JPMorgan Won't Let Outside AI Agents Like Muse Operate Inside Customer Accounts
Jamie Dimon used the bank's third-quarter earnings call to draw a hard line on agents touching customer accounts, warning of 'rogue agents' and a 'liability transfer' for users who connect them anyway.

JPMorgan Chase will not let outside AI agents operate inside customer accounts, CEO Jamie Dimon said Tuesday on the bank’s third-quarter earnings call, in a direct response to the arrival of autonomous assistants like Meta’s Muse and Spear Street Technology’s Instinct.
“We’re not going to allow just any … outside agent to come in inside the company, because it’s just too risky for clients and for JPMorgan,” Dimon told analysts, according to CNBC. “You don’t want rogue agents, and it could be thousands of them.”
The restriction means agents cannot obtain customers’ banking credentials and log in to act on their behalf. A JPMorgan spokeswoman confirmed the bank currently blocks external AI agents from taking actions for retail customers, saying, “Because it is not safe, we do not permit third parties to access accounts by obtaining customers’ banking credentials and logging in on their behalf.”
Agents remain limited to read-only access: some account data, such as balances, is still visible through Plaid or other open-banking connectors that customers authorize. Sending money, paying bills, or taking any action inside an account is off limits, and the spokeswoman gave no timeline for when direct access might be permitted.
Why deposits are the real stakes
The policy lands weeks after Muse’s September debut reignited Wall Street’s anxiety about what AI agents mean for banks. Bank stocks fell in September as Muse topped app download charts, on fears that agents would move customers’ money out of low-yielding accounts and into higher-yielding ones without the bank in the loop, CNBC reported.
Dimon addressed that liability question directly. “If people are using them, they should understand the risk,” he said. “They should understand there’s a liability transfer.” He added that customers need to understand when their data is being misused and that the bank is building tools to protect them.
Consulting firm McKinsey warned in April that retail banks could face disintermediation if agents acting for consumers move money in pursuit of better rates. Dimon also suggested regulators should consider how agentic AI’s potential impact on deposits affects banks’ liquidity risk management.
JPMorgan still wants the agent business, on its own terms
Dimon drew a sharp distinction between outside agents and the bank’s own. JPMorgan uses AI agents internally and plans to offer them to customers, he said, and the bank recently began a targeted pilot of Smart Cash, an AI tool that predicts a customer’s cash flow and moves funds to maximize yield, Chief Financial Officer Jeremy Barnum said on the call.
The message is consistent with Dimon’s history: when fintech firms fought banks over access to customer data years ago, he was the loudest voice arguing that third parties couldn’t be trusted with it. The arrival of AI agents — which can chain together logins, balances, and transactions across institutions — has reopened that fight at a larger scale.
For Muse users, the practical takeaway is this: the agent’s financial capabilities now stop at Chase’s front door. It can see balances through an authorized connector, but anything that looks like operating the account has to wait — possibly for a bank-sanctioned connection, possibly indefinitely.
The standoff is unlikely to be resolved quickly. Until banks and agent makers agree on a secure standard for delegated access, every major institution will set its own rules, and the largest bank in the US has now set its: outside agents read, JPMorgan acts.
Sources: CNBC via AIStockWire, CryptoBriefing, Banking Dive, TokenPost, Wall Street Journal.


