UK Banks Restrict AI Agents' Access to Customer Accounts Over Security Fears

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Major UK banks, including HSBC, Barclays, Lloyds, NatWest, and Nationwide, have restricted AI agents' access to customer accounts due to concerns that autonomous AI systems could perform unauthorized or uncontrolled financial transactions, risking customer funds and financial stability. No actual harm has occurred, but the risk prompted preventive action.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article explicitly involves AI systems (AI agents) that can access and perform financial transactions on customer accounts. The banks' preventive restrictions and regulatory efforts indicate recognition of plausible future harm from unauthorized or uncontrolled AI agent access, such as large-scale unauthorized fund transfers and financial instability. Since no actual unauthorized access or harm has occurred yet, but the risk is credible and recognized, this qualifies as an AI Hazard rather than an AI Incident. The article is not primarily about a response to a past incident, so it is not Complementary Information. It is not unrelated or beneficial use, as the AI agents are the potential source of harm, not solely beneficial countermeasures.[AI generated]
AI principles
Robustness & digital securityAccountability

Industries
Financial and insurance services

Affected stakeholders
ConsumersGeneral public

Harm types
Economic/PropertyPublic interest

Business function:
Citizen/customer service

AI system task:
Other


Articles about this incident or hazard