JPMorgan Chase bars external AI “agents” such as Muse and Instinct from direct account access

JPMorgan Chase has moved to prevent outside AI agents from directly accessing customer accounts, a step its CEO Jamie Dimon said is aimed at guarding against 'rogue agents' and will be backed by new defensive tools the bank is building.

JPMorgan Chase said it will block third‑party artificial intelligence agents, including services identified as Muse and Instinct, from directly accessing customer accounts. The bank’s chief executive, Jamie Dimon, warned that autonomous AI agents could operate at scale in ways that pose security and operational risks, and said the firm is developing tools to defend against such threats.

What banks call AI "agents" are software programs that can perform tasks on behalf of users, sometimes autonomously connecting to accounts or services to execute instructions. By restricting direct account access, JPMorgan is seeking to limit a pathway through which such agents might act without sufficient oversight, raising questions about how financial institutions will balance convenience and control as AI tools proliferate.

Dimon has previously voiced concern about the rapid deployment of new technologies in the financial system; his latest comments emphasized the need for defensive measures. JPMorgan’s move signals a precautionary approach, prioritizing what it describes as protection of customer assets and the integrity of systems over enabling unfettered integration of external AI services.

The decision could have implications for fintech firms, third‑party developers and customers that want to use AI tools to manage finances, automate transactions or analyze account data. It also highlights the broader debate among banks, tech companies and regulators over how to permit innovation while preventing fraud, data misuse and systemic risks.

Industry observers say financial institutions are increasingly weighing the tradeoffs between opening access to customers’ financial data and maintaining robust security controls. JPMorgan’s announcement adds to a growing chorus of lenders and platforms that are reconsidering how and when to permit outside agents to interact with sensitive account information, even as demand for AI‑driven services rises.

The bank did not outline specific technical controls or a timetable for the defensive tools Dimon referenced. How regulators and market participants respond may shape standards for third‑party AI access to banking systems going forward.