Bank of America advised customers not to share banking usernames or passwords with outside services such as AI agents; reporting says a bank spokesperson confirmed the email. The bank warned that customers may be responsible for activity arising from access they voluntarily grant, but that does not eliminate federal consumer protections for genuinely unauthorized electronic transfers. Spending analysis can use documents that require no password or bank-authorized read-only connections where available. The key is to control money-moving permissions separately.