Back Office BeatSubscribe

Published by J9 Systems. What's new in business tech, and what it means for yours.

From the brief of Wednesday, October 28, 2026 · No. 15

From the daily brief · AI

Bank of America: give an AI agent your login and you own whatever it does

If staff hand your online-banking password to an AI assistant to pull statements or pay bills, the bank says any loss from that access is yours.

By Carter Josephson · · 2 min read

What happened

Bank of America emailed customers a notice titled "Protecting your finances in the AI World" urging them never to share their username and password with another person or outside service, "including an AI-enabled tool or agent that offers to act on your behalf." The email adds that "if you do share your credentials, keep in mind that you're responsible for activity resulting from that access," and a bank spokesperson confirmed to TechCrunch that the email is authentic.

What it means for a 10-to-50-person business

Primary source not confirmed: the email is known from a customer's social media post and TechCrunch's report, not a Bank of America web page. If anyone in your office has given an AI assistant or browser agent the company's online-banking login to download statements, reconcile or pay bills, the bank has told you it will not cover what that agent does. Take an 18-person plumbing company where the office manager lets an AI agent log in with the owner's credentials each Friday to pull statements and queue 25 vendor payments, saving about 3 hours a week. If the agent misfires, say a duplicate $4,800 supply-house payment, or the bank's fraud system locks the account the week payroll runs, that is the business's problem. The email went to customers generally; whether your business account agreement reads the same way is worth confirming, though most banks hold the customer responsible for anyone they give a login to. Owners who only connect the bank to accounting software through the bank's own approved link, with no shared password, can ignore this.

What to do
Ask your vendor

This month, change any banking password that has been typed into an AI tool, then ask your bank's business team which connections it officially supports and whether your account agreement holds you liable for agent activity.

What it costs
What it costs
Password reset and revoking AI tool access
0.5 hr (≈ $25 at $50/hr)
Call with your bank's business banking team
0.5 hr (≈ $25 at $50/hr)
Setting up the bank feed in your accounting software instead
2 hrs (≈ $100 at $50/hr); assumes the feed is already in your plan
Statement pulls and bill pay by hand if you drop the agent, 3 hrs/wk × $35/hr
≈ $5,460/yr
Doing nothing
$0 now; any loss or lockout caused by an agent using that login is yours under the email's terms
Sources
bsky.app (primary) · TechCrunch: Bank of America kindly asks that you don't share your banking password with your AI assistant · Axios: AI agents and unauthorized access to bank accounts · U.S. Bank digital services agreement (example of customer-liability terms)

Questions owners ask

Does this apply to business accounts or only personal ones?

The email as reported does not say. Ask your bank directly; most account agreements hold the customer responsible for anyone given a login, business or personal.

Is the bank feed in QuickBooks the same as sharing a password?

Not necessarily. Many banks connect to accounting software through an approved link you authorize at the bank rather than by handing over your password. Ask your bank which method your connection uses.

Three to five of these, every weekday morning.

Related