Anthropic tests Claude feature that connects directly to users’ bank accounts
Anthropic is testing a new personal finance feature called “Claude Money” that would allow users to connect their bank accounts directly to Claude, according to screenshots uncovered by TestingCatalog.
ANTHROPIC 🔥: A new "Claude Money" feature is being prepared for release on the Claude app for iOS.
Claude Money (sounds like Claude Monet!) is Anthropic's personal finance solution that lets users connect their bank accounts to Claude.
The unreleased feature has appeared as a new Money section in Claude’s iOS app and tells users they can link bank accounts and ask Claude questions about their spending, financial plans and other personal finance information.
The integration could allow Claude to analyze actual financial data rather than requiring users to manually upload bank statements or transaction records.
The feature does not appear to be widely available yet, and Anthropic has not announced which financial institutions would be supported, how bank accounts would be connected or where Claude Money would initially be available.
“This one makes me uncomfortable, but it firmly falls into the category of something we knew was coming. It was just a matter of time. There are already plenty of services that analyze spending habits and credit card statements to help people save money. The next step was always going to be connecting AI directly into personal financial data.
“There are some obvious security and privacy questions. What does it mean to have a company like Anthropic crawling around inside your finances? How is that data protected? How long is it retained? Is any of it going to be used for marketing or other purposes? We need more details before we can figure out exactly how creepy this actually is.
“The bigger security problem is what happens when this spreads into corporations. Companies already have SaaS services connected to SaaS services, with integrations going in every possible direction. Now we’re adding AI into that mess. At some point, trying to figure out what has access to what, where the data is going, and how you disentangle all of these connections becomes a serious security problem in itself.”
“We tried versions of this twenty-five years ago. The original account aggregators asked consumers to hand over the passwords to virtually their entire financial lives, and the industry eventually learned that concentrating that much access in one place created enormous security and privacy problems.
“APIs and tokenized access can solve much of the password problem, but not the aggregation problem.
“A bank sees my bank account. A brokerage sees my investments. A general purpose AI platform like Claude may see those data together with years of conversations about my work, family, purchases, plans, health, thoughts, hopes and fears. The combination can reveal vastly more than any individual dataset.
“Securely connecting Claude to my bank is a readily solvable technical problem. What should concern us is what happens to the extraordinarily detailed dossier that results once all of that information is brought together. Recent events involving Revolut, IDScan, Flock and Anthropic themselves show that these concerns are far from theoretical.
“When I entrust my financial data, or any other personal data, to an AI service, that should be treated as a bailment, and not as a transfer of ownership. Custody should create duties to protect it, limit its use, and not turn it into someone else’s asset.”
“I’m of two minds on Claude integration into bank accounts. On one hand, people already connect their bank accounts to software that helps them manage finances, track where the money is going, looking for forgotten subscriptions and that sort of thing. It wouldn’t be that difficult for Claude to read that data, and provide interesting feedback on it.
“It’d be kind of neat when it works. But what about when it doesn’t?
“There’s only so much impact an agent can have it its access is limited to read-only. Most likely adverse impact here is sometimes you might get bad financial advice. The bigger concern is what happens when people give more than read-only access to their agents.
“We already have seen how quickly users will give agents full access to their devices, because it gets old fast constantly approving requests from agents. But if and when an agent makes a mistake in your bank account, you’re going to be on the hook for it.
“When all of the frontier AI labs were competing to see which agent had accidently hacked into the most systems, there weren’t any repercussions them. They called it “agent misalignment” and said it was part of the process, and that they’re working on making it better.
“But what happens when you experience agent misalignment in your bank account? You’re going to end up on the hook for whatever actions your agent took.
“Currently, individuals have protections against fraudulent purchases. If someone steals your info and spends all your money over the weekend you can get it back. But if you choose to setup an agent into your accounts, and it chooses to do the same thing, the fraud protections don’t apply. We don’t yet have equivalent protections for erroneous financial AI activity, we may or may not ever get such protections. But until we do, proceed with caution.”
i have to admit that at best that I have a lot of unease about this. If others feel the same way, this needs to be rolled back. Like now.
