Schwab and JPMorgan Shut Out AI Agents That Try to Move Customer Money

Banks block AI agents from customer accounts more often than most users realize, and two of the largest US financial firms have now said so in public. Charles Schwab and JPMorgan Chase both confirmed this month that outside AI agents cannot move money on their platforms.

The statements land as personal agents such as Meta’s Muse start booking, buying and paying on their users’ behalf. Finance is where that ambition meets its hardest wall.

What did Schwab and JPMorgan say?

Schwab CEO Rick Wurster told Bloomberg Television on October 16 that the brokerage blocks outside agents trying to move client money, Muse included. He receives a weekly report on blocked attempts, TNW reported.

His main concern is credentials. Customers hand their passwords to an agent, which then acts as them. “We can’t control it, the client can’t control it,” Wurster said.

JPMorgan CEO Jamie Dimon said on the bank’s October 13 earnings call that it will not let outside AI agents act inside its systems, warning about “rogue agents.” JPMorgan does allow some third-party tools to view account data. They cannot send money or pay bills.

This is not a ban on AI

Neither firm is rejecting AI outright. Schwab lets outside AI tools connect through MCP servers set up under its own rules. Those tools can check balances and run research, but they cannot move money. Schwab also launched its own assistant, Charley, on September 30 and wants clients to use it.

The line both firms are drawing is the same. Reading is acceptable. Acting is not, at least for agents the institution does not control.

Why banks block AI agents for now

The core issue is liability. When an agent makes a bad transfer, it is still unclear in the US who pays, and Congress is debating the question. Regulators in the US and Europe are also pressing banks on AI agents and cyber risk. Until those answers arrive, a bank gains little by accepting the risk.

This is the gap the Personal Agent Protocol from Meta and Sierra is trying to fill, with OAuth sign-in and customer-chosen read-only or write access. Neither bank is among its named partners.

What This Means for Fintech and Agent Builders

For companies building agents, moving money is the hardest permission to earn. Products that rely on a user’s password to drive a bank’s website will keep hitting walls. The workable route runs through approved connections, scoped permissions and a clear record of who authorized each action.

For bank and fintech leaders, the open question is how long a blanket block can last. Customers who rely on agents elsewhere will expect them to work with their money too. Firms that offer a controlled path, as Schwab has begun to with read-only access, will be better placed than those that only say no. Where human sign-off should stay in the loop is the same question we examined in The AI Judgment Gap, and it connects to the wider shift in Agentic AI Trends 2026.