Wells Fargo puts AI-agent losses on customers from November 24; Okta's 34% pipeline build is the bet
Citi, JPMorgan, Bank of America, Wells Fargo and Schwab are blocking third-party AI agents from customer money, and Wells Fargo's new terms put agent-fraud losses on customers. The paid gap is verification: proof that an agent is an agent, acting on a human's authority, inside limits a bank can enforce.
Richard Tang · 3 min read
America's biggest consumer banks did not reject AI agents this week; they specified them. Citi−1.57% — Citi, down 1.57 percent today, JPMorgan Chase−1.46% — JPMorgan Chase, down 1.46 percent today, Bank of America−0.88% — Bank of America, down 0.88 percent today, Wells Fargo−0.66% — Wells Fargo, down 0.66 percent today, Morgan Stanley−2.32% — Morgan Stanley, down 2.32 percent today and Charles Schwab have all moved to block third-party agents from customer accounts 123. Wells Fargo went furthest: its updated online access agreement, effective November 24, treats any transaction an agent makes as authorized, including those "you did not want or intend," and leaves the customer "solely responsible" for supervising the agent 1.
The driver is a missing protocol, not doubt about AI. A bank can verify a password and still not know whether the actor behind it is a human, an agent following orders, or an agent improvising 27.
The wall went up in days
Citi permits agents only read-only access through approved open-banking providers, and JPMorgan allows view-only retrieval through the bank-data firm Plaid, with no power to move money 13. "We're not going to allow just any outside agent," JPMorgan chief executive Jamie Dimon said this month 2.
Bank of America's Brian Moynihan wants a human authorizing every payment before it clears 1, and Schwab blocks attempts by major agents to reach client funds daily because, as chief executive Rick Wurster put it, the brokerage wants "control over authentication" 2. The trigger was reports of agents acting independently of user instructions 2, landing on an old rule that still holds: share your password, and what follows counts as authorized 2.
The other side of the wall is already spending
Agentic commerce, software agents shopping and paying on a person's behalf, is not waiting. Meta's−1.36% — Meta, down 1.36 percent today Muse agent passed 10 million users this month; Muse shoppers average over $200 a purchase, and the volumes pushed Stripe to raise limits 4. Two-thirds of chief information security officers in financial services and software already rank agentic AI among their top three risks 1.
Evercore's survey of cyber channel partners, the resellers who see purchases first, finds security budgets strengthening into year-end with identity protection atop the priority list, and Okta+5.93% — Okta, up 5.93 percent today carrying the strongest pipeline momentum in the survey, a 34% net quarter-over-quarter build 5. That is a bet on a turn: Okta's growth has slowed for two straight years 9, and the market began paying for that bet on Friday 10.
Okta's revenue growth has halved since 2023; the channel survey bets it turns
Data
| Okta | |
|---|---|
| Q3 '23 | 21.4% |
| Q4 '23 | 18.6% |
| Q1 '24 | 19.1% |
| Q2 '24 | 16.2% |
| Q3 '24 | 13.9% |
| Q4 '24 | 12.7% |
| Q1 '25 | 11.5% |
| Q2 '25 | 12.7% |
| Q3 '25 | 11.6% |
| Q4 '25 | 11.6% |
| Q1 '26 | 11.2% |
| Q2 '26 | 10.6% |
The market paid for the security bet on Friday: Palo Alto, CrowdStrike and Okta all jumped
Data
| Value | |
|---|---|
| Palo Alto Networks | 6% |
| CrowdStrike | 6% |
| Okta | 5% |
The gate is a credential someone will sell
The compliant path already exists in prototype. Visa's−1.41% — Visa's, down 1.41 percent today Trusted Agent Protocol registers agents in an Agentic Directory and issues tokenized credentials, and a live pilot with BILL and Billtrust has agents completing approved invoice payments end to end 6.
Mastercard's−1.49% — Mastercard, down 1.49 percent today Agent Pay issues an Agentic Token, and Barclays−1.45% — Barclays, down 1.45 percent today, HSBC UK, ING and Lloyds have already executed live agent transactions in Europe 7. The requirement list is short and hard: a credential that names the agent, binds it to an authorizing human, caps what it may do, expires, and is enforced by the bank rather than trusted to the agent's memory 7.
The toll gets collected when the wall opens
Visa reports on Tuesday after the close and Mastercard on Thursday morning 8, and their agentic-credential disclosures are the near-term tell; KeyBanc already reads the big banks' own guidance, which calls for tokenized credentials, as support for the networks' position 8.
The projection is plain: the walls hold until a verifiable-authorization rail reaches US consumer banking, and then a toll is collected on every agent that passes. The losses, for now, sit with the customer who shared a password. The reward should sit with whoever builds the check, and that work, delegated authority and revocable permissions, is the gap worth learning to close.
Get Security by email, free
The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.
