Citi is implementing restrictions on AI agents attempting to access customer accounts. CEO Jane Fraser stated at the Sibos 2026 conference that autonomous agents must undergo rigorous identity verification and authentication before executing any financial transactions.
To manage these risks, Citi utilizes an internal platform called ARC, introduced in 2026. This system is mandatory for monitoring and governing all internal AI agents, a process the bank has been developing since mid-2025.
JPMorgan Chase has adopted a stricter approach. During an earnings call held between October 13 and 15, 2026, CEO Jamie Dimon announced a total ban on external AI agents accessing customer accounts, citing concerns over rogue software.
While Citi focuses on internal governance and verification rather than a blanket ban, these policies present challenges for developers of personal finance AI tools. Restricting access to bank accounts limits the functionality of products that rely on direct account interaction.
