What an AI agent is.

A chatbot answers questions. An agent acts. Give one your passwords and it will log into websites, fill shopping carts, pay bills and book appointments on your behalf, the way a very fast assistant holding your keychain would. That is the convenience being sold this year: stop running errands, send the agent.

What JPMorgan did about it.

On October 13, JPMorgan Chase confirmed it blocks outside AI agents from operating retail customer accounts. An agent may look at some account information, such as balances, through services a customer has authorized. It cannot pay a bill, move a dollar or change anything, and the bank gave no timeline for loosening that. Its reasoning was plain: letting a third party log in with a customer's banking credentials is not safe. On the bank's earnings call, Jamie Dimon summed it up: "You don't want rogue agents, and there could be thousands of them." Three days later, the Financial Times reported Citigroup drawing the same line.

Why the banks flinched.

Think through one bad afternoon. An agent holding your credentials pays the wrong vendor, or the right vendor twice, at machine speed, with nobody watching. Who eats the loss? Dimon warned that using agents can shift the liability onto the customer. A person who clicks the wrong button is accountable, and the mistake is one mistake. A thousand agents clicking at once is a different kind of problem, and the bank decided not to find out how different.

Here is the detail most coverage skipped: JPMorgan is not against AI. The bank runs agents of its own, inside its own walls and on its own terms, including a pilot that forecasts cash flow. The line it drew is between AI it controls and AI that shows up holding a customer's password.

The door the industry is building instead.

The refusal is not the end of the story. Charles Schwab is taking a different route: a controlled doorway, built on a technical standard that lets a customer's chosen AI connect to Schwab's systems under rules Schwab sets. Read the two moves together and the industry's message is consistent. AI is welcome to help. It gets a supervised door, not a copy of the keys.

What this means for your office.

Your firm holds things at least as sensitive as a checking account: client files, privileged letters, patient notes, tax records. The banks just modeled the right posture toward AI, and they did it with billions at stake. Let the machine do the work. Keep a person on the send button.

That is the design we build to. The machine in your office reads the documents, drafts the email and prepares the paper; a person reviews the draft and clicks send. Out of the box it cannot send at all. The banks arrived at the same architecture from the other direction. That should tell you this design was never caution lagging behind the technology. It is where the careful money landed.

These notes summarize public reporting as of October 21, 2026.