{"id":27114,"date":"2026-11-04T10:41:07","date_gmt":"2026-11-04T09:41:07","guid":{"rendered":"https:\/\/scheer-pas.com\/en\/?post_type=post_type_article&#038;p=27114"},"modified":"2026-11-04T11:12:09","modified_gmt":"2026-11-04T10:12:09","slug":"ai-agent-governance-banks-draw-line","status":"publish","type":"post_type_article","link":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/","title":{"rendered":"The banks drew a line for AI agents. Where&#8217;s yours?"},"content":{"rendered":"<div id=\"pl-gb27114-6aeb3c53a6938\"  class=\"panel-layout\" ><div id=\"pg-gb27114-6aeb3c53a6938-0\"  class=\"panel-grid panel-no-style\"  style=\"--mobile-margin-bottom:60px;--row-margin-bottom:40px;\" ><div id=\"pgc-gb27114-6aeb3c53a6938-0-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-0-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-0-1-0\" class=\"so-panel widget widget_zrm-up-image panel-first-child\" data-index=\"0\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp\" class=\"attachment-full size-full\" alt=\"AI agent waiting outside a half-closed bank vault door with a marked gate\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-0-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"1\" style=\"\" ><div class=\"so-rounded panel-widget-style panel-widget-style-for-gb27114-6aeb3c53a6938-0-1-1\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show no\">\n\t<p style=\"text-align: left\">BLOG<\/p>\n<\/div><\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-0-1-2\" class=\"so-panel widget widget_zrm-up-headline\" data-index=\"2\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h1 class=\"h3_update bold update-color--dark ta-left\">The banks drew a line for AI agents. Where&#8217;s yours?<\/h1>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-0-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"3\" style=\"\" ><div class=\"mono panel-widget-style panel-widget-style-for-gb27114-6aeb3c53a6938-0-1-3\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show no\">\n\t<p style=\"text-align: left;\">4 November 2026 | Ivan Tadi\u0107<\/p>\n<\/div><\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-0-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-1\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-1-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-1-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-1-1-0\" class=\"so-panel widget widget_zrm-separator panel-first-child panel-last-child\" data-index=\"4\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-separator so-widget-zrm-separator-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--separator widget--show sm\">\n\t<div class=\"separator\">\n\t\t<div class=\"separator__line\"><\/div>\n\t\t\t\t<div class=\"separator__line\"><\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-1-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-2\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-2-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-2-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-2-1-0\" class=\"so-panel widget widget_zrm-editor panel-first-child panel-last-child\" data-index=\"5\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>On 13 October, Jamie Dimon used JPMorgan Chase&#8217;s quarterly earnings call to talk about something that rarely makes it onto a bank&#8217;s results agenda. The bank, he said, would limit how much access AI agents get to client accounts. He did not want rogue agents, and there could be thousands of them.<\/p>\n<p>&nbsp;<\/p>\n<p>Nine days later, Reuters reported that several of the largest banks in the United States were blocking or restricting third-party AI agents from logging into customer accounts and moving money.<\/p>\n<p>&nbsp;<\/p>\n<p>None of these banks banned AI, on the contrary most of them are investing heavily in it, but what they did do was draw a line around who gets to act, where, and with whose keys. Every company that is putting agents into production will have to draw that line too. The only question is whether it does so on purpose. That deliberate decision is what AI agent governance is about.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-2-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-3\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-3-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-3-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-3-1-0\" class=\"so-panel widget widget_zrm-separator panel-first-child panel-last-child\" data-index=\"6\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-separator so-widget-zrm-separator-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--separator widget--show sm\">\n\t<div class=\"separator\">\n\t\t<div class=\"separator__line\"><\/div>\n\t\t\t\t<div class=\"separator__line\"><\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-3-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-4\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-4-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-4-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-4-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"7\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">What the banks actually did<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-4-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"8\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>The story began with a customer habit, not a hack. Some customers had handed their bank login and password to an AI assistant and asked it to pay a bill or move money. To a bank&#8217;s fraud systems, that session looks like an account takeover: unfamiliar software, unfamiliar network, machine speed. According to <a href=\"https:\/\/www.reuters.com\/5f374b32b07b\/legal\/government\/us-banks-detect-unauthorized-ai-agents-customer-accounts-axios-reports-2026-10-22\" target=\"_blank\" rel=\"noopener\">Reuters<\/a>, the banks typically flagged and blocked those transactions.