Schwab blocks AI agents that try to log in to your account and act for you. If you were planning to hand your brokerage password to a chatbot, that door is now shut at Schwab, and JPMorgan is taking a similar line.
Your own account still works as before. What changed is who is allowed to drive it.
- Schwab CEO Rick Wurster discussed the block on the company’s earnings call and on Bloomberg TV this week.
- Agents that use your login or browser automation are the ones being stopped.
- Schwab says major agents get blocked “in the tens and twenties” each week.
- JPMorgan CEO Jamie Dimon said on October 13 that the bank won’t let outside agents inside its systems.
- Schwab’s own assistant, Charley, was announced September 30.
That’s the short version. The details matter a lot if you use AI tools anywhere near your money, because the rules for agents are being written right now, one earnings call at a time.
Why Schwab blocks AI agents that use your password
The target is a specific trick: you give an AI agent your username and password, and it signs in like a person would. According to American Banker, Schwab bars agents that use client credentials or browser automation.
Wurster’s reasoning was blunt. Per The Next Web, he said the firm can’t control it, the client can’t control it, and if something goes wrong, “who’s liable?”
That liability question is real. Congress is still debating who pays when an AI agent makes a costly mistake, so banks are choosing not to find out the hard way. Schwab also says clients rarely try this, but it gets a notice every time it blocks one.
What you can still do with AI and your Schwab account
Schwab isn’t banning AI altogether. It plans to offer MCP servers, a standard way for outside AI tools to connect, so those tools can check balances and do research without touching your money.
Here is how the options compare, based on the reports above.
| Option | What an outside AI can do | Where the money stays |
|---|---|---|
| Password sharing / browser automation | Log in as you and click around | Blocked at Schwab; JPMorgan says no outside agents |
| MCP connection (Schwab) | Check balances, pull research | Moves nothing, per Schwab’s CEO |
| Charley, Schwab’s own assistant | Few actions so far, like changing an address or naming a trusted contact | Cannot move money for now |
| Traders using certain LLMs | Connect and complete some trades | Per American Banker; limited set of users |
The pattern is simple: reading is welcome, moving money is not. One caveat: the two outlets describe Charley’s limits slightly differently, so expect details to shift as Schwab rolls it out.
Why JPMorgan and Schwab are nervous about agents
Agents are new, they act fast, and they can be tricked. Security teams worry about prompt injection, where hidden text on a web page steers an agent into doing something you never asked for. We covered one defense effort in our post on prompt injection defense.
Credentials are the other worry. When AI services get breached, the keys they hold can leak. That’s what happened in the OpenCode API key breach, and a login to your brokerage is a far juicier target than an API key.
There’s also a business angle. Analyst Tim Welsh told American Banker that “an outside agent works for the client. Charley works for Schwab.” Security is a fair reason, but keeping customers inside Schwab’s own tools doesn’t hurt the company either.
How to stay safe if you use AI agents with money
You don’t need to wait for banks to settle this. A few habits protect you today.
- Never type a bank or brokerage password into an AI tool or agent.
- Prefer connections that are read-only, such as MCP or official integrations.
- Turn on two-factor authentication, ideally with a passkey or authenticator app.
- Check your account’s trusted-contact and alert settings, and review them after any AI experiment.
Why this matters: if an agent signs in as you, the bank can’t tell your actions from a thief’s. Read-only access limits the damage to a bad summary, not an empty account.
Frequently Asked Questions
Can I use ChatGPT or Claude with my Schwab account?
You can’t hand them your login and let them act. Schwab says it will offer read-only style connections for checking balances and research. American Banker adds that some traders can already use certain LLMs to complete trades.
Is my Schwab account affected?
Not unless you were using an agent with your credentials. Normal logins on the Schwab site and app work as usual.
Is Schwab the only bank doing this?
No. JPMorgan’s Jamie Dimon said the bank won’t allow outside agents in its systems, though it lets some third-party tools view account data.
What is Charley?
Charley is Schwab’s own AI assistant, announced September 30, 2026. For now it mostly answers questions and handles a few actions, and it can’t move money.
Our take: expect more walls before more doors
This is the sensible call for now. Until the rules on liability are clear, handing a bot your password is a gamble no bank should accept and no customer should take. The real test is whether Schwab’s read-only connections turn out useful or just a way to steer you to Charley, so try both before you trust either.
Leave a Reply