PegasusBig banks are locking credentialed AI agents out of customer accounts
JPMorgan now blocks outside AI agents that log in with a customer’s own credentials, allowing read-only views through authorized connectors at most, because it can’t tell a customer-sanctioned agent from a rogue one, and other large banks are following.
Your doorMerchants face the same question at checkout, so decide now whether an agent arriving with a shopper’s login is treated as the shopper, and start recognizing agents that present a verifiable signature instead.
Source: PYMNTS, Oct 14, 2026 · Jamie Dimon Slams the Door on Rogue AI Agents ↗
Q2 Who authorized it?
Get The Door.
One email every two weeks: the takes that mattered, which question moved, and what to do at your own door. Three minutes to read.
The link goes to the original source; the words are ours. References do not imply endorsement. Layer and question tags are our reading of the field, not claims made by the source. Approved by Reggie.