Schwab, JPMorgan block AI agents from moving client money

Charles Schwab is blocking outside AI agents, including Meta's Muse, from moving its clients' money, chief executive Rick Wurster said this week. JPMorgan Chase is keeping them out too. Two major US financial firms have now told AI agent makers where the line is: agents may look at accounts, but they may not move money.

That is a direct limit on what consumer AI agents can do for people. It also shows the route banks prefer, which runs through their own tools rather than through an agent logging in as the customer.

What Schwab is blocking

Schwab blocks outside agents that sign in with a client's username and password, or that use browser automation, American Banker reports. Browser automation means software that clicks through a website as if it were the person.

The blocks are frequent. Wurster told Bloomberg Television that Schwab stops the big agents "in the tens and twenties each week," according to The Next Web. Schwab receives a weekly report of these blocks. Wurster cites them as evidence that clients are not ready to hand their accounts to AI agents.

Muse is Meta's consumer AI agent, which OpenAI's Dots agent now competes with. "We are not going to allow that," Wurster said of outside agents moving money, as quoted by American Banker.

His stated concern is liability. "We can't control it, the client can't control it, something could go wrong and who's liable?" he said, according to The Next Web. The outlet notes that US law has no clear answer yet, and Congress is still debating it.

What Schwab offers instead

Schwab plans a controlled door. It will run MCP servers that outside AI tools can connect to, The Next Web reports. MCP, the Model Context Protocol, is an open standard that lets AI models plug into outside data and tools.

Through those servers, an agent can check balances and do research. It cannot move money. American Banker adds that Schwab already lets certain AI models complete trades, but Wurster says moving money through them is too risky for now.

Schwab is also steering clients to its own assistant, Charley, announced on September 30. At first, Charley handles only a few actions, such as changing an address or naming a trusted contact, according to American Banker.

Firm	Outside agents can	Outside agents cannot
Schwab	Check balances and research through Schwab's MCP servers	Log in with client credentials, drive the website, or move money
JPMorgan	View some account data through third-party tools	Send money or pay bills

JPMorgan's position

JPMorgan chief executive Jamie Dimon made a similar point on the bank's earnings call on Tuesday, October 13. American Banker quotes him saying the bank will not allow an "outside agent to come in inside the company, because that's just too risky for clients and for JPMorgan."

The Next Web reports that JPMorgan already lets some third-party tools view account data. Those tools cannot send money or pay bills.

The money question

Critics see a business motive as well as a safety one. American Banker reports that agents could move uninvested cash into higher-yielding options. That cash, called sweep cash, is a large source of Schwab's income.

The figures are large. Schwab's client cash in sweep accounts stood at nearly $493 billion, and its third-quarter net interest revenue was about $3.48 billion, American Banker reports.

"An outside agent works for the client. Charley works for Schwab," said Tim Welsh of Nexus Strategies. Wurster disputes the motive. He says clients who use AI for trading hold more cash at Schwab, not less. "We're actually seeing the opposite impact," he said.

What this means for developers

For teams building AI agents that touch money:

• Stop relying on credential logins and browser automation. Schwab detects and blocks both every week. An agent built that way can fail without warning in the middle of a task.
• Design for read-only first. Both firms allow some form of viewing and neither allows money movement. Build features that read balances and explain them, and hand the final transfer back to the person.
• Plan for official connectors. When Schwab's MCP servers launch, they will be the supported route. Keep your agent's bank access behind one layer you can swap out.
• Write the liability down. No US rule yet says who pays when an agent makes a costly mistake. Log every action, require clear approval for anything that moves money, and tell users what the agent cannot do.
• Watch the regulators. The Next Web reports that US and European regulators are already asking banks about AI agents. Their answers will decide how far these doors open.