Before you give an AI tool access to your bank.

One page. Seven checks. Ten minutes.

In October, Bank of America told customers in an email: “If you do share your credentials, keep in mind that you’re responsible for activity resulting from that access.” (Reported by Zack Whittaker, TechCrunch, Oct 27, 2026.)

Here’s how to get the help without handing over the keys.

  1. The password test.

    If a tool asks for the username and password you use to log in to your bank, stop. That’s exactly the access your bank says is on you.

  2. Read, or move money?

    Sorting, matching, spotting duplicates and drafting reports only need to read. Paying, transferring and approving are a different job. Don’t hand both to the same tool.

  3. Give it copies, not keys.

    Export the data and upload the file. In QuickBooks Online: Settings → Export data → Reports tab → pick the dates → Export to Excel. Your bank and other accounting software have a transactions download too.

  4. Want a live feed? Use an official connection.

    Connect through your accounting software’s bank feed, or through an app your bank lets you approve. It sends you to your bank to say yes. It never asks you to type your bank password into the tool.

  5. Keep money movement human.

    Fill in:

    • The AI may: draft bills, categorize, flag duplicates.
    • ________ approves every payment.
    • Above $________, ________ signs too.

    In QuickBooks Online, the Bill clerk, Bill approver and Bill payer roles split those jobs. Bill Pay Elite and QuickBooks Online Advanced add an approval workflow before payments go out.

  6. Ask any AI tool six questions before it touches your books.

    1. Does it ask for my bank password, or connect officially?
    2. Read-only, or can it move money?
    3. Who approves what it drafts?
    4. Is there a log of everything it did?
    5. How do I cut it off?
    6. Where is my data stored, and who can see it?

  7. Know how to cut it off.

    • QuickBooks Online: Integrations → find the app → Action ▼ → Disconnect.
    • Xero: the person who connected the app disconnects it from Connected Apps.
    • Bank of America: you can revoke third-party access from Online or Mobile Banking. If a tool ever had your login, change your password. That’s the bank’s own advice.

Not legal or financial advice. Check your bank’s terms on third-party access.