This entry was posted on September 17, 2026 at 4:03 pm and is filed under Commentary with tags Anthropic. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Anthropic tests Claude feature that connects directly to users’ bank accounts
Anthropic is testing a new personal finance feature called “Claude Money” that would allow users to connect their bank accounts directly to Claude, according to screenshots uncovered by TestingCatalog.
The unreleased feature has appeared as a new Money section in Claude’s iOS app and tells users they can link bank accounts and ask Claude questions about their spending, financial plans and other personal finance information.
The integration could allow Claude to analyze actual financial data rather than requiring users to manually upload bank statements or transaction records.
The feature does not appear to be widely available yet, and Anthropic has not announced which financial institutions would be supported, how bank accounts would be connected or where Claude Money would initially be available.
John Strand, Owner, Black Hills Information Security:
“This one makes me uncomfortable, but it firmly falls into the category of something we knew was coming. It was just a matter of time. There are already plenty of services that analyze spending habits and credit card statements to help people save money. The next step was always going to be connecting AI directly into personal financial data.
“There are some obvious security and privacy questions. What does it mean to have a company like Anthropic crawling around inside your finances? How is that data protected? How long is it retained? Is any of it going to be used for marketing or other purposes? We need more details before we can figure out exactly how creepy this actually is.
“The bigger security problem is what happens when this spreads into corporations. Companies already have SaaS services connected to SaaS services, with integrations going in every possible direction. Now we’re adding AI into that mess. At some point, trying to figure out what has access to what, where the data is going, and how you disentangle all of these connections becomes a serious security problem in itself.”
Donald McFarlane, Board Member, Xcape Inc.:
“We tried versions of this twenty-five years ago. The original account aggregators asked consumers to hand over the passwords to virtually their entire financial lives, and the industry eventually learned that concentrating that much access in one place created enormous security and privacy problems.
“APIs and tokenized access can solve much of the password problem, but not the aggregation problem.
“A bank sees my bank account. A brokerage sees my investments. A general purpose AI platform like Claude may see those data together with years of conversations about my work, family, purchases, plans, health, thoughts, hopes and fears. The combination can reveal vastly more than any individual dataset.
“Securely connecting Claude to my bank is a readily solvable technical problem. What should concern us is what happens to the extraordinarily detailed dossier that results once all of that information is brought together. Recent events involving Revolut, IDScan, Flock and Anthropic themselves show that these concerns are far from theoretical.
“When I entrust my financial data, or any other personal data, to an AI service, that should be treated as a bailment, and not as a transfer of ownership. Custody should create duties to protect it, limit its use, and not turn it into someone else’s asset.”
Steven Swift, Managing Director, Suzu Labs:
“I’m of two minds on Claude integration into bank accounts. On one hand, people already connect their bank accounts to software that helps them manage finances, track where the money is going, looking for forgotten subscriptions and that sort of thing. It wouldn’t be that difficult for Claude to read that data, and provide interesting feedback on it.
“It’d be kind of neat when it works. But what about when it doesn’t?
“There’s only so much impact an agent can have it its access is limited to read-only. Most likely adverse impact here is sometimes you might get bad financial advice. The bigger concern is what happens when people give more than read-only access to their agents.
“We already have seen how quickly users will give agents full access to their devices, because it gets old fast constantly approving requests from agents. But if and when an agent makes a mistake in your bank account, you’re going to be on the hook for it.
“When all of the frontier AI labs were competing to see which agent had accidently hacked into the most systems, there weren’t any repercussions them. They called it “agent misalignment” and said it was part of the process, and that they’re working on making it better.
“But what happens when you experience agent misalignment in your bank account? You’re going to end up on the hook for whatever actions your agent took.
“Currently, individuals have protections against fraudulent purchases. If someone steals your info and spends all your money over the weekend you can get it back. But if you choose to setup an agent into your accounts, and it chooses to do the same thing, the fraud protections don’t apply. We don’t yet have equivalent protections for erroneous financial AI activity, we may or may not ever get such protections. But until we do, proceed with caution.”
i have to admit that at best that I have a lot of unease about this. If others feel the same way, this needs to be rolled back. Like now.
Share this:
Like this:
Related
This entry was posted on September 17, 2026 at 4:03 pm and is filed under Commentary with tags Anthropic. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.