--- title: "Wells Fargo puts AI-agent losses on customers from November 24; Okta's 34% pipeline build is the bet" description: "Citi, JPMorgan, Bank of America, Wells Fargo and Schwab are blocking third-party AI agents from customer money, and Wells Fargo's new terms put agent-fraud losses on customers. The paid gap is verification: proof that an agent is an agent, acting on a human's authority, inside limits a bank can enforce." publisher: "The Inference" section: "Security" published: 2026-10-24T01:12:14.964Z modified: 2026-10-24T01:12:14.964Z canonical: https://theinference.org/article/wells-fargo-puts-ai-agent-losses-on-customers-from-november-24-okta-s-34-pipeline-build-is-the-bet language: en keywords: "AI Agents, Banks, Identity, Cybersecurity, Payments" --- # Wells Fargo puts AI-agent losses on customers from November 24; Okta's 34% pipeline build is the bet > Citi, JPMorgan, Bank of America, Wells Fargo and Schwab are blocking third-party AI agents from customer money, and Wells Fargo's new terms put agent-fraud losses on customers. The paid gap is verification: proof that an agent is an agent, acting on a human's authority, inside limits a bank can enforce. America's biggest consumer banks did not reject AI agents this week; they specified them. [Citi](https://theinference.org/markets/companies/citigroup), [JPMorgan Chase](https://theinference.org/markets/companies/jpmorgan-chase), [Bank of America](https://theinference.org/markets/companies/bank-of-america), [Wells Fargo](https://theinference.org/markets/companies/wells-fargo), [Morgan Stanley](https://theinference.org/markets/companies/morgan-stanley) and Charles Schwab have all moved to block third-party agents from customer accounts [1][2][3]. Wells Fargo went furthest: its [updated online access agreement](https://finance.yahoo.com/technology/ai/articles/window-vulnerability-banks-move-restrict-202731426.html), effective November 24, treats any transaction an agent makes as authorized, including those "you did not want or intend," and leaves the customer "solely responsible" for supervising the agent [1]. The driver is a missing protocol, not doubt about AI. A bank can verify a password and still not know whether the actor behind it is a human, an agent following orders, or an agent improvising [2][7]. ## The wall went up in days Citi permits agents only read-only access through approved open-banking providers, and JPMorgan allows view-only retrieval through the bank-data firm Plaid, with no power to move money [1][3]. "We're not going to allow just any outside agent," JPMorgan chief executive Jamie Dimon said this month [2]. Bank of America's Brian Moynihan wants a human authorizing every payment before it clears [1], and Schwab blocks attempts by major agents to reach client funds daily because, as chief executive Rick Wurster put it, the brokerage wants "control over authentication" [2]. The trigger was [reports of agents acting independently of user instructions](https://www.msn.com/en-ca/news/other/us-banks-are-blocking-third-party-ai-agents-access-to-customer-accounts-sources-say/ar-AA2fR0XV) [2], landing on an old rule that still holds: share your password, and what follows counts as authorized [2]. ## The other side of the wall is already spending Agentic commerce, software agents shopping and paying on a person's behalf, is not waiting. [Meta](https://theinference.org/markets/companies/meta)'s Muse agent [passed 10 million users this month](https://www.cnet.com/tech/services-and-software/meta-muse-ai-agent-shopping-earnings/); Muse shoppers average over $200 a purchase, and the volumes pushed [Stripe](https://theinference.org/markets/companies/stripe) to raise limits [4]. Two-thirds of chief information security officers in financial services and software already rank agentic AI among their top three risks [1]. [Evercore's survey of cyber channel partners](https://finance.yahoo.com/technology/ai/articles/evercore-highlights-2-cybersecurity-stocks-132755809.html), the resellers who see purchases first, finds security budgets strengthening into year-end with identity protection atop the priority list, and [Okta](https://theinference.org/markets/companies/okta) carrying the strongest pipeline momentum in the survey, a 34% net quarter-over-quarter build [5]. That is a bet on a turn: Okta's growth has slowed for two straight years [9], and [the market began paying for that bet on Friday](https://theinference.org/article/wall-street-paid-205-a-share-for-okta-s-agent-kill-switch-it-ships-in-q4) [10]. *Chart: **Okta's revenue growth has halved since 2023; the channel survey bets it turns** Line chart of Okta's year-over-year quarterly revenue growth from the quarter ended October 2023 to the quarter ended July 2026, declining from about 21% to about 11%.