⚡ Breaking - AI Agents Are Logging Into Bank Accounts And Banks Can't Tell

📰 BREAKING

A credential-stuffed bot used stolen login details to access customer accounts at a major bank. The institution didn't know. No alarm. No flag. No trace until external researchers disclosed it.

The conventional wisdom: banks have the strongest identity controls in financial services. Billions spent on fraud detection, behavioral biometrics, multi-factor auth. The working assumption is that if someone logs in with valid credentials and behaves like the account holder, they probably are.

That assumption breaks when AI agents enter the picture.

Here's what changed. Banks built their defenses around human attack patterns—typing cadence, mouse movement, device fingerprints. An AI agent accessing accounts through APIs or browser automation produces none of those signals. It can distribute activity across timeframes that defeat velocity checks. It can mimic transaction patterns pulled from the same dark web forums that sold the credentials. Your fraud model isn't calibrated to catch something that doesn't behave like a human attacker or a human customer.

The second-order problem: you can't govern what you can't see. APRA CPS 230 mandates operational resilience and control over critical operations. If you don't have agent detection at the session layer—distinguishing between a customer, a sanctioned agent acting on their behalf, and an unauthorized bot—you have no basis for the attestations your risk function is filing. You're certifying controls you don't actually have.

When your identity layer can't differentiate between your customer and their digital impersonator, where does your control environment actually begin?