美国银行郑重提醒：切勿向 AI 助手泄露网银密码

金融巨头美国银行（Bank of America）正提醒客户注意网银安全：请务必不要将您的银行登录凭证分享给 AI Agent。

在一封发给客户、题为《在 AI 时代保护您的财产安全》（Protecting your finances in the Al World）的群发邮件中，美国银行敦促客户绝不要将用户名和密码透露给任何其他人或外部服务，“包括声称能代表您行事的各类 AI 工具或 Agent”。

人们几乎能从这封邮件中感受出发件人的无奈。然而，随着个人 AI 助手越发普及，越来越多的客户开始交出自己的登录信息。将银行用户名和密码透露给 AI 助手存在诸多风险：它可能会在您不知情的情况下操作您的资金，或者银行可能会判定您的账户遭遇攻击并将其锁定。更糟糕的是，AI 助手本身的安全漏洞可能导致您的银行凭证泄露给第三方，从而让图谋不轨的黑客借机洗劫您的银行账户。

这一最新警告发布的背景是，银行业仍在探索 AI Agent 该如何融入金融世界，但据报道目前正艰难应对未经授权的 Agent 擅自访问客户资金的问题。正如我们在 TechCrunch Disrupt 现场（参见视频/嵌入内容：现场研讨讨论）所讨论的那样，银行、支付提供商和清算机构仍在摸索如何让客户使用 AI 工具安全访问其银行账户——例如用于代理支付（agentic payments），即允许用户设置 Agent 以在最优价格或合适时机自主完成商品采购。

美国银行发言人已证实了这封被发布到社交媒体上的客户邮件的真实性。但用户应当重视该行的警告：因为一旦出了差错，责任全在你自己。大多数银行的账户协议都规定，客户需对向其提供登录凭证的任何第三方行为负责。邮件中写道：“如果您确实共享了凭据，请记住，您需要为该访问权限所产生的所有活动承担责任。”

（消息来源：Bryan Toporek）

Financial giant Bank of America is reminding customers to bank safely by kindly not sharing your banking credentials with your AI agent.

In an email blast to customers titled “Protecting your finances in the Al World,” Bank of America urged customers to never share their username and password with another person or an outside service, “including an Al-enabled tool or agent that offers to act on your behalf.”

You can practically sense the frustration in the person sending the email. Still, customers are increasingly handing over their log-ins as personal AI assistants grow more popular. Sharing your banking username and password with an AI assistant runs the risk that it could do something with your finances without your knowledge, or that your bank thinks someone’s raiding your account and locks you out of it. Worse, a security flaw in the AI assistant could result in it leaking your banking credentials elsewhere, giving financially motivated hackers a way into your bank account.

This latest warning comes as banks are still exploring how AI agents fit into the financial world but are reportedly grappling with unauthorized agents accessing their customers’ money. As we discussed onstage at TechCrunch Disrupt, banks, payment providers, and processors are still trying to figure out how to allow customers access to their bank accounts using AI tools, such as for agentic payments, which allow people to set agents to autonomously buy things at the best price or the right time.

A spokesperson for Bank of America confirmed the authenticity of the bank’s email that was posted to social media. But heed the bank’s warning, for if things go wrong, it’s on you. Account agreements at most banks hold customers responsible for anyone they give their log-in to. “If you do share your credentials,” its email reads, “keep in mind that you’re responsible for activity resulting from that access.”

(via Bryan Toporek )