RBC Cuts Off Outside AI Agents From Online Banking, Citing Fraud Risk
Royal Bank of Canada is shutting down the connections that let third-party AI assistants log into customer accounts, saying the technology isn't trustworthy enough yet.
What happened: Royal Bank of Canada told customers on October 27 that it is blocking third-party personal AI agents from directly accessing online banking and other RBC digital properties. Any existing connections customers had set up to let an outside AI assistant reach their RBC accounts will stop working. Customers can still bank normally through RBC's own website, mobile app, in-house digital tools, and customer service team.
Why it matters: Personal AI agents typically need your login credentials, and sometimes stored passwords, to act on your behalf inside a bank account. RBC says that as these agents get more autonomous, a single mistake or manipulation could cause real financial harm to a customer, or even ripple into the wider financial system. The bank concluded that, based on what's known today, the risk of fraud and errors outweighs the convenience third-party agents offer.
How it works, plainly: Third-party AI agents work by logging into your bank account using your credentials, then taking actions like checking balances, moving money, or paying bills on command. RBC is severing that access at the authentication level, so an outside agent simply can't get in anymore, regardless of what permissions a customer previously granted it. Anything a customer wants done still has to go through RBC's own app, site, or staff.
The rollout: RBC joins a fast-forming pattern among major banks. Charles Schwab, JPMorganChase, Bank of America, and Citigroup have each restricted or blocked outside AI agents in recent weeks, with Bank of America still working out liability rules for AI-authorized payments. Banks have also reported finding and removing unauthorized agents that took actions customers never requested. Earlier PYMNTS research found some consumers are willing to hand financial tasks to AI, but only once the tools reach what the industry calls 'payments-grade' trust.