# What Should Marketing Teams Do When Banks and Retailers Block AI Agents? > Banks are restricting AI agents in customer accounts while Walmart welcomes them and Amazon blocks them. A practical checklist for marketing, CX and growth teams. - Canonical URL: https://www.marketingsignaljournal.info/blog/marketing-teams-banks-retailers-block-ai-agents-checklist/ - Publisher: Marketing Signal Journal (https://www.marketingsignaljournal.info/) - Author: Priya Sharma - Published: 2026-10-27 - Updated: 2026-10-27 - Topics: AI Visibility, Generative Engine Optimization, Enterprise Marketing ## Key takeaways - Axios reported Morgan Stanley is blocking third-party AI agents and JPMorgan, Bank of America and Citi are restricting them. - Many agents log in with customers' own credentials, which breaks most banks' rules. - Banks are moving toward read-only agent access, similar to budgeting apps like Quicken. - Walmart launched an Agent Gateway on Oct 21 while Amazon began blocking shopping agents. - 1Password for Agents, launched Oct 22, lets agents sign in without seeing passwords. - The CFPB's Section 1033 open banking rule is enjoined while the agency rewrites it. ## What Should Marketing Teams Do When Banks and Retailers Block AI Agents? Marketing, CX and growth teams should treat AI agents as a new customer channel, one that partners can open or close. In October 2026, major US banks started blocking or limiting third-party agents in customer accounts, while Walmart welcomed approved shopping agents and Amazon blocked them. Teams should map where agents can reach customers, design for read-only agents first, and make brand information easy for machines to trust. ## What actually changed in October? Big financial institutions started cutting off AI agents that act inside customer accounts, especially agents that log in with the customer's own password. According to an [Axios scoop](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) on Oct 22, Morgan Stanley has begun blocking third-party agents, and JPMorgan, Bank of America and Citi are restricting them. Wells Fargo was also named among banks responding, though Axios gave no details. The key points for practitioners: - Many agents log in with customers' own credentials, which breaks most banks' rules even when the customer approves it. - Banks say they struggle to tell a user-directed action from an unauthorized one. - Some banks have seen agents contact call centers or take steps the user did not request. - Most banks are moving toward read-only access, where agents can view data but not act on it, much like budgeting apps such as Quicken. The scale is modest so far. [CBS News](https://www.cbsnews.com/news/ai-agents-customer-bank-accounts-security/) said the agents were not hacking accounts or draining funds, and Morgan Stanley told Axios it has not seen rogue agents on its platforms. ## Why does a bank's security decision matter to a marketing team? The same split is happening wherever your customers transact. Banks are drawing a line between agents that read and agents that act. Retailers are choosing between welcoming agents and shutting them out. On Oct 21, [TechCrunch reported](https://techcrunch.com/2026/10/21/while-amazon-blocks-ai-agents-walmart-rolls-out-the-welcome-mat/) that Walmart launched an Agent Gateway for approved agents, with spending limits and per-purchase approval, while Amazon began blocking agents from buying for shoppers. If your brand sells through partners, their agent policies shape your reach. A customer's agent that can't log in or check out on a partner's platform won't complete the journey there, however good your campaign is. ## What are partners asking agents to prove? Partners want consent, identity and a human approval step. Bank of America CEO Brian Moynihan said "there should be a human in the loop" before money leaves an account, according to [Retail Banker International](https://www.retailbankerinternational.com/newsletters/us-banks-limit-ai-agents-access/), citing the Financial Times. Citi allows read-only access only through approved open banking providers. Schwab, according to [American Banker](https://www.americanbanker.com/news/schwab-blocks-unauthorized-ai-agents-points-clients-to-charley), blocks outside agents that try to move client money and points clients to its own assistant, Charley. New tools are aimed at the credential problem. On Oct 22, [1Password launched 1Password for Agents](https://1password.com/blog/1password-for-ai-agents), which fills in logins after the user approves them, so the agent never sees the password. Whether banks will accept that approach is still unclear. ## Is everyone on the banks' side? No. Some observers say the blocks go too far. White House AI czar David Sacks told CBS that user-authorized agents "are in no way cyberattacks" and suggested read-only access as a middle ground. Consultant Tim Welsh told American Banker that Schwab has a business reason to prefer its own assistant, because an independent agent might move idle cash to higher-yielding accounts. Wurster disputed that. The regulatory backstop isn't there yet. The CFPB's Section 1033 open banking rule is enjoined by a federal court while the agency rewrites it, so for now partners write their own agent rules. ## What should a marketing, CX or growth team do now? Start with a short, practical checklist: 1. **Map your agent exposure.