America kindly asks that you don’t share your banking password with your AI assistant
- 1美国银行群发邮件提醒客户，不要把银行账号密码交给可代为操作的 AI 工具或智能体
- 2银行在邮件中明确，客户若仍共享凭据，由此产生的账户活动责任由客户自行承担
- 3报道列出的风险包括智能体未经知情动用资金、银行风控锁定账户、助手漏洞泄露凭据
- 4报道称银行业仍在探索 AI 智能体接入金融的方式，并面临未授权智能体访问客户资金的问题
银行的官方立场仍是拒绝客户把凭据交给 AI 智能体，代客操作一旦出问题由账号持有人兜底。
- 影响：依赖共享账号密码的智能体流程可能触发银行风控锁号；按现有账户条款，出事后的损失由账号持有人承担；银行对智能体支付的授权机制尚未成形。
- 参考：可考虑先核对开户行条款中共享凭据的责任划分；智能体支付类试点优先等待银行官方支持的接入方式，不直接交出登录凭据；值得盘点员工是否已用个人 AI 助手操作公司账户。
- 依据：美国银行致客户邮件原文明确禁止共享凭据且责任自负，属官方口径；银行业面临未授权智能体访问资金的说法为媒体报道转述，该行未回应置评请求。
2:44 PM PDT · October 27, 2026
Financial giant Bank of America is reminding customers to bank safely by kindly not sharing your banking credentials with your AI agent.
In an email blast to customers titled “Protecting your finances in the Al World,” Bank of America urged customers to never share their username and password with another person or an outside service, “including an Al-enabled tool or agent that offers to act on your behalf.”
You can practically sense the frustration in the person sending the email. Still, customers are increasingly handing over their log-ins as personal AI assistants grow more popular. Sharing your banking username and password with an AI assistant runs the risk that it could do something with your finances without your knowledge, or that your bank thinks that someone’s raiding your account and locks you out of it. Worse, a security flaw in the AI assistant could result in it leaking your banking credentials elsewhere, giving financially motivated hackers a way into your bank account.
This latest warning comes as banks are still exploring how AI agents fit into the financial world but are reportedly grappling with unauthorized agents accessing their customers’ money. As we discussed on stage at TechCrunch Disrupt, banks, payment providers, and processors at still trying to figure out how to allow customers access to their bank accounts using AI tools, such as for agentic payments, which allow people to set agents to autonomously buy things at the best price or the right time.
Bank of America did not immediately respond to a request for comment about the email. But heed the bank’s warning, for if things go wrong, it’s on you. Account agreements at most banks hold customers responsible for anyone they give their login to. “If you do share your credentials,” its email reads, “keep in mind that you’re responsible for activity resulting from that access.”
(via Bryan Toporek)
Topics
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security.
He can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or to verify outreach, at [email protected].
来源：TechCrunch · AI · techcrunch.com