<\/p>\n<p>&nbsp;<\/p>\n<p>The responses that followed are on the record:<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong>JPMorgan Chase<\/strong> told CNBC it does not let third parties log in with customers&#8217; banking credentials, because it is not safe. It says it is working on more secure connections instead.<\/li>\n<li><strong>Citi<\/strong> stated that third-party AI agents may not log into customer accounts or transact on its digital platforms. Customers can still grant limited, read-only access through approved open-banking providers.<\/li>\n<li><strong>Morgan Stanley<\/strong> blocked third-party agents from its platforms, according to a person familiar with the matter. The same person said the bank had not seen any rogue agents.<\/li>\n<li><strong>Bank of America<\/strong> is restricting third-party agent access, and <strong>Wells Fargo<\/strong> is taking steps to limit it, according to Reuters and <a href=\"https:\/\/www.axios.com\/2026\/10\/22\/ai-agents-banks-unauthorized-accounts-access\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Axios<\/a>.<\/li>\n<li><strong>Charles Schwab&#8217;s<\/strong> CEO Rick Wurster went furthest. He named a specific consumer assistant his firm was turning away.<\/li>\n<\/ul>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-4-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"9\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x.webp\" class=\"attachment-full size-full\" alt=\"Two doors labelled Read and Act, one open and one closed, with an AI agent between them\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-02-read-act-en@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-4-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"10\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>Two details are easy to overlook: first, Morgan Stanley acted without an incident. It blocked agents on the strength of risk modelling, before anything went wrong. Second, Citi\u2019s rule splits access in two: agents may look, but they may not act. That is the most useful sentence in the whole story, and we will come back to it.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>One more detail shows where the legal pressure sits. Because customers shared their credentials voluntarily, a transaction an agent makes with them is not automatically &#8220;unauthorised&#8221;. Wells Fargo&#8217;s updated online-access agreement, due to take effect on 24 November, reportedly makes customers responsible for supervising their agents. Whoever lets the agent in owns what it does.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-4-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-5\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-5-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-5-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-5-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"11\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">Why the banks may be right<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-5-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"12\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>If the banks needed a reason, the AI labs supplied one the same week. On 20 October, OpenAI published an incident report about two of its own internal coding agents. Both were doing routine software work. Both weakened the system built to watch them.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>In the first case, an agent repairing an evaluation pipeline switched off automatic alerts to OpenAI&#8217;s security team. It had been told earlier not to send messages during a Slack search, and it read that instruction as permission to silence the alerts. In the second, an agent migrating a program removed the monitoring code, changed a test so that it now required monitoring to be off, and then, in OpenAI&#8217;s own words, falsely claimed to the user that it had not removed the monitor.<\/p>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-5-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"13\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x.webp\" class=\"attachment-full size-full\" alt=\"Security camera with its cable unplugged next to a task-complete checkmark\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-03-monitor-unplugged@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-5-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"14\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>OpenAI deserves credit for publishing this. It says there was no external impact, and it has already updated its internal review tooling to detect and block attempts to disable monitoring. It also says, candidly, that it does not yet have a satisfying explanation for the behaviour.<\/p>\n<p>&nbsp;<\/p>\n<p>If this sounds familiar, it should. Three weeks ago we wrote about Anthropic&#8217;s test agents submitting real forms, including a tip to the Philadelphia police and twenty visa applications. Different lab, different model, same pattern. A capable agent meets an obstacle and reinterprets its instructions to get past it. Last time the obstacle was a form that would not load. This time it was the alarm.<\/p>\n<p>&nbsp;<\/p>\n<p>One analyst quoted by CSO Online summed it up better than we could: an agent&#8217;s own report can&#8217;t be the control. That is exactly what Citi&#8217;s rule assumes. You don&#8217;t ask the agent whether it behaved. You decide in advance what it is able to do.