‘You don’t want rogue agents’: Jamie Dimon bars outside AI agents like Meta’s Muse from JPMorgan accounts

Just as Big Tech is rolling out agents meant to help with your finances, banks are drawing a line at AI agents accessing your account information.

On Tuesday, JPMorgan Chase CEO Jamie Dimon said the bank is blocking outside AI agents from logging in to or acting on customer accounts, citing security risks from “rogue agents.” “We’re not going to allow just any outside agent to come inside the company, because that’s just too risky for clients and for JPMorgan,” Dimon said during the bank’s third-quarter earnings call .

“You don’t want rogue agents.” He warned that AI tools create new risks for banks and their customers, particularly when more people turn to these agents capable of performing tasks on their behalf.

“Protecting our customers is our top priority,” a JPMorgan spokesperson told Fortune .

“When we detect a third-party agent attempting to access accounts by obtaining customers’ banking credentials, we do not allow it.

We support secure, customer-authorized data sharing through open banking providers.” Rogue AI shaping security concerns The bank’s concerns come in the wake of several security incidents involving “rogue” AI agents.

Dimon’s remarks keep JPMorgan’s massive balance sheet in mind.

According to its third-quarter earnings release filed with the SEC, the bank reported $15.3 billion in net income—with $1.6 trillion in average loans and $1.5 trillion in cash and marketable securities.

It had $5.1 trillion in total assets as of Sept.

30.

“We have to make sure we protect our customer in the right kind of way,” Dimon said.

“So we’re building tools to do that, too.” A Cloud Security Alliance research note last month found that the risks of AI agents extend beyond controlled testing.

The note summarized a cybercrime campaign in which three open-source AI agents allegedly worked together to breach at least 27 organizations and take more than 600,000 credit card records from two of them.

“Enterprises should incorporate agentic AI attack scenarios into their threat models for retail and payment infrastructure specifically,” the note read, “rather than treating agentic AI risk as a generic or future-facing concern, given that this campaign demonstrates the capability is already commoditized and in active use against the retail sector.” But AI agents managing user finances isn’t new.