A striking contradiction has taken hold on Wall Street. JPMorgan Chase and Citi — two of the most powerful financial institutions on the planet — are aggressively deploying artificial intelligence across their own internal operations while simultaneously slamming the door on customers who wish to use external AI agents to manage their own accounts. The policy is not merely inconsistent. It is, depending on your vantage point, either a legitimate act of risk governance or one of the more audacious double standards that American banking has produced in years.
The episode crystallised this week when JPMorgan Chase Chief Executive Jamie Dimon moved to bar outside AI agents — with Meta's Muse explicitly named as an example — from gaining access to JPMorgan customer accounts. The reasoning offered from Dimon's corner was blunt: "You don't want rogue agents." Citi followed, becoming the latest major United States bank to impose similar restrictions on AI agents attempting to interface with customer accounts. The list of participating institutions continues to grow, and the pattern is unmistakable.
On the surface, the security rationale is not without merit. Autonomous AI agents capable of executing financial transactions, querying balances, and potentially initiating transfers present a genuinely novel threat surface. Unlike a human logging in through a browser, an AI agent can act at machine speed, potentially expose authentication credentials to third-party systems, and operate with a level of autonomy that existing fraud-detection infrastructure was never designed to intercept. The phrase "rogue agents" is not mere rhetoric — it gestures at a real and largely unresolved problem in how financial institutions extend trust to non-human actors.
But the hypocrisy that commentator Chris Skinner of The Finanser flagged this week is not imagined. It is structural. JPMorgan Chase has invested billions of dollars into its own artificial intelligence capabilities, using machine learning models to make credit decisions, detect fraud, optimise trading strategies, and automate customer service interactions. Citi has pursued a parallel course. These are institutions that have staked a significant part of their future competitive positioning on the proposition that AI, when controlled and deployed by the bank itself, is transformative and trustworthy. The moment a customer attempts to leverage that same category of technology to act on their own behalf — to instruct an AI agent to find a better savings rate, execute a payment, or analyse spending — the institutional answer becomes: not permitted.
The asymmetry cuts to a deeper question about the evolving relationship between banks and their customers. European Banking Authority frameworks and broader open-banking mandates across multiple jurisdictions have, over the past decade, progressively shifted the regulatory presumption toward customer data sovereignty — the idea that financial data belongs, in a meaningful sense, to the customer rather than the institution holding it. If that principle is accepted, then a customer's decision to authorise an AI agent to act on their behalf is not categorically different from authorising any other third-party application through a regulated application programming interface. The American banking establishment has never been entirely comfortable with that framing, and the current wave of agent-blocking policies makes that discomfort explicit.
There is also a competitive dimension that deserves frank acknowledgement. The technology companies building these external AI agents — Meta among them — are not neutral parties. They are entities with their own ambitions in financial services, their own data-accumulation incentives, and their own interest in inserting themselves between the bank and the customer relationship. From that perspective, a bank restricting Meta's Muse from touching its customer accounts is not merely a cybersecurity decision; it is a competitive one. The line between protecting the customer and protecting the franchise is not always easy to locate, but institutions of this scale are rarely unconscious of it.
What regulators choose to do with this emerging standoff will matter enormously. If autonomous AI agents become a standard feature of consumer financial life — and the trajectory of the technology strongly suggests they will — then the question of who controls their access to banking infrastructure cannot be resolved unilaterally by incumbent institutions acting in their own interest. Standards for agent authentication, liability allocation when an AI agent causes financial harm, and the scope of a customer's right to delegate account authority to a machine will all require clear regulatory frameworks. At present, those frameworks do not exist in any coherent form in the United States.
What This Means for the Industry
The actions taken by JPMorgan Chase and Citi this week are a preview of one of the most consequential battles in retail banking over the next decade. The institution that successfully defines the terms on which AI agents interact with financial accounts — whether that is an incumbent bank, a technology platform, or a regulator — will hold extraordinary influence over the future architecture of personal finance. For now, the banks have moved first, drawing lines in the name of security while the more complex questions of customer autonomy, competitive fairness, and regulatory adequacy wait for answers that no one has yet supplied. That silence, more than any single policy decision, is what should concern observers of this industry most.
Written by the editorial team — independent journalism powered by Codego Press.