JPMorgan and Schwab Block AI Agents Like Meta's Muse

Major U.S. banks are drawing a hard line between personal AI agents that read your finances and agents that act on them. JPMorgan Chase and Charles Schwab say they are blocking unauthorized outside agents like Meta's Muse from logging into customer accounts with shared passwords and moving money. The message from both CEOs is similar: credential-sharing agents are too risky for clients and for the institution, and there is no clear liability map when something goes wrong.

What JPMorgan said

On the bank's third-quarter earnings call on Oct. 13, 2026, CEO Jamie Dimon warned against letting unvetted outside software operate inside customer relationships. "We're not going to allow just any … outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan," he said, according to CNBC.

Dimon framed the threat in volume terms: "You don't want rogue agents, and it could be thousands of them." He also told customers who experiment with agents to weigh consequences: "If people are using them, they should understand the risk" and "They should understand there's a liability transfer."

A JPMorgan spokeswoman told CNBC the policy is blunt on access method: "Because it is not safe, we do not permit third parties to access accounts by obtaining customers' banking credentials and logging in on their behalf." At the same time, the bank said it supports secure, customer-authorized data sharing through open banking providers and is "committed to enabling agentic connections securely."

Practically, that means agents can still pull read-only information—balances and similar data—through connectors such as Plaid, but they cannot send money or pay bills by impersonating the customer in the bank's own login flow. JPMorgan gave no timeline for safeguards that would let outside agents take payment actions directly.

CFO Jeremy Barnum said JPMorgan recently began a targeted pilot of its in-house Smart Cash tool, which aims to predict a customer's cash flow and move funds to maximize yield.

What Schwab said

Charles Schwab CEO Rick Wurster went further in a Bloomberg Television interview on Oct. 16, 2026, saying Schwab is actively blocking unauthorized AI agents that try to move client money—including Muse.

"We don't want someone just giving their password to Muse, and letting Muse come in and take action on that client's behalf," Wurster said, according to Bloomberg Law. "We can't control it, the client can't control it, something could go wrong and who's liable?" For client and firm protection, he added: "For the protection of the client and for the protection of us, we're not allowing it."

Wurster said he receives a weekly report on blocked attempts: unauthorized agent logins land in the "tens and twenties — per week." Wurster read that as a sign clients are not yet willing to hand their accounts to AI.

Schwab's longer-term plan is not to shut out AI entirely. Wurster said the firm will build model context protocol (MCP) servers so outside large language models can view balances and do research without moving money. "What that allows us to do is control the authentication process and also control what they can access," he said. Schwab also wants clients on its own assistant, Charley, announced Sept. 30.

Read-only vs. moving money

The split running through both banks' statements is data access vs. transactional authority.

Meta's Muse (September 2026) shows the split: a Plaid integration supports read-oriented guidance on balances and holdings, while logging into the bank as the customer to pay or trade is what Dimon and Wurster reject.

Why banks are worried

Executives keep returning to shared credentials (the bank cannot control what an agent does once logged in), liability (Dimon's "liability transfer" if software misroutes funds), and scale (Dimon's warning about "thousands" of rogue agents).

In September 2026, bank stocks slid as Muse topped download charts and investors feared agents would automate deposit moves to higher-yield accounts, CNBC reported. Germany's Scalable Capital took a different tack in August, opening to ChatGPT, Claude, and Grok for user-approved trades with no payments or withdrawals, per Fortune.

What it means for Muse and other personal agents

Bank blocks do not kill Muse's Plaid-linked budgeting overnight, but they block acting as a hands-off money mover at major U.S. banks without new rails. Meta told Fortune it is developing "Poppy," a personal agent protocol with Sierra, to signal when an agent acts for a customer—helpful for consent, but not a substitute for bank-controlled authentication.

For other builders, credential login is a dead end at JPMorgan and Schwab for now; the near-term path is read APIs, MCP servers, and bank-owned assistants.

What you should do

• Do not give your bank or brokerage password to Muse, ChatGPT, or any third-party agent. That is the behavior both CEOs described as unsafe—and banks are enforcing blocks when they detect it.
• Use official connections (Plaid, open banking, or future MCP links the institution advertises) when you want an AI tool to see account data. Read the permissions screen: view-only is not the same as payment authority.
• Assume liability stays with you if you bypass those channels; Dimon's warning about risk transfer is directed at customers.
• Watch for bank-native tools (Smart Cash, Charley) if you want automation without fighting policy.

Bottom line

JPMorgan and Schwab are telling the personal-AI industry that unauthorized credential-based agents will not move client money inside their walls. Read-only financial data through approved connectors remains on the table; Schwab is building MCP paths for richer—but still gated—access. Meta Muse can still inform users via Plaid, but the U.S. banking giants are prioritizing control, liability, and their own assistants over letting outside agents log in and act.

Sources

• CNBC: JPMorgan Chase blocks outside AI agents like Muse, Instinct from directly accessing accounts
• Fortune: 'You don't want rogue agents': Jamie Dimon bars outside AI agents like Meta's Muse from JPMorgan accounts
• Bloomberg Law: US Banks Block AI Agents Attempting to Move Money for Customers
• The Next Web: Schwab and JPMorgan are blocking AI agents from moving customer money
• Moneycontrol: After JPMorgan, Charles Schwab blocks unauthorised AI agents from accessing customer accounts