Wells Fargo Shifts AI Agent Liability to Customers From 24 November, With Proof-of-Revocation Duties
The bank's updated online access agreement makes customers responsible for properly revoking AI agent authorizations — and for keeping evidence they did so — a contractual template likely to spread to other banks.
Wells Fargo has updated its Online Access Agreement to shift greater responsibility for actions taken by customer-authorized AI agents onto customers, effective 24 November 2026, according to Yahoo Finance reporting circulated through market media on 11 November.
Two details stand out. First, the liability shift is implemented through a service agreement rather than a regulation — a pattern any bank can adopt quickly. Second, the burden of proof falls on the customer: account holders must revoke agent authorizations "properly" and retain evidence of having done so, a documentation obligation that consumer banking services have never before demanded.
The move follows a series of US banks simply blocking agentic access outright, and lands as regulators discuss evidence standards for automated decisions. For the industry, it marks the first calendared, contract-level implementation of agent liability — and it makes event-level proof of consent and revocation a product requirement rather than a theoretical one.