JPMorgan Chase does not need a policy against AI agents. It has a contract. On its third-quarter earnings call on October 13, chief executive Jamie Dimon told analysts that customers who let outside agents into their accounts “should understand the liability transfer.” The revised Chase Digital Services Agreement, dated October 2026, spells out what that transfer means: anything an agent does with a customer’s credentials is treated as the customer’s own instruction. The JPMorgan AI agents question is, in practice, a question about who pays when software moves money badly.
What Chase’s agreement says about JPMorgan AI agents
Operationally, a spokeswoman told CNBC that Chase does not permit third parties to log in with customers’ credentials and act for them. Read-only sharing through providers such as Plaid continues, so an agent can see a balance but cannot pay a bill. No timeline was given for more.
Contractually, the Digital Services Agreement now has a section titled “Third-party AI Agents or Agentic AI”. It defines an agent as any software that takes “autonomous, semi-autonomous, or non-autonomous action” on someone’s behalf. When a customer gives an agent credentials, Chase “will rely on any instructions or actions taken by your Agent as if they were taken by you personally” and “shall have no obligation to investigate the authority or validity” of them. The customer must monitor the agent, is responsible for errors from its “incorrect interpretation” of instructions, and must keep proof of any revocation of consent. Chase reserves the right to limit or terminate any agent’s access “at any time without notice.”
The legal anchor is Regulation E. Under the CFPB’s official interpretation, a consumer who hands an access device to someone who then exceeds the authority given “is fully liable for the transfers” until the bank is told that authority has ended. Chase’s agreement extends that logic, written for family members and co-workers, to software. Consumer protections for unauthorised transfers do not help if the transfer was, legally, authorised.
The contest is over who owns the sweep
Dimon framed the issue as safety, warning of “rogue agents” that could number in the thousands, according to Banking Dive. The commercial stake is deposits. Meta’s Muse assistant topped download charts in September and bank stocks fell on fears that agents would move money out of low-yield checking accounts, CNBC reported.
JPMorgan’s answer is to build the agent itself. Chief financial officer Jeremy Barnum said Smart Cash, which forecasts a customer’s cash flow and moves funds between accounts at the bank to maximise yield, is in a targeted pilot. Bank of America Securities analyst Ebrahim Poonawala wrote on September 23 that the strategic question is who owns the agent, the wallet and the customer relationship.
The map has four positions:
Bank-owned agents such as Smart Cash get full write access and keep deposits inside the institution.
Aggregator-connected agents get read-only data, priced after JPMorgan’s earlier move to charge data middlemen including Plaid for access.
Credential-based outside agents such as Muse or Instinct are blocked operationally and, if they get in, sit entirely on the customer’s side of the liability line.
Agents with their own payment credentials, such as tokenised cards, avoid the bank login entirely and move the dispute to card network rules.
What could break the clause
The contract is untested. A regulator could decide that a bank which knowingly allows agent sessions, or detects them and lets them run, cannot treat every agent instruction as authorised; Regulation E disputes turn on facts. Competitors could offer agent access with a fraud guarantee to win the deposits Chase is protecting. Dimon himself told analysts that regulators should consider how agentic AI could affect liquidity risk management.
A customer told that an agent’s loss is theirs under a clause in a 65-page agreement is also a headline waiting to happen.
Bottom line
JPMorgan has turned the agent question into a liability allocation, and the allocation favours the bank: outside agents act as the customer, the customer carries the loss, and the bank can switch the agent off without notice. It also sets the price of access for everyone else: an agent that wants write access to Chase accounts will need either a bank partnership or a guarantee the customer trusts.
Watch for:
- A Smart Cash launch date, and whether it moves money out of JPMorgan as well as within it
- The first public Regulation E dispute over an agent-initiated transfer at a large bank
- Whether Bank of America, Wells Fargo or Citi publish agent clauses of their own, or offer a liability guarantee instead