The block already applies to retail customers. A JPMorgan spokeswoman confirmed to CNBC on Tuesday that outside agents cannot act on a customer’s behalf or log in with a customer’s credentials. They can see balances in read-only form when the customer has authorized a connector like Plaid. They cannot send money or pay bills, and the bank gave no timeline for changing that.

Dimon framed the issue as a question of who carries the loss. People who use outside agents should understand the risk and “the liability transfer,” he said on the call, adding that the bank is building tools to protect customers. JPMorgan already runs AI agents internally and plans customer-facing versions.