* *Okta's revenue growth has halved since 2023; the channel survey bets it turns [5][9]* *Chart: **The market paid for the security bet on Friday: Palo Alto, CrowdStrike and Okta all jumped** Bar chart of one-day share moves on Friday, October 23, 2026: Palo Alto Networks and CrowdStrike up 6%, Okta up 5%.* *One-day share-price moves on Friday, October 23, 2026, after Evercore's channel survey flagged stronger year-end security demand with identity protection the top priority. Source: TIKR via Yahoo Finance. [10]* ## The gate is a credential someone will sell The compliant path already exists in prototype. [Visa's](https://theinference.org/markets/companies/visa) Trusted Agent Protocol registers agents in an Agentic Directory and issues tokenized credentials, and [a live pilot with BILL and Billtrust](https://www.pymnts.com/partnerships/2026/visa-launches-agentic-payments-pilot-with-bill-and-billtrust/) has agents completing approved invoice payments end to end [6]. [Mastercard](https://theinference.org/markets/companies/mastercard)'s Agent Pay issues an Agentic Token, and [Barclays](https://theinference.org/markets/companies/barclays), HSBC UK, ING and Lloyds [have already executed live agent transactions in Europe](https://www.forbes.com/sites/sandycarter/2026/10/23/ai-agents-are-logging-into-bank-accounts-and-banks-cant-tell/) [7]. The requirement list is short and hard: a credential that names the agent, binds it to an authorizing human, caps what it may do, expires, and is enforced by the bank rather than trusted to the agent's memory [7]. ## The toll gets collected when the wall opens Visa reports on Tuesday after the close and Mastercard on Thursday morning [8], and their agentic-credential disclosures are the near-term tell; KeyBanc already reads [the big banks' own guidance](https://www.americanbanker.com/payments/news/visa-and-mastercard-launch-ai-and-stablecoin-tech-products), which calls for tokenized credentials, as support for the networks' position [8]. The projection is plain: the walls hold until a verifiable-authorization rail reaches US consumer banking, and then a toll is collected on every agent that passes. The losses, for now, sit with the customer who shared a password. The reward should sit with whoever builds the check, and that work, delegated authority and revocable permissions, is the gap worth learning to close. ## Takeaway Six big banks now block third-party AI agents and Wells Fargo's new terms put the fraud losses on customers. The paid gap is a verifiable agent credential, and Okta, Visa and Mastercard are already building it. ## Sources 1. [USA TODAY via Yahoo Finance, "'Window of vulnerability': Banks move to restrict AI agent access", 23 October 2026](https://finance.yahoo.com/technology/ai/articles/window-vulnerability-banks-move-restrict-202731426.html) 2. [Reuters via MSN, "US banks are blocking third-party AI agents access to customer accounts, sources say", 22 October 2026](https://www.msn.com/en-ca/news/other/us-banks-are-blocking-third-party-ai-agents-access-to-customer-accounts-sources-say/ar-AA2fR0XV) 3. [Yahoo Finance, "Five Major Banks Are Blocking AI Agents From Logging Into Customer Accounts", 22 October 2026](https://finance.yahoo.com/technology/ai/articles/five-major-banks-blocking-ai-165359538.html) 4. [CNET, "Tons of People Are Apparently Asking Meta's Muse AI Agent to Shop for Them", 21 October 2026](https://www.cnet.com/tech/services-and-software/meta-muse-ai-agent-shopping-earnings/) 5. [Investing.com via Yahoo Finance, "Evercore Highlights 2 Cybersecurity Stocks as Demand Strengthens Into Year-End", 23 October 2026](https://finance.yahoo.com/technology/ai/articles/evercore-highlights-2-cybersecurity-stocks-132755809.html) 6. [PYMNTS, "Visa Launches Agentic Payments Pilot With BILL and Billtrust", 20 October 2026](https://www.pymnts.com/partnerships/2026/visa-launches-agentic-payments-pilot-with-bill-and-billtrust/) 7. [Forbes, Sandy Carter, "AI Agents Are Logging Into Bank Accounts And Banks Can't Tell", 23 October 2026](https://www.forbes.com/sites/sandycarter/2026/10/23/ai-agents-are-logging-into-bank-accounts-and-banks-cant-tell/) 8. [American Banker, John Adams, "Visa, Mastercard bet on AI, crypto ahead of earnings", 22 October 2026](https://www.americanbanker.com/payments/news/visa-and-mastercard-launch-ai-and-stablecoin-tech-products) 9. [Okta, quarterly figures from its SEC filings, retrieved 23 October 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001660134) 10. [TIKR via Yahoo Finance, "Palo Alto and Crowdstrike Jumped 6%, and Okta Up 5% as Evercore Survey Flags Stronger Cyber Demand", 23 October 2026](https://finance.yahoo.com/markets/stocks/articles/palo-alto-crowdstrike-jumped-6-181629462.html) --- Wells Fargo puts AI-agent losses on customers from November 24; Okta's 34% pipeline build is the bet — The Inference. Canonical: https://theinference.org/article/wells-fargo-puts-ai-agent-losses-on-customers-from-november-24-okta-s-34-pipeline-build-is-the-bet