Wells Fargo AI Agent terms (Nov 24, 2026): Section 15 explained

What changed

Wells Fargo is adding a brand-new Section 15, "Third-Party Artificial Intelligence Agents or Agentic AI," to its Online Access Agreement, the contract that covers its website and mobile app. The upcoming text is marked "Version Effective November 24, 2026." The version in force today, dated May 21, 2026, has no AI agent section and does not use the term "AI Agent" anywhere. Wells Fargo's customer notice says "You don't need to take any action" and that if you keep using online or mobile banking after November 24, 2026, "the updated Agreement applies."

Change 1: A definition wide enough to cover a script

Section 15(a) defines an AI Agent as "any software, application, program, or other technology that takes autonomous, semi-autonomous, or non-autonomous action on behalf of any person or entity." The word "non-autonomous" is the one to notice. Read literally, the definition isn't limited to chatbots or AI shopping assistants; it can reach ordinary automation, such as a script that signs in to download statements, a budgeting app that logs in with your username and password, or a browser extension or password manager that fills in and submits forms for you. The section applies if you "use, allow, enable, or authorize" any such tool "to access, use, or interact with any Service or any Eligible Account."

Change 2: What an agent does counts as you

Under Section 15(d), if you give an agent access "using your login credentials, or otherwise authorize an AI Agent to act on your behalf," then "Any instructions, actions, or transactions initiated by the AI Agent are deemed to have been initiated and authorized directly by you, without further verification." Wells Fargo adds that it has "no obligation to investigate, verify, or confirm the authority, authenticity, or validity of any instruction or action taken by an AI Agent."

Section 15(e) says "Your use of any AI Agent is AT YOUR OWN RISK." It makes you "solely responsible" for, among other things, "unintended actions performed by the AI Agent, actions resulting from incomplete, inaccurate, or manipulated inputs, or the AI Agent exceeding the authority granted by you." That covers an agent that misreads you, one that is tricked by a malicious web page or email (prompt injection), and one that goes further than you asked. Wells Fargo also says: "we do not monitor, screen, or review AI Agent activities, including any transactions initiated by an AI Agent." Section 15(d) and the last item in 15(e) both start with "Unless otherwise provided by law or regulation," so protections the law gives you still come first. The agreement doesn't say which ones.

Change 3: You consent to sharing, and Wells Fargo's privacy rules stop at the agent

Section 15(c): "you acknowledge and expressly consent to the sharing of your financial, account, and personal information with such AI Agent." Section 15(b) adds that "our privacy and security policies do not apply to any AI Agent" and that Wells Fargo has "no responsibility for, and no control over, how any third party or AI Agent collects, uses, reuses, stores, shares, or protects your data."

Change 4: To revoke an agent, keep proof and tell the bank

Section 15(f): "You are responsible for properly and timely revoking any authorization provided to an AI Agent and taking any necessary further action to cease the AI Agent’s activities. You must retain evidence of such revocation and must provide such evidence to us, at our request. Until you notify us of such revocation pursuant to Section 17(d), you remain responsible for all the AI Agent’s activities, to the extent permitted by law or regulation."

Section 17(d), "Protecting Your Security," lists two ways to notify Wells Fargo: "Call 1-800-956-4442 anytime, 24 hours a day, seven days a week" or "Write to Wells Fargo Customer Correspondence, PO Box 6995, Portland, OR, 97228-6995." Section 17(d) itself is about lost passwords, compromised devices and suspected fraud; it doesn't mention AI agents. The agreement also doesn't say what counts as "evidence of such revocation."

Change 5: Registration, blocking, and an 18+ rule

Section 15(g) lets Wells Fargo change its rules for agents "at any time," "including requiring that you register your AI Agents with us." It may also "Change, limit, restrict, or discontinue any application programming interface (API) or other access method for AI Agents" and "Limit, prohibit, prevent, suspend, or terminate access by any AI Agent to the Service or any Eligible Account." If that breaks a tool you rely on, "we are not responsible for any resulting impact." Section 15(h) adds an age rule: "you will not permit any AI Agent to access or use the Service or any Eligible Account on your behalf if you are under 18 years of age."

Change 6: Your Delegates' agents, indemnity and security procedures

Outside Section 15, the new terms add AI agents to clauses that already existed in the May 21 version.

Section 2: transactions by an Authorized Representative or Delegate "(including the transactions of their AI Agents)" count as authorized by you, and "You are solely responsible for supervising all of your Authorized Representatives and Delegates (including their AI Agents)." So if someone you've given access to plugs their own agent into your account, you carry that too.

Section 20(c), indemnification: you already agree to cover Wells Fargo's costs for third-party claims tied to use of the Service. That now applies whether the use was "by you, your Authorized Representative, or your Delegate (or by any of the AI Agents of such persons)."

