JPMorgan Won't Let Outside AI Agents In. If a Customer Does, Whatever the Agent Does Is on Them.
· CX Pulse
JPMorgan told analysts it won't let outside AI agents act inside the bank, and its CFO said a customer who lets one in owns whatever it does.
JPMorgan Won't Let Outside AI Agents In. If a Customer Does, Whatever the Agent Does Is on Them.
The first analyst question on JPMorgan Chase's third-quarter call on Tuesday was about AI agents, and the answer is the clearest statement any large company has made about the customer's software showing up at the door. Jamie Dimon: "You don't want rogue agents, and there could be thousands of them." Then the sentence aimed at anyone whose customers have a login: "There's a liability transfer. They should understand there's a liability transfer." The bank won't let "just any outside agents" inside the company, and it's blocking the ones that work by borrowing a customer's credentials wherever it can.
CFO Jeremy Barnum said the part Dimon left implied. "If they give up their credentials to the agent and the agent does something that they don't want, that's going to be on them." He called that "not an ideal state of things" and said the bank is "working on being able to do this correctly." Its own AI tool, Smart Cash, which moves a customer's money between Chase accounts to earn a better rate, went live as a targeted pilot a couple of weeks ago.
Three answers to one question
The question is whether a customer's software gets to act like the customer. Three large companies have now answered it in public, and they disagree.
Robinhood said yes, inside a box. Since May 27, a customer can connect any agent to Robinhood's servers, trade equities in beta, and spend on a dedicated virtual card with a limit only the customer sets and an optional manual approval on each purchase. The agent never sees the primary card number.
JPMorgan said read, but don't act. A bank spokeswoman confirmed to CNBC, as PYMNTS reported, that an outside agent can see a Chase balance through an authorized connector like Plaid and can't log in, send money or pay a bill, with no timeline for that changing.
Amazon said no. It has blocked Meta's Muse shopping agent from its store since September.
PYMNTS Intelligence's own survey puts the customer somewhere between those three. 56% of consumers would let an agent search and compare products for them. 35% would let it reach their saved payment credentials.
What this means at scale
A login can be gated. JPMorgan can block credential sharing and screen scraping at the front door because it owns the door. A phone line, a chat window and an email inbox take whoever shows up, and an agent on those channels reads like a customer typing fast. So the decision JPMorgan made in its API is one every CX organization is about to make in its contact center, whether or not anyone schedules the meeting.
Four things need to be written down before the first one calls. Whether an agent gets its own credential or borrows the customer's, because Barnum's "that's going to be on them" only holds if the company can tell the two apart afterward. What the agent is allowed to do, by channel: read a balance, move an appointment, issue a refund, cancel a plan. How it shows up in the audit trail, since the dispute six months from now will be a customer saying they never asked for that. And who carries the loss, in the terms, in the same sentence the customer agrees to when they connect the agent.
Barnum also said something the people who run trusted brands should hear. Being trusted "is not an excuse for complacency or a reason to provide mediocre customer experiences." Blocking the agent protects the customer today. It also hands the customer's convenience to whoever lets the agent in first, which is the question three different analysts asked on the call in three different ways.
The smaller version
For a business with a booking line and an inbox, the agent will arrive as a very fast customer. It will ask for the Thursday slot, the quote, the refund, and it won't say what it is unless a rule somewhere says it has to. Decide two things now and write them where the person answering the phone can see them: whether you take a booking from software, and what you do when the customer calls to say they never asked for it. JPMorgan's answer to the second one is that the customer owns it. A smaller business probably can't afford that answer with a customer it wants to keep.
What it means for you
The default is already written. If a customer's agent does something the customer didn't want, the company that let it in says that's on you, and the biggest bank in the country said it out loud this week and called it not ideal. Every company with a login or a phone number inherits that default. A better answer exists only where somebody wrote one.
Sources: JPMorgan Chase's third-quarter 2026 earnings call transcript (Oct 13), Robinhood's May 27 announcement, Banking Dive and PYMNTS for the CNBC statement and the survey figures.