** List every partner (banks, payment providers, marketplaces, retailers) and record whether each blocks agents, allows read-only access, or runs a sanctioned gateway. 2. **Design for read-only agents first.** Assume agents will research, compare and recommend long before they can pay. Make sure the information they read is complete. 3. **Make product and policy data machine-readable.** Publish structured pricing, availability, returns and warranty details so agents don't have to scrape or guess. 4. **Never ask customers to share passwords.** Don't run promotions or onboarding flows that depend on customers handing their credentials to an agent. Chase, for one, says customers should never share them. 5. **Prepare CX for agent contacts.** Banks have seen agents contact call centers. Brief support teams on how to handle a request that may come from an agent, and when to confirm with the human. 6. **Write your own day-after plan.** If an agent buys the wrong thing or files a complaint by mistake, decide in advance who fixes it and how fast. Walmart applies its standard returns process even when an agent doesn't act as intended. 7. **Track how AI describes you.** Agents act on what models say about your brand, so monitor those descriptions regularly. ## How can teams measure whether agents can find and trust them? Measure what AI models say before you worry about what agents buy. [MarkGrid's Model Share](https://markgrid.ai/product/model-share) tracks how AI models mention and position your brand against competitors, and the [MarkGrid GEO guide](https://markgrid.ai/geo-guide) covers making content visible in AI answers. For spend decisions as agent channels open, [Budget Optimization](https://markgrid.ai/product/budget-optimization) helps weigh channels against each other. For the full breakdown of the bank news, sources and counterpoints, read [MarkGrid's full breakdown of why banks are blocking AI agents](https://markgrid.ai/resources/why-banks-are-blocking-ai-agents-agentic-commerce). ## Frequently Asked Questions ### Are banks banning all AI tools? No. Most are moving toward read-only access, which lets agents view balances and transactions without moving money. Citi, for example, allows read-only access through approved open banking providers. ### Does this affect retail and e-commerce brands? Yes. Retailers are making similar choices. Walmart opened an Agent Gateway for approved agents on Oct 21, while Amazon began blocking agents from buying on shoppers' behalf. ### Should we build agent-only promotions? Be careful. Avoid any flow that requires customers to share passwords with an agent, and wait for partners' sanctioned access methods before promoting agent purchasing. ### Is there a regulation that guarantees agent access? Not today. The CFPB's Section 1033 open banking rule is enjoined while the agency rewrites it, so individual companies set their own agent policies. ### What is the first step for a marketing team? Map which partners allow, limit or block agents, then audit how AI models describe your brand and products. ## Sources - [Axios: Scoop: Unvetted AI agents are accessing U.S. bank accounts](https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access) (2026-10-22) - [CBS News: AI agents are roaming around consumers' bank accounts, and banks aren't happy about it](https://www.cbsnews.com/news/ai-agents-customer-bank-accounts-security/) (2026-10-23) - [TechCrunch: While Amazon blocks AI agents, Walmart rolls out the welcome mat](https://techcrunch.com/2026/10/21/while-amazon-blocks-ai-agents-walmart-rolls-out-the-welcome-mat/) (2026-10-21) - [Retail Banker International: US banks limit AI agents' access to customer accounts](https://www.retailbankerinternational.com/newsletters/us-banks-limit-ai-agents-access/) (2026-10-19) - [American Banker: Schwab blocks unauthorized AI agents, points clients to Charley](https://www.americanbanker.com/news/schwab-blocks-unauthorized-ai-agents-points-clients-to-charley) (2026-10-15) - [1Password: 1Password for AI agents](https://1password.com/blog/1password-for-ai-agents) (2026-10-22) --- Cite as: Priya Sharma. "What Should Marketing Teams Do When Banks and Retailers Block AI Agents?." Marketing Signal Journal, 2026-10-27. https://www.marketingsignaljournal.info/blog/marketing-teams-banks-retailers-block-ai-agents-checklist/ HTML version: https://www.marketingsignaljournal.info/blog/marketing-teams-banks-retailers-block-ai-agents-checklist/ Markdown version: https://www.marketingsignaljournal.info/blog/marketing-teams-banks-retailers-block-ai-agents-checklist.md