JPMorgan is refusing to let outside AI agents move money — but balances can still be read
The bank still allows only read access to balances via services like Plaid — no agent gets to move money. Jamie Dimon warns customers of a "liability transfer," and the CFO admits the block isn't airtight.
JPMorgan Chase is no longer letting external AI agents access customer accounts and act on customers' behalf. CEO Jamie Dimon said so on Tuesday, October 13, 2026, on the bank's Q3 earnings call, according to CNBC, citing risks to both customers and the bank — amid a wave of autonomous personal assistants from companies like Meta.
"We're not going to allow just any … outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan," Dimon told analysts on the earnings call (CNBC via MSN).
An unnamed spokesperson for the bank confirmed the line to CNBC: "Because it is not safe, we do not permit third parties to access accounts by obtaining customers' banking credentials and logging in on their behalf." She gave no timeline for when, or whether, the bank might allow safe, direct agent interaction.
What is actually blocked — and what remains possible
The block separates seeing from doing. According to CNBC's reading of the spokesperson's statements, AI agents can still retrieve certain customer data from Chase accounts in read-only mode — balances, for example — if a connectivity service like Plaid holds the user's credentials. But the agents cannot move money or pay bills.
Those are precisely the actions that make an agent useful, as CNBC points out: an assistant that can only read your balance can explain where your money sits — but not move it. With this, JPMorgan is riding a central dividing line in the emerging agent economy: data visibility is tolerated, action execution is denied.
The bank also justified the move on principle, not just risk: safe, customer-approved data sharing and read access via open banking is supported, the bank says, while logging in on customers' behalf with their credentials is not.
Why now: Muse, Instinct, and deposit fears
The timing is not accidental. Meta launched its Muse agent on September 22, and the app topped the download charts in September, according to CNBC. In its wake, bank stocks have fallen further — already weakened by bond-market jitters — and CFO Jeremy Barnum acknowledged the market signal on the earnings call: the bank had seen "a little bit of a response in bank stocks around these launches," according to Business Insider (Business Insider).
The background to the deposit anxiety is concrete: the standard Chase Savings account yields 0.01 percent annually, versus roughly 4 percent elsewhere, according to Business Insider. If an agent could automatically move money to wherever the yield is highest, the deposit base — the bank's cheapest funding — would be vulnerable. It should be noted that this deposit-flight framing is Business Insider's analysis, not the bank's own explanation for why the stocks have fallen.
The block also hits a new generation of players. Instinct, a text-based digital concierge from San Francisco startup Spear Street Technology, launched on an invitation basis earlier this year. The company, founded last year, reached a $10 billion valuation last month, according to CNBC. Meta's Muse and Instinct are the two agents explicitly named in the story.
The bank's own answer: Smart Cash
Even as the door closes on external agents, JPMorgan is piloting an internal tool with similar ambitions. In recent weeks the bank has started a targeted pilot of Smart Cash, which is meant to predict a user's cash flow and move funds to maximize returns, Barnum said on Tuesday, according to CNBC.
Precision is worth insisting on here: the bank itself presents Smart Cash as a cash-flow tool. The reading of the pilot as a defensive move against external agents is CNBC's analysis — not a claim by JPMorgan.
"Liability transfer" — a warning, not a policy
Dimon's most quoted remark was aimed at customers themselves. "If people use them, they should understand the risk," he said, according to Banking Dive. "There's a liability transfer. They should understand the liability transfer. If data is being misused, they should understand it's being misused" (Banking Dive).
He tied the warning to the bank's own development: "We've got to make sure we protect our client the right way. So we're building tools to do that, too. In the meantime, we're not going to allow just any outside agent to come in inside the company, because it's too risky for clients and for JPMorgan."
It is important to keep this at the right level: the "liability transfer" is Dimon's characterization on an earnings call — not a documented legal or contractual change. How liability is actually allocated when a third-party agent misuses customer data remains unresolved, both contractually and regulatorily.
The block isn't airtight
Enforcement isn't absolute either. Barnum admitted the bank blocks access only "to the extent that we're able to block those," according to Business Insider. And he defended the resistance to the techniques the agents rely on: "I think right now some of the services that provide it do it through credential sharing, and we have a long history of being against that way of doing things, screen scraping and so on," he said. "It's not secure."
In other words: the bank refuses to let third parties log in with customer credentials, but it cannot guarantee that no one does — and much of the data access happens anyway through that same credential sharing, brokered by links like Plaid.
A pattern, not a one-off
This is not the first time JPMorgan has slowed external AI. In June 2026, the bank restricted employees' access to Anthropic's Claude in Hong Kong, citing licensing and compliance questions, according to Crypto Briefing (Crypto Briefing). The bank has also previously clashed with data intermediaries like Plaid over access fees — a history that puts today's balancing act in perspective: the bank tolerates Plaid-like read access it has long fought economically.
Open questions
Several things remain unresolved. There is no timeline for when — or whether — JPMorgan will allow safe, direct agent access; the spokesperson offered none, according to CNBC. It is unclear how effective the block is in practice, given Barnum's own caveats. The liability allocation Dimon points to has yet to be reflected in documented policy. And all quotes in the story come via secondary sources — CNBC, Banking Dive, and Business Insider — not from the original transcript of the earnings call.
What remains is one of the world's largest banks drawing a deliberate line: the agents can look, but not act. For now.