Banks warn AI shopping agents pose fraud and data-privacy risks

Major banks warned that AI shopping agents pose growing risks of fraud, scams, and data-privacy breaches, according to a report from Reuters on September 22, 2026, from Paris.

The warning came from NatWest, Bank of America, ING, Capital One, New Zealand's ASB Bank, and Commonwealth Bank of Australia. The banks expressed concern that AI agents may buy the wrong thing, overspend, or expose customers to financial losses through scams and fraud.

Consumer Protection Gaps

A core worry cited by the banks: customers lack clarity about their rights and protections when AI agents conduct transactions on their behalf. As Reuters reported, the banks stated, "They are not sure whether they will be protected or who they will need to go to if things go wrong."

The report flagged specific attack vectors, including AI agents requesting and entering customer card details directly into third-party websites, and steering users toward payment methods with weaker fraud protections.

Proposed Regulatory Framework

The banks called on policymakers to establish three key safeguards: mandatory disclosure when an AI agent is involved in a transaction, greater transparency over how AI agents make purchasing decisions, and strengthened protections for customer data. These recommendations reflect concern that the current regulatory landscape has not kept pace with the deployment of autonomous shopping tools.

The warning underscores a growing tension in the AI agent economy. While shopping agents promise convenience and time savings for consumers, financial institutions see them as introducing new vectors for social engineering, credential theft, and unauthorized spending. Banks have direct exposure to fraud losses and chargebacks when AI agents mishandle transactions or are compromised by attackers.

Timing and Industry Impact

The timing of the warning—as AI shopping agents move from research prototypes to commercial deployment—suggests the issue is moving from hypothetical to urgent. The participation of six major global financial institutions across three continents (Europe, North America, and the Asia-Pacific region) indicates the concern is not isolated to a single regulator or market.

No specific enforcement actions, court filings, or regulatory deadlines were included in the banks' warning. The statement functions as an early alert to policymakers, positioning financial institutions as advocates for guardrails before agent-driven shopping becomes the default consumer behavior.