---
title: JPMorgan bars outside AI agents from credential-based account access | ctxsec
url: https://ctxsec.com/items/jpm-outside-ai-agents
description: ""
status: "confirmed (earnings call)"
published: 2026-10-13
---

> 

[← Context & Harness Attacks](/context) · [markdown](/items/jpm-outside-ai-agents.md)

confirmed (earnings call)

2026-10-13

### JPMorgan bars outside AI agents from credential-based account access

On JPMorgan's Q3 2026 earnings call (Oct 13), Jamie Dimon said the bank will not allow arbitrary outside AI agents inside the company because of "rogue agent" risk, and warned customers of a liability transfer if they hand agents their credentials. CFO Jeremy Barnum said money-movement services that rely on credential sharing or screen scraping are blocked where possible; read-only aggregator access through open-banking style channels can remain. A spokeswoman told CNBC the bank prohibits outside parties from signing in with collected customer credentials, while supporting safer "agentic connections" (no timeline). Internal/customer-facing agents and a Smart Cash pilot continue. Agent-identity angle for banks: who owns the agent and the channel, not just CVSS-style bugs.

Sources: [Banking Dive (Dimon quotes)](https://www.bankingdive.com/news/jpmorgan-dimon-ai-agents-bank-customers-liability-transfer/832870/) · [Q3 2026 earnings call transcript](https://stockanalysis.com/stocks/jpm/transcripts/686357-q3-2026/) · [American Banker (Barnum on credential sharing)](https://www.americanbanker.com/news/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents) · [Quartz / CNBC confirmation](https://qz.com/jpmorgan-blocking-outside-ai-agents-customer-accounts-101326)