Wells Fargo to require customers to keep evidence of revoked AI agent access

Wells Fargo's updated Online Access Agreement, effective 24 November, adds a section covering third-party artificial intelligence agents. Under the new terms, instructions issued by an AI agent acting on a customer's behalf are deemed to have been initiated and authorized directly by the customer, agent use is at the customer's own risk, and the bank may require registration of agents or block access. Customers must revoke agent permissions properly and timely, keep evidence of that revocation, and provide it when the bank asks — with responsibility continuing until the customer notifies the bank.

The clause is the most explicit commercial codification yet of a principle moving through banking supervision: that decisions and consents involving AI agents must leave evidence that can be shown later. Chase rewrote its terms in late October to prohibit credential-based agent access, and JPMorgan, Bank of America, Citi and Morgan Stanley block external agents outright. Legal commentators quoted by American Banker question how realistic the evidence obligation is for ordinary customers, since stopping a chatbot typically leaves nothing a third party can inspect. The agreement is still expected to shape how other banks draft agent-related clauses as consumer AI adoption grows.