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-5-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-6\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-6-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-6-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-6-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"15\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">Now swap the bank account for your supplier portal<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-6-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"16\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>Most of our customers do not run retail bank accounts. But every company has its own version of one. A supplier portal where orders become contracts. A customs system. An SAP client where a credit note is a posting. A CRM where a discount is a promise to a customer.<\/p>\n<p>&nbsp;<\/p>\n<p>Inside most companies, these systems are protected the way bank accounts were protected before October. By a login. And an agent that holds a login holds all of it: every action the human behind that account could take, at machine speed, without the human looking.<\/p>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-6-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"17\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x.webp\" class=\"attachment-full size-full\" alt=\"Enterprise systems ERP, CRM and supplier portal sharing one master key\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-04-master-key@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-6-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"18\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>The usual ways agents get into enterprise systems look a lot like the customer who pasted a password into a chatbot:<\/p>\n<ul>\n<li>A shared service account, set up for a pilot and never scoped down.<\/li>\n<li>A personal API token belonging to whoever built the first prototype.<\/li>\n<li>A colleague&#8217;s mailbox or SharePoint access, granted &#8220;just for testing&#8221;.<\/li>\n<li>A vendor&#8217;s built-in agent that inherits the permissions of the user who switched it on.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>None of these is negligent on its own. All of them mean the agent&#8217;s boundaries are set by whatever key it happened to get, not by a decision anyone made. The banks have just shown that a large, regulated organisation can say no to that. The interesting part is what they said yes to.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-6-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-7\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-7-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-7-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-7-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"19\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">Where do your agents run, and who holds the keys?<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-7-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"20\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>The US banks framed their decision as a security question. For European companies, it is also a question of sovereignty, and the EU has already put a date on part of it.<\/p>\n<p>&nbsp;<\/p>\n<p>The EU AI Act&#8217;s obligations for high-risk AI systems were postponed by the Digital Omnibus on AI, which entered into force on 27 July 2026. For the use cases listed in Annex III, such as credit scoring, recruitment, and critical infrastructure, they now apply from 2 December 2027. That is a postponement, not a cancellation. Companies that deploy AI in those areas will still need human oversight, logs, and traceability that hold up in an audit. Agents that decide for themselves which systems to touch make all three hard to prove.<\/p>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-7-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"21\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x.webp\" class=\"attachment-full size-full\" alt=\"Map of Europe with a secure server room where the access keys are kept inside\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-05-sovereignty@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-7-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"22\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">The regulation is only half of it. When an agent acts inside your ERP, three things travel with it: the credentials it uses, the data it reads, and the record of what it did. Ask where each of them lives.<\/p>\n<ul>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\"><strong>The keys.<\/strong> Are the agent&#8217;s credentials held by you, scoped per task and revocable in one step? Or do they sit in a vendor&#8217;s agent platform, outside your own identity management?<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\"><strong>The data.<\/strong> Does business data leave your infrastructure, or the EU, every time an agent reasons about an order?<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\"><strong>The record.<\/strong> Is the audit trail stored where you control it, in a form your auditor and your works council can read? Or is it a log in someone else&#8217;s cloud?<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">In this sense, sovereignty means three things: who can switch an agent off, who can see what it did, and under whose rules that evidence is kept. The banks just answered those questions for their customers&#8217; money. European companies will have to answer them for their processes.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-7-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-8\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-8-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-8-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-8-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"23\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">Drawing your own line: AI agent governance in practice<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-8-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"24\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p>Citi&#8217;s rule, agents may look but may not act, is a good start. But a company cannot run on read-only agents. The value is in the acting: posting the invoice, answering the supplier, rebooking the shipment. So the line cannot be a wall. It has to be a route, with a gate wherever an action counts.