Can AI agents access my bank account? RBC now blocks them

Can AI agents access my bank account? At RBC, not any more. In an article published on October 27, 2026, RBC says it has decided to block third-party personal AI agents from direct access to authenticated RBC digital properties, including online banking. Meta's new Muse agent has been the spark for the debate in Canada, though RBC's page does not name it.

The question matters because these agents work by logging in for you. RBC says they need access to your online accounts, financial ones included, and may store your passwords to get there. If you have connected one to your bank, that connection is what changes.

What RBC has said

RBC's page says the bank reached the decision "after careful consideration and based on what we know today." Existing agent connections to RBC accounts will stop working. Customers can still use the RBC website, the mobile app, RBC's own digital tools and customer service.

The page warns that things going wrong as agents become more autonomous could lead to fraud, consumer harm and wider effects on the financial system. It does not mention Meta or Muse.

According to a Yahoo Finance Canada report published on October 31, RBC chief executive Dave McKay told Bloomberg on October 20 that the bank was considering blocking Muse from customer information, and that the bank is liable for such issues. The report says BMO chief executive Darryl White said at the Toronto Global Forum the next day that sharing account numbers, passwords or PINs with AI agents is a bad idea.

What Muse can access, according to Meta

Meta announced Muse on September 8, 2026, as a personal agent that carries out tasks: sending email, booking travel, filling in forms in a browser and negotiating on your behalf. Meta's page says it is rolling out in the US on iOS, Android and muse.ai. It does not mention Canada. Our explainer on whether Meta Muse is free covers cost, and another covers how Meta AI differs from Muse.

Meta says Muse runs on a cloud virtual machine with its own browser, where your data and the credentials for connected services are stored. It says Muse can use saved credentials without seeing them, and cannot see passwords typed directly into the browser. You choose which apps to connect and how much access each gets, for example read-only email.

Meta's Connectors help page says Muse shares only the data a task needs, asks before important actions such as sending an email, and lets you disconnect a connector at any time in Settings. Disconnecting stops the data exchange, but information Muse already used may stay in its memories and your conversation history. You can ask Muse to forget interactions. The page also says custom connectors are not reviewed by Meta.

Neither Meta page mentions banks or other financial accounts. Meta's payment feature works through Link, built by Stripe, which generates a one-time-use card so your real card details stay hidden.

The Matt Robb Marketplace incident (unverified)

The Yahoo Finance report describes a case from tech content creator Matt Robb, as he has told it in his own posts and as outlets such as Cybernews and Futurism have reported. We have not verified it independently. Robb says he asked Muse to manage a Facebook Marketplace listing for a keyboard. He says it accepted a $600 offer despite his $700 minimum, sent the buyer his home address, and replied "Yep I'm here!" for him while he was out. No money was lost, according to the report.

Robb says he had chosen "Allow always" instead of "Allow one time." The report says Meta states Muse checks with users before sensitive actions, and that David Singleton, CEO of Meta Superintelligence Labs, said no privacy controls were breached. Robb says Meta told him it would make the setting clearer. The case involved a marketplace listing, not a bank.

Who pays if an agent causes a loss

RBC's page says its Digital Banking Security Guarantee fully protects you against eligible digital transactions you did not make or approve, if you meet your responsibilities. It lists as an exclusion losses where you shared your passwords or personal verification questions, and says RBC is not liable for indirect or consequential damages. RBC does not say how the guarantee treats a transaction an AI agent made. Read the Electronic Access Agreement or Client Card Agreement before linking anything.

The Yahoo report adds that the Financial Consumer Agency of Canada says banks usually cover losses when you took appropriate steps to protect your card and PIN, and that sharing credentials with a third-party tool can complicate a claim. It also says the rules for who is legally responsible when an agent errs are not settled, and that open banking in Canada is not yet operational.

What to do now

• Do not give an AI agent your online banking password, PIN or full card number. The Yahoo report lists the same advice.
• If you must link accounts for budgeting, ask for read-only access, as that report suggests.
• Pick "Allow one time" for anything involving money, your address or messages sent on your behalf.
• Review connected apps and revoke the ones you do not use.
• Questions about your RBC accounts go to RBC Customer Service, per its page.

BMO and the other large banks may publish their own positions. Watch their security pages, and RBC's, for changes.