Citi restricts AI agents from customer accounts as deposit fears grow, FT says

What happened

The Financial Times (FT) reported on Friday that Citi has joined other US banks in limiting AI agents' access to customer accounts. These agents are software assistants that can act on a person's behalf, not just answer questions. The FT said lenders fear such tools could move billions of dollars in deposits toward higher-yielding accounts. The step fits comments by Citi chief executive Jane Fraser at the Sibos banking conference in Miami earlier this month, where she said agents must have proper identity checks, authentication and oversight before they are allowed to carry out transactions on their own.

What it means

For a bank, deposits are cheap money. Customers often leave cash in checking or low-rate savings accounts out of habit, and banks lend that money out at much higher rates. The gap is a large part of how they earn a living. An AI agent that never forgets to compare rates could break that habit, sweeping idle cash to wherever it earns most. If that happened at scale, banks would either lose deposits or have to pay more to keep them.

That is the commercial angle the FT highlighted. The public explanation from banks has focused on security. At Sibos, Fraser said verifying that an agent truly acts for a real person is an issue that keeps the industry awake, and she promised that Citi would not let agents loose without the right controls. Inside the bank, Citi has built a control layer called ARC that every internal agent must pass through so its actions can be monitored.

Both concerns can be true at once. Agents that can move money create new fraud and hacking risks, and Fraser pointed to cybersecurity as one of the major challenges of the AI era. Citi moves roughly $6 trillion a day, according to Fraser, so the stakes of an error are large.

The bigger question is who controls the customer relationship. If people increasingly manage money through AI assistants built by technology firms, banks risk becoming background utilities competing purely on rate. Restricting access buys banks time, but it may also frustrate customers who want these tools, and regulators could eventually weigh in on how open bank accounts must be.

The bull case

Limiting outside agents protects a stable, low-cost deposit base, which supports net interest income at a time of high rates. It also reduces the risk of fraud or costly errors from immature AI tools, and Citi's own ARC control system suggests it can offer safer in-house agents later, keeping customers inside its own ecosystem rather than handing the relationship to tech platforms.

The bear case

The restriction treats the symptom, not the cause. If customers want automated rate-shopping, they may move to banks or fintechs that allow it, so deposit costs could rise anyway. Blocking popular tools risks looking anti-consumer, and pressure from regulators or rivals could force access open later, leaving banks that delayed less prepared for a more competitive deposit market.