JPMorgan (JPM) Blocks Outside AI Agents From Customer Accounts at Its $5.1 Trillion Bank

A Firm Line on Outside Agents

JPMorgan Chase has moved to keep outside AI agents out of its customers' accounts altogether. Chief Executive Jamie Dimon set out the policy on Tuesday, on the bank's third-quarter earnings call for the quarter ended Sept. 30, saying the firm will not let third-party AI assistants sign in with customer banking credentials or transact on those accounts. “We're not going to allow just any outside agent to come in inside the company because that's just too risky for clients and for JPMorgan... You don't want rogue agents,” Dimon said. An AI agent, in this usage, is software that carries out tasks for a user, from checking an account balance to booking travel. The bank's objection is specific: it treats the login itself, not the technology, as the risk. Under the policy, no outside agent may log in to or act on a customer account, agents that try to obtain customers' banking credentials are blocked outright, and customer-approved data sharing continues only through open banking providers. The stakes explain the caution. JPMorgan reported $15.3 billion in net income for the third quarter and held $5.1 trillion in total assets as of Sept. 30, and its market cap ranks among the largest in US finance. A note from the Cloud Security Alliance adds the security backdrop: a campaign using three open-source AI agents breached at least 27 organizations, a reminder of what credential-based agent access can cost. Dimon warned that wider reliance on such agents would raise the risks for banks and customers alike, and said the bank is building its own tools to protect them, without naming the products or a timeline.

Scalable Capital, Muse and the Poppy Protocol

The restriction lands in a market where some firms have already moved the other way, and where the line between guidance and transacting is still being tested. Germany's Scalable Capital opened its investment platform to ChatGPT, Claude and Grok in August, making it an early test case for chatbot-driven investing. Users can analyze portfolios and place trades through text prompts, but every trade requires the user's approval, and the assistants cannot make payments or withdraw funds. Meta's Muse follows a similar design. Launched in September, the assistant connects to financial accounts through Plaid, the account-linking service consumer fintechs rely on, and offers guidance on balances, transactions and investment holdings. Retail platforms have pushed back harder: Amazon began blocking Muse from its site on September 20, and shoppers who use the assistant now see pop-ups saying that doing so violates Amazon's terms. Meta declined to say whether Muse would keep offering financial assistance if more banks shut out outside agents. It is developing Poppy with Sierra, a personal agent protocol that tells companies when an agent is acting on behalf of a customer, a design that assumes banks will accept agent traffic with notice rather than refuse it. Neither Scalable Capital nor Muse has disclosed user numbers for the agent features, and JPMorgan did not name any specific assistant in its decision. Industry research on agentic payments in 2026 puts the current footprint in context: agent-driven payments are used mostly for microtransactions and have not reached institutional scale. Dimon's ban now sets the other boundary for the sector.

Positioning at $341.91

Shares of JPMorgan (JPM) traded at $341.91 on COINOTAG data, up 1.67% over the past 24 hours, inside a $336.24 to $345.00 range. The market treated the agent ban as contained rather than a fresh risk. Resistance at $344.17 carries a 99/100 score in COINOTAG's composite, and support at $338.77 sits at 94/100, with the daily trend reading sideways and a 56.8 RSI. A close above $344.17 would break the range to the upside; a pullback that holds $338.77 leaves it intact. Until the protocol question with Poppy is settled, that scored support is where the stock sits.