Some of Canada's largest banks are moving to block third-party personal AI agents such as Meta's Muse and OpenAI's ChatGPT from directly accessing clients' online bank accounts. Royal Bank, TD, CIBC and Bank of Montreal each framed the decision as protection for sensitive customer information, while Scotiabank said it will limit agent access while it monitors the risks. The shift matters for anyone building agent-commerce rails: the first reaction of major lenders to autonomous software touching money is a wall.
Highlights#
-
RBC, Canada's largest bank by assets, said it carefully weighed the risk before blocking third-party personal AI agents from online banking and its other authenticated digital properties. Spokesperson Jeff Lanthier acknowledged the move may disappoint the small portion of clients who use these tools, but said client safety and system security came first.
-
TD said it will block all third-party personal AI agents wherever authentication is required, and warned clients never to share log-in credentials, passwords, PINs or one-time passcodes with an AI agent or anyone else.
-
CIBC said it does not support personal AI agents directly opening or accessing accounts. All four banks say they continue to invest heavily in AI for internal work such as mortgage processing.
-
The backdrop is uneasy. Axios recently reported that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, have detected unauthorized third-party AI agents operating inside customer accounts, in some cases taking actions that appear independent of user instructions.
-
RBC CEO Dave McKay put it bluntly: as these systems become more autonomous, the stakes go up when something goes wrong, from fraud and consumer harm to risks that could ripple through the financial system. In his words, "trust will matter as much as capability."
Why it matters#
The banks are drawing a hard line exactly where agent autonomy meets money. Agents logging into authenticated sessions with shared credentials are the pattern these blocks target, and it is also the pattern that purpose-built agent-payment infrastructure, with verifiable agent identity, scoped spending authority and escrowed settlement, is designed to replace.