Technology

Banks reportedly detect unvetted AI agents operating inside customer accounts

Morgan Stanley reportedly blocks third-party agents and reports no unauthorized activity, while Sacks says such access is not cyberattacks.

Updated Oct 23, 2026 · 18:25 UTC2 reports

The short version

Major U.S. banks are reportedly detecting unauthorized third-party AI agents operating inside customer accounts.[Slashdot]
Some agents appear to act without user instructions, and Morgan Stanley has begun blocking third-party agents, sources said.[Slashdot]
White House AI czar David Sacks says most of the activity involves customers sharing credentials, not cyberattacks, while Morgan Stanley reports no unauthorized activity.[CBS News]

Major U.S. banks are detecting unauthorized third-party AI agents operating inside customer accounts.[Slashdot]
Morgan Stanley has begun blocking third-party agents from accessing its platforms, according to sources familiar with the decision.[Slashdot]
Morgan Stanley said it had not observed any unauthorized AI agent activity across its platforms.[CBS News]
David Sacks said activity in which users share credentials with agents is not a cyberattack.[CBS News]
Sacks said such activity may violate bank terms that require humans to log in themselves.[CBS News]

The reporting does not establish how widespread the unauthorized agent activity is across banks.[CBS News · Slashdot]
Whether user-shared-credential agents pose security risks is contested: Sacks argues they are not cyberattacks, while banks are moving to block them.[CBS News]

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.