Analysis
Charles Schwab is blocking outside AI agents from logging into client accounts or using browser automation to move money, CEO Rick Wurster told American Banker, as the brokerage steers users toward its own assistant instead.
## Why Now, And Who Else Is Doing It Schwab's move follows JPMorgan, which Pulse covered last week after CEO Jamie Dimon said the bank would not let an "outside agent come in inside the company, because that's just too risky for clients and for JPMorgan." Schwab's version is narrower: clients can still use ChatGPT and other large language models for research or to submit trade requests through Schwab's own channels, but an agent attempting to log in with a client's stored credentials or automate a browser session gets blocked and logged. Wurster said Schwab receives a notice every time it blocks an agent, though the events are still rare because most clients aren't using AI that way yet.
“Wurster said Schwab receives a notice every time it blocks an agent, though the events are still rare because most clients aren't using AI that way yet.”
## Charley, Not Someone Else's Agent In place of outside agents, Schwab is building out Charley, an assistant built on outside large language models layered with Schwab's own account data. Charley can currently take only a handful of actions, such as updating an address or naming a trusted contact, and is mostly used for information and synthesis today. Wurster said he expects Charley to eventually handle "the full range of things you can do on schwab.com" and become the primary way clients interact with Schwab through AI, with more clients and models eventually allowed to trade, but not to move money unsupervised.
## The Diligence Item Nobody's Naming Nexus Strategies' Tim Welsh offered a sharper explanation for the policy than security alone: Schwab earns real interest income on client cash parked in its sweep accounts, and an independent agent optimizing for yield could move that cash to a higher-paying alternative. Welsh summed up the asymmetry: "An outside agent works for the client. Charley works for Schwab." That's a different risk than the identity-theft framing both banks have used publicly, and it suggests other custodians with meaningful sweep-account revenue have the same incentive to wall off outside agents, regardless of how secure those agents actually are.
The open question is how long this holds. Schwab's own roadmap has Charley absorbing more account functionality over time, and once an AI agent is Schwab's own, the security objection disappears — only the cash-yield incentive remains, and that one doesn't go away just because the agent is in-house.
