axios: AI agents are entering U.S. bank accounts mostly with the customer’s own username and password, which makes them indistinguishable from the account holder at login.

Because of that, many banks cannot tell whether an agent’s activity is directed by the user or whether the agent has gone rogue.

Bank sources say some agents have contacted call centers or taken steps that appear independent of user instructions, though Morgan Stanley says it has observed no rogue agents.