Recently, Bank of America sent customers a warning email titled “Protecting Your Finances in the World of Artificial Intelligence,” explicitly advising them not to share their bank account usernames, passwords, or related credentials with any third-party AI tools or proxy services claiming to act on behalf of individuals.
With the growing popularity of personal AI assistants and proxy payment tools, some users have begun entrusting their login information to AI assistants to facilitate autonomous shopping or identify the best prices.
However, this practice carries significant security and compliance risks: not only could an AI perform financial transactions without the user’s knowledge, but it might also trigger bank fraud-detection systems, resulting in account lockouts. Even more concerning, vulnerabilities within the AI assistant itself could lead to sensitive credentials being leaked, providing opportunities for hackers to gain unauthorized access. In its statement, Bank of America emphasized that, under most financial institutions’ account agreements, customers are personally responsible for any consequences arising from the disclosure of their login information.
Currently, traditional financial institutions and payment processors are accelerating efforts to explore the compliant integration of AI proxies into the financial sector; however, striking a balance between the convenience of intelligent services and the absolute security of funds remains a critical issue that the entire industry urgently needs to address.