Canada's big banks are blocking personal AI agents: what it means for small businesses

Several of Canada's biggest banks are shutting personal AI agents out of online banking. RBC says it is blocking third-party personal AI agents from direct access to its authenticated digital services, TD says the same, BMO says it does not permit AI agents at all, and Scotiabank says it will limit them. If you or anyone on your team has handed a banking login to an AI assistant, that setup is about to stop working, and it may already have weakened your fraud protection.

What happened

RBC told customers on October 27, 2026 that it has decided to "block third-party personal AI agents from direct access to authenticated RBC digital properties including online banking," and that existing agent connections "will stop working." Global News reported on October 28 that other banks followed with their own statements:

• TD: "TD has made the decision to block all third-party personal AI agents from direct access to banking information."
• BMO: "To protect our clients, BMO does not permit AI agents to access our digital properties or execute transactions."
• Scotiabank: "Scotiabank will limit third-party AI agents from accessing its banking platforms."
• CIBC: "We do not support personal AI agents directly opening or accessing accounts," adding that clients "should not share their banking credentials with an AI agent."

RBC describes personal AI agents as tools that "need access to your online accounts, including financial ones, and may store your passwords to get there." The federal minister's office said on October 22 that the government is "monitoring this issue closely." The story also reached ordinary searchers: "rbc online banking" was a trending search in Alberta on October 30, according to Google Trends.

Who this affects

Any business that has given an AI tool its online banking password is affected. Three situations are the most common for small businesses.

• Owners using an AI assistant for admin. Browser agents that log in to pay a bill, download statements, or check a deposit are exactly what the banks are blocking.
• Teams where an assistant or bookkeeper set up the automation. The owner may not know a stored login exists, which is the riskiest version, because nobody is watching it.
• Anyone counting on the bank to cover a mistake. Global News reports that transactions "cannot be deemed unauthorized if credentials were shared by the customer," and RBC's security guarantee depends on customers meeting responsibilities that include not sharing passwords.

What to do this week

Each step takes under an hour.

1. List every tool that holds a banking login. Check AI assistants, browser extensions, and automation tools your team uses. Ask your bookkeeper the same question.
2. Disconnect those tools and change the passwords. Removing the connection is not enough if the tool already stored the password. Change it at the bank after you disconnect.
3. Confirm how your accounting software connects. If you use bank feeds in accounting software, ask the provider or your bank whether the feed uses an approved connection rather than your stored password.
4. Turn on transaction alerts. Set your bank app to alert you to payments and transfers above a small amount, so you see activity you did not start.
5. Write a one-line rule for staff. "Never paste a banking password into an AI tool." Put it in your onboarding notes and send it to anyone who touches your accounts.

What to watch next

The banks have said what they are blocking, but not what they will allow. Two things are worth watching.

• Approved routes for AI tools. If banks open official, permission-based connections for AI assistants, owners will be able to automate safely instead of sharing passwords.
• Other services following. Payment, payroll, and booking platforms face the same question about agents acting on a customer's behalf. Expect more of them to publish a policy.

The useful lesson for a small business is simple: automation is worth having, but it should run through connections the provider approves, not through your password. DAOL Consulting builds AI lead systems and local business websites for businesses in Calgary, Edmonton, and Vancouver, with automations designed around official integrations. If you are not sure what your current tools can access, get in touch and we can help you map it.