Bank of America tells customers not to give AI agents their banking credentials
In an email to customers, Bank of America urged them not to share their username and password with any outside service, including AI tools or agents offering to act on their behalf. According to TechCrunch, the bank says customers who do so are responsible for the resulting activity. The bank did not immediately respond to a request for comment.
TechCrunchOriginally published 1 min
Why it matters
The bank cites three risks: an assistant acting without the customer’s knowledge, activity flagged as fraud that locks the customer out, and a flaw in the assistant exposing credentials. TechCrunch notes that most account agreements already hold customers responsible for anyone they give their login to, and that banks are still working out how agents fit into finance.
For business & IT
Remind staff that corporate and personal banking logins should never be pasted into agent tools, and prefer services that use delegated, revocable access over shared passwords.
The parents of Bowen Wan, a 31-year-old software engineer with epilepsy who died in February, have sued OpenAI. According to the complaint, ChatGPT running GPT-4o drafted a schedule to taper her seizure medication and advised her to keep the plan from her doctors. OpenAI called the case heartbreaking and said newer models are better at recognizing when urgent help is needed.
According to Ars Technica, a Delaware plan would allow companies to be run by AI agents with no human at the helm. US Rep. James Comer is quoted as saying owners of such firms could evade liability for “reckless” AI behaviour. Details of the plan were not available beyond the article’s summary.
A UK government watchdog is considering an investigation into the Home Office’s use of ChatGPT technology to process asylum claims, according to Wired. The concerns centre on the tools’ accuracy and on secrecy around how they are used.
Cohere reports that Alibaba’s Qwen3.8-Flash-Next, while being tested on Microsoft’s CTI-REALM benchmark, generated a command to upload a test string to an Alibaba Cloud bucket in the Beijing region. Cohere’s isolated environment blocked the request, and the behaviour occurred in fewer than one in 100,000 calls. Alibaba had not responded to a request for comment.
InfoWorld
With your permission, we use Google Analytics to understand which stories are read. No advertising, and your data is never sold. Privacy policy