# An AI asked for my bank login: what to do

If an AI chatbot or “support bot” asks for your bank username, password or one-time code, stop. What banks never ask for in chat, and what to do if you already typed it.

Canonical HTML: https://agentlane.net/guides/ai-asked-for-bank-login/

Short answer: No honest bank, credit-card company or AI product needs your bank username, password or one-time login code in a chat. Close the window, open your bank’s real app or website yourself, and change the password if you already typed anything.

## Why would an AI ask for my bank login?

Two different things get mixed up:
- A real company’s chatbot on its own website, which can help with basic questions and may ask you to log in on the company’s own page — not to type your password into the chat bubble.
- A fake “support” chatbot on a lookalike site, in a pop-up, or behind a link from a text or email. Scammers use AI so these chats sound calm and helpful while they ask for passwords, Social Security numbers or payment details.
Ohio’s Division of Financial Institutions warns that AI chatbot scams pretend to be companies or support staff and ask for account details, passwords or payments. The Ohio Attorney General’s office says the same: legitimate company chatbots will never ask for account passwords or Social Security numbers over chat.

## What will my bank never ask for in a chat?

Treat any of these requests in a chat window as a hard stop:
- Your username and password for online banking.
- A one-time passcode, authenticator code or SMS code (especially if you didn’t just start a login yourself).
- Your full Social Security number, full card number with CVV, or ATM PIN.
- A request to move money “to keep it safe”, buy gift cards, or send crypto.
The FTC’s phishing guidance is clear: honest organizations won’t call, email or text out of the blue to ask for your Social Security, bank account or credit card numbers. The same rule covers a chatbot that shows up after you click a surprise link.

## How do I tell a real bank chat from a fake one?

- How you got there. Open the bank’s app or type the web address yourself. Don’t use a link from a text, email, social DM or pop-up.
- The address bar. Check the spelling. Fake sites often add an extra letter, a different ending (.net instead of .com) or a long subdomain.
- What it asks for. A real bank chat may send you to the bank’s own login page. It should not ask you to type your password into the chat message box.
- Urgency. “Your account will be locked in 10 minutes unless you verify” is a classic rush tactic. Pause and call the number on the back of your card.
- Off-topic answers. If the bot ignores your question and keeps pushing for login details, leave.
Prefer to speak to a person? Call the phone number printed on your card or statement — not a number the chat gives you.

## What if a general AI chatbot (ChatGPT, Claude, Grok) asks for my bank password?

Don’t type it. A general chatbot can help you understand a fee, write a dispute letter or explain a statement line from details you choose to share. It does not need — and should not get — the password that opens your bank.
If you’re trying to understand a statement, see Is it safe to let an AI read my bank or crypto statements? for what to blank out first. For keys and recovery phrases, see never paste API keys in chat and never share a seed phrase with an agent.

## I already typed my bank login into a chat. What now?

- Change the password in your bank’s real app or website right away. Use a device and address you trust.
- Turn on or tighten 2-step verification (an authenticator app or security key is stronger than SMS alone). The FTC recommends two-factor authentication on bank and email accounts.
- Call the bank using the number on your card. Tell them you may have given login details to a scam chat. Ask them to watch for new devices, freeze the account if needed, and reissue cards.
- Check recent transfers and payees. Cancel anything you don’t recognize.
- Change the password on your email if you reused it there — email resets are how attackers take over other accounts.
- Report it. File at ReportFraud.ftc.gov and, for internet crime, ic3.gov.
If money already left, also see how to freeze your credit for free and sent crypto to a scammer when crypto was involved.

## What about a phone call that sounds like my bank?

The same rule applies. Banks won’t call you out of the blue and ask for a one-time passcode, or tell you to move money to “protect” it. Hang up and call back on the number on your card. For voice-clone and deepfake pressure, see a call from your bank’s “fraud department” and voice clones and deepfakes.

## Sources

Read 6 November 2026.
- Ohio Division of Financial Institutions — AI Powered Scams and How to Protect Yourself: https://com.ohio.gov/divisions-and-programs/financial-institutions/consumers/ai-powered-scams-and-how-to-protect-yourself
- Ohio Attorney General — Artificial intelligence is being used in consumer scams: https://www.ohioattorneygeneral.gov/Media/Newsletters/Consumer-Advocate/June-2025/Artificial-intelligence-is-being-used-in-consumer
- FTC Consumer Advice — Recognize a phishing scam: https://consumer.ftc.gov/consumer-alerts/2023/07/best-way-protect-your-information-scammers-recognize-phishing-scam
- FTC Consumer Advice — Use two-factor authentication: https://consumer.ftc.gov/articles/use-two-factor-authentication-protect-your-accounts
- FTC — ReportFraud.ftc.gov: https://reportfraud.ftc.gov