The Doorman Card — 5 Simple Moves That Keep AI Agents on the Right Side of Your Bank Account, Plus What Changed at the Banks This Week
The companion to the reel. AI agents now attack accounts at machine speed: Microsoft reported a hacking group using an AI agent framework (ARTEX) whose password spray peaked at 2,900 login attempts a minute on Oct 11 and every guess failed (about 98% locked out). The real damage came from stolen app credentials (a ConnectWise app): 2,250+ Microsoft 365 organizations got sign-in attempts, and some attacks reached admin-level access in under 3 hours. Guessed passwords bounced, stolen app keys got in. And the banks are changing the rules: Wells Fargo's online access agreement effective Nov 24, 2026 says use of any AI agent is at your own risk, and instructions or transactions an AI agent initiates are treated as initiated and authorized by you, subject to applicable law; Citi does not permit third-party AI agents or assistants to log in or transact (read-only open-banking access still allowed); JPMorgan and Morgan Stanley are reported to restrict agents too. The idea: your password proves who you are, not what you meant. PAGE 1 — THE CARD: (1) never give an AI agent your bank username or password, use read-only links through your bank's approved apps; (2) turn on an alert for every charge, not just large ones; (3) use a passkey or app-based 2FA instead of SMS; (4) open your bank's connected apps / third-party access page and remove anything you don't recognise; (5) if an agent does something you didn't mean, call your bank the same day, follow up in writing, and note the time. PAGE 2 — why each move matters, and the 'what changed this week' box with clickable sources (Tom's Hardware citing the Microsoft Security blog, Wells Fargo's own agreement, Daily Caller, Yahoo Finance). Plain English, about 15 minutes, once. General safety tips, not legal or financial advice: check your own bank's agreement. Independent card from Hyperautomation Labs, not affiliated with any bank or with Microsoft.
Free. No spam. Unsubscribe anytime.