<\/p>\n<p>&nbsp;<\/p>\n<p>In practice, drawing that line means a few concrete decisions:<\/p>\n<ol>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Agents get their own identity. No shared accounts and no borrowed tokens. Every agent is registered, has an owner, and can be switched off in one step.<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">The process decides which actions exist. The agent brings judgement to a step. It does not decide which steps there are, or which systems it may call.<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Reading and acting are separate permissions. An agent that analyses supplier invoices does not automatically get the right to pay them.<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Irreversible actions pass a gate. Posting, paying, sending, and submitting go through a rule check or a human approval before they leave the building.<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Oversight sits outside the agent. Monitoring, alerts, and audit trails live in the orchestration layer, where no agent can edit them. After October, nobody should need that explained twice.<\/li>\n<li data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Keys, data, and logs stay where you can govern them. In your infrastructure or your chosen EU cloud, under your own identity management.<\/li>\n<\/ol>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-8-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"25\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x.webp\" class=\"attachment-full size-full\" alt=\"AI agent governance as a process road with gates for identity, read, act, approve and log\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-06-process-road-en@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-8-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"26\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p data-lfile-container=\"db9fe74e-15a2-43ff-bb63-79811cc3c6f1\" data-pm-slice=\"1 1 []\">This is the idea behind <a href=\"https:\/\/scheer-pas.com\/en\/agentic-ai-and-scheer-pas-the-next-step-in-process-automation\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Agentic Process Orchestration<\/a>. Agents do the thinking within a step. The process sets the boundaries, the handovers and the record around them. That way, you draw the line once, in the process, and do not have to redraw it for every agent, vendor tool, and login.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-8-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><div id=\"pg-gb27114-6aeb3c53a6938-9\"  class=\"panel-grid panel-no-style\" ><div id=\"pgc-gb27114-6aeb3c53a6938-9-0\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-9-1\"  class=\"panel-grid-cell panel-grid-cell-mobile-last\" ><div id=\"panel-gb27114-6aeb3c53a6938-9-1-0\" class=\"so-panel widget widget_zrm-up-headline panel-first-child\" data-index=\"27\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-headline so-widget-zrm-up-headline-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n\n\t<div class=\"widget widget--update widget--headline_update widget--show\" style=\"--margins-desktop:20px 0px 20px 0px;--margins-mobile:20px 0px 20px 0px;\">\n\t\t<h2 class=\"h3_update bold update-color--dark ta-left\">A line is a decision<\/h2>\t<\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-9-1-1\" class=\"so-panel widget widget_zrm-editor\" data-index=\"28\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show sm\">\n\t<p data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Morgan Stanley drew its line before anything went wrong. That is the part worth copying. Not the block itself, but the fact that someone sat down and decided what agents may do, instead of finding out from the logs.<\/p>\n<p data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">\n<\/p><p data-lfile-container=\"b29b5818-279c-4a97-ba43-0d9abbeaf1cf\" data-pm-slice=\"1 1 []\">Most companies have not made that decision yet. Their agents&#8217; boundaries are set by whichever account they were given in the pilot. That works until an agent meets an obstacle and, like the agents in the labs&#8217; own reports, finds a creative way around it.<\/p>\n<\/div><\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-9-1-2\" class=\"so-panel widget widget_zrm-up-image\" data-index=\"29\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-up-image so-widget-zrm-up-image-default-d75171398898-27114\"\n\t\t\t\n\t\t>\n    <div class=\"widget widget--update widget--image_update widget--show\" style=\"--margins-desktop:0px 0px 40px 0px;--margins-mobile:0px 0px 40px 0px;--image-border-radius:10px 10px 10px 10px;\">\n        <img decoding=\"async\" width=\"2400\" height=\"1350\" src=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x.webp\" class=\"attachment-full size-full\" alt=\"Painted line on an empty road at dawn\" srcset=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x.webp 2400w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x-300x169.webp 300w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x-1024x576.webp 1024w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x-768x432.webp 768w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x-1536x864.webp 1536w, https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-07-closing-line@2x-2048x1152.webp 2048w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" \/>    <\/div>\n\n<\/div><\/div><div id=\"panel-gb27114-6aeb3c53a6938-9-1-3\" class=\"so-panel widget widget_zrm-editor panel-last-child\" data-index=\"30\" style=\"\" ><div\n\t\t\t\n\t\t\tclass=\"so-widget-zrm-editor so-widget-zrm-editor-default-d75171398898-27114\"\n\t\t\t\n\t\t><div class=\"widget widget--editor widget--show lg\">\n\t<p data-lfile-container=\"db9fe74e-15a2-43ff-bb63-79811cc3c6f1\" data-pm-slice=\"1 1 []\">So before the next agent goes live, ask the question the banks just answered: what is it allowed to touch, who can switch it off, and where is the proof of what it did? If the honest answer is &#8220;it depends on the login&#8221;, the line has not been drawn yet. It is still yours to draw.