BankingNewsAI Daily Brief ·
JPMorgan blocks outside AI agents from accessing customer accounts
Banking AI
Financial institutions & fintech technology
JPMorgan blocks outside AI agents from accessing customer accounts
For the head of digital banking at a regional bank
JPMorgan lets outside agents read balances but not move money, while piloting Smart Cash to move customer funds itself. If your bank has no written agent policy, your customers' passwords are the policy.
An AI agent is software that acts for a customer: it checks balances, pays bills and moves cash. JPMorgan now bans agents that sign in with the customer's own password. Agents may still read balances through Plaid, view-only. They may not transfer funds or settle bills. A house-sitter may look through the window but does not get the key. The model leaks. Dimon says customers who use these tools anyway accept a "liability transfer," which shifts the loss but does not stop the login. Why would a bank refuse a tool customers want? Apollo's Torsten Slok offers one answer: agents could pull low-yielding deposits elsewhere. JPMorgan's own Smart Cash pilot shifts funds toward higher yield, inside its own walls. Your bank already has an agent policy. It is just unwritten.
→ Action
Digital banking and legal: Write a policy on credential-based agent logins that separates read-only aggregator access from money movement and states who bears losses.
Full story →Read article → from Qz
Amex introduces framework to stop AI agents making unauthorized purchases
For the card issuing and disputes lead at a regional bank
Amex will hold a customer-signed record of what the agent was told to buy. When an agent buys the wrong shoes on your card, will you hold anything beyond a chargeback? Ask your network who writes that record.
Amex's Intent Intelligence Framework writes down what a customer told an AI agent to buy before the agent pays. A Create Intent API captures the instructions: merchant, maximum budget, product preferences. The customer authenticates and signs off. Amex then issues an Intent ID and a Proof of Intent Token, which gets a digital payment credential the agent uses instead of the real card number. Think of a shopping list signed at the door. If the list says white Nike size 9 and the agent reaches for Adidas, Amex can stop the sale. The list is only as good as the agent's transcription, and Amex says disputes have not risen yet. The exception is autonomous reorders of paper towels, where no human checks. Disputes will turn on who kept the receipt.
→ Action
Card disputes: Ask your network and processor whether agent-initiated transactions carry a customer-signed intent record usable as chargeback evidence.
Full story →Read article → from TechCrunch
General AI
Large language models & AI infrastructure
Meta launches Muse Wonder AI models, plans to power its Muse agent
For the head of deposit strategy at a regional bank
Meta wants its consumer agent running on models it says match OpenAI's and Anthropic's best, with no date. If agents start shopping savings rates for customers, your rate-sensitive deposits answer to software, which has no habits.
Meta released two AI models, Muse Wonder and Muse Wonder Full, to subscribers of its Muse Code product today. It says Wonder will later run inside Muse, its consumer agent, starting with paying users. No timeline. Think of the model as the engine and the agent as the car customers already drive. Meta says the new engine matches GPT-6 Astra, Claude Opus 5.5 and Claude Fable 5.1, but on its own internal tests, and the same agent sent a YouTuber's address to a stranger in September. So why care now? Wonder is also sold through the Meta Model API, so a fintech could build a rate-shopping assistant on it today. Deposit pricing leans on customers being too busy to compare. Software is never too busy.
→ Action
Deposit pricing: Run a runoff scenario for rate-sensitive savings balances in which AI agents compare rates and move money for customers.
Full story →Read article → from The Verge
Get this in your inbox every morning
Free · No spam · Unsubscribe anytime