Citi Restricts AI Access to Customer Accounts Amid Regulatory Waryness
Key Summary
Citi is restricting AI agents from accessing customer accounts, according to the Financial Times, as the bank focuses on internal governance and strict identity verification. This move comes amidst growing regulatory scrutiny of AI usage in finance, with JPMorgan Chase also announcing a ban on external AI agents accessing customer accounts. The banks' emphasis on identity verification highlights the issue isn't the agents themselves, but unverified ones. This restriction may impact companies building agentic AI tools for personal finance, as it limits access to a big chunk of the market.
Citi Restricts AI Access to Customer Accounts Amid Regulatory Waryness
Citi is restricting AI agents from accessing customer accounts, according to the Financial Times. The clearest window into Citi's thinking came from CEO Jane Fraser at Sibos 2026 in Miami on September 30, 2026. Sibos is the annual banking and payments conference.Fraser argued that autonomous AI agents need rigorous identity verification and authentication before they can execute transactions. That applies whether the agent is acting for a customer or for the bank itself. Fraser said she was confident Citi could avoid the risks that come with uncontrolled agents. Her centerpiece was ARC, an internal platform Citi uses to monitor and govern AI agents. Advertisement
@media only screen and (min-width: 0px) and (min-height: 0px) { div[id^="wrapper-sevio-de1434f5-fa9e-44a6-93c3-4c2439763717"] { width:320px; height: 100px; } } @media only screen and (min-width: 728px) and (min-height: 0px) { div[id^="wrapper-sevio-de1434f5-fa9e-44a6-93c3-4c2439763717"] { width: 728px; height: 90px; } }
window.sevioads = window.sevioads || []; var sevioads_preferences = []; sevioads_preferences[0] = {}; sevioads_preferences[0].zone = "de1434f5-fa9e-44a6-93c3-4c2439763717"; sevioads_preferences[0].adType = "banner"; sevioads_preferences[0].inventoryId = "c5700508-581b-472c-8fdd-a931cdbfc8e1"; sevioads_preferences[0].accountId = "1e47efc1-ec2d-4fca-a8b9-354e249e5095"; sevioads.push(sevioads_preferences);
“You cannot create an agent without going through ARC.” ARC was introduced in 2026 and is mandatory for overseeing all of Citi's internal AI agents. Citi has been gradually rolling out governed AI systems internally since at least mid-2025, with an emphasis on compliance and oversight.
AI, tech, and the markets they move—-in one daily briefing. Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
Email address
Subscribe free
We respect your privacy. Unsubscribe anytime.
JPMorgan Chase CEO Jamie Dimon went further during the bank's third-quarter earnings call on October 13–15, 2026. Dimon declared a total ban on external AI agents accessing JPMorgan customer accounts. His stated concern was the danger of “rogue agents.” There is a difference in emphasis between the two banks. Dimon publicly prohibited third-party agents outright. Fraser's public remarks have centered on strict internal governance rather than announcing an equivalent blanket ban on outside agents. For companies building agentic AI tools for personal finance, this is a meaningful headwind. Many of the most compelling use cases involve an agent that can see and act on a user's bank accounts. If the largest banks wall off customer accounts, those products lose access to a big chunk of the market. For the banks themselves, governance isn't free. Platforms like ARC require staff, systems, and ongoing monitoring. Fraser's emphasis on identity verification hints that the issue isn't agents per se, but unverified ones. Unlike JPMorgan, Citi has avoided a public ban on external agents, instead focusing on internal controls.