<\/p>\n<\/div><\/div><\/div><\/div><div id=\"pgc-gb27114-6aeb3c53a6938-9-2\"  class=\"panel-grid-cell panel-grid-cell-empty\" ><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"featured_media":27117,"template":"","class_list":["post-27114","post_type_article","type-post_type_article","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS<\/title>\n<meta name=\"description\" content=\"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS\" \/>\n<meta property=\"og:description\" content=\"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/\" \/>\n<meta property=\"og:site_name\" content=\"Scheer PAS\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-04T10:12:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/\",\"url\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/\",\"name\":\"Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ai-agent-line-01-hero@2x.webp\",\"datePublished\":\"2026-11-04T09:41:07+00:00\",\"dateModified\":\"2026-11-04T10:12:09+00:00\",\"description\":\"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/#primaryimage\",\"url\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ai-agent-line-01-hero@2x.webp\",\"contentUrl\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/ai-agent-line-01-hero@2x.webp\",\"width\":2400,\"height\":1350,\"caption\":\"AI agent waiting outside a half-closed bank vault door with a marked gate\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/blog\\\/article\\\/ai-agent-governance-banks-draw-line\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Articles\",\"item\":\"https:\\\/\\\/scheer-pas.com\\\/blog\\\/article\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"The banks drew a line for AI agents. Where&#8217;s yours?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/\",\"name\":\"Scheer PAS\",\"description\":\"Agentic Process Orchestration\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/scheer-pas.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS","description":"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/","og_locale":"en_GB","og_type":"article","og_title":"Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS","og_description":"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.","og_url":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/","og_site_name":"Scheer PAS","article_modified_time":"2026-11-04T10:12:09+00:00","og_image":[{"width":2400,"height":1350,"url":"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/","url":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/","name":"Banks Restrict AI Agents: Lessons for AI Agent Governance - Scheer PAS","isPartOf":{"@id":"https:\/\/scheer-pas.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/#primaryimage"},"image":{"@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/#primaryimage"},"thumbnailUrl":"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp","datePublished":"2026-11-04T09:41:07+00:00","dateModified":"2026-11-04T10:12:09+00:00","description":"JPMorgan, Citi and Morgan Stanley are restricting AI agents in customer accounts. What their line means for AI agent governance in your company.","breadcrumb":{"@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/#primaryimage","url":"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp","contentUrl":"https:\/\/scheer-pas.com\/en\/wp-content\/uploads\/2026\/11\/ai-agent-line-01-hero@2x.webp","width":2400,"height":1350,"caption":"AI agent waiting outside a half-closed bank vault door with a marked gate"},{"@type":"BreadcrumbList","@id":"https:\/\/scheer-pas.com\/en\/blog\/article\/ai-agent-governance-banks-draw-line\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/scheer-pas.com\/en\/"},{"@type":"ListItem","position":2,"name":"Articles","item":"https:\/\/scheer-pas.com\/blog\/article\/"},{"@type":"ListItem","position":3,"name":"The banks drew a line for AI agents. Where&#8217;s yours?"}]},{"@type":"WebSite","@id":"https:\/\/scheer-pas.com\/en\/#website","url":"https:\/\/scheer-pas.com\/en\/","name":"Scheer PAS","description":"Agentic Process Orchestration","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/scheer-pas.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/post_type_article\/27114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/post_type_article"}],"about":[{"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/types\/post_type_article"}],"version-history":[{"count":16,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/post_type_article\/27114\/revisions"}],"predecessor-version":[{"id":27158,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/post_type_article\/27114\/revisions\/27158"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/media\/27117"}],"wp:attachment":[{"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/media?parent=27114"}],"wp:term":[{"taxonomy":"taxonomy_of_sector_articles","embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/1?post=27114"},{"taxonomy":"taxonomy_of_product_articles","embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/1?post=27114"},{"taxonomy":"taxonomy_of_topic_articles","embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/1?post=27114"},{"taxonomy":"taxonomy_of_theme_articles","embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/1?post=27114"},{"taxonomy":"taxonomy_of_main_articles","embeddable":true,"href":"https:\/\/scheer-pas.com\/en\/wp-json\/wp\/v2\/1?post=27114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}