Sections 8(b) (online wire transfers) and 17(c) (other transfers under UCC Article 4A, "including online transactions from business accounts") each add: "If you permit an AI Agent or other third party access to the Service, you acknowledge that doing so may adversely impact the commercially reasonable security procedures that you've otherwise agreed to, and you accept the risk of such access." That matters because under 8(b) you already "agree to be bound by any Order that Wells Fargo receives and verifies following the Security Procedure, even if the Order was not authorized by you."

What you can do

Read Section 15 of the upcoming agreement before November 24, 2026. If you don't need an agent or automation tool signed in to Wells Fargo, don't give it your username and password. If one already has access, revoke it at the provider, change your Wells Fargo password if the tool had it, save a dated screenshot or confirmation of the revocation, and then call 1-800-956-4442 or write to the Portland PO box above so the notice required by Section 15(f) is on record. Note the date, time and who you spoke to. If you have Delegates, ask whether they use AI tools on your accounts.

What stays the same

Wells Fargo isn't banning third-party agents. Section 15 sets the terms for using them and reserves the right to restrict them later. Nothing changes before November 24, 2026. The customer summary also lists other updates (newer security features, email notices for online statements, Paze information sharing in Section 10(c), which is already in the May 21 version, an expanded Eligible Accounts definition, and terms for ExpressSend Mobile and Smart Start Banking). None of those is the main change here.

How this compares: Chase's Terms of Use

Chase's public Terms of Use (chase.com/digital/resources/terms-of-use, checked Nov 6, 2026) also has an "AI Agent or Agentic AI Notices" section, but it draws a narrower line. Chase defines an AI Agent as software or a service that "takes autonomous or semi-autonomous action" — it does not say "non-autonomous." Chase tells agents they must identify themselves as AI, "clearly and deterministically label all agentic traffic," and answer truthfully when asked whether a human or an agent is interacting. It also says unauthorized use of its systems includes using AI agents "designed to circumvent any restriction, condition, or technological measure that controls access." On responsibility, Chase says that when you deploy an AI Agent, "you are responsible for any actions or errors that may result from the Agent's incorrect interpretation or implementation of your instructions, if it performs unintended actions or exceeds the authority you gave it."

Wells Fargo's upcoming Section 15 goes further in several places Chase's Terms of Use do not: it includes "non-autonomous" action in the definition; it requires you to retain evidence of revocation and stay responsible until you notify the bank under Section 17(d); it reserves the right to require you to register AI Agents; it bars people under 18 from permitting an AI Agent on their behalf; and it folds Delegates' AI Agents into authorization, indemnification and security-procedure risk language elsewhere in the Online Access Agreement. American Banker and others have also reported that Chase's separate Digital Services Agreement (effective Oct 27, 2026) takes a different posture again — prohibiting credential-based third-party access while assigning liability if customers share logins anyway. We are quoting Chase's live Terms of Use page here because that is the primary text we could re-fetch today; the Digital Services Agreement is behind account login for us.

Coverage (re-checked Nov 6, 2026 PM): Penny Crosman's Nov 2 American Banker piece broke the prove-you-revoked / stay-liable angle. The National Law Review compared big-bank blocks vs Wells Fargo's permit-at-your-risk approach. Captain Compliance (Nov 3) walked through Section 15 in depth, including the non-autonomous definition, registration, and a Chase Digital Services Agreement comparison, plus Regulation E questions. ACA International and TokenPost largely follow those reports. We have not found news coverage that focuses on the under-18 ban in Section 15(h), the Delegates / Section 20(c) indemnification / Sections 8(b) and 17(c) security-procedure stack, or a full blackline against the May 21, 2026 agreement (which has zero "AI Agent" mentions). This article keeps those angles and the primary-document quotes.

Who it affects

Wells Fargo online and mobile banking customers who use, or plan to use, an AI assistant, budgeting app, script or other tool that logs in or acts in their accounts, and anyone who has given Delegates access

Quick answers

What is Wells Fargo changing on November 24, 2026?

Wells Fargo's updated Online Access Agreement, marked "Version Effective November 24, 2026," adds a new Section 15 on third-party AI agents. It treats an agent's instructions and transactions as yours, says you consent to sharing your financial, account and personal information with the agent, and makes you keep proof that you revoked an agent. The May 21, 2026 version has no such section. Wells Fargo says "You don't need to take any action"; if you keep using online or mobile banking after November 24, 2026, "the updated Agreement applies."

Does Wells Fargo's AI Agent definition only cover chatbots?

No. Section 15(a) covers "any software, application, program, or other technology that takes autonomous, semi-autonomous, or non-autonomous action on behalf of any person or entity." Because it includes "non-autonomous" action, it can reach scripts, budgeting apps and other automation that sign in or act for you, not just AI assistants.

If an AI agent makes a payment I didn't want, who is responsible?

Under Section 15(d), the agent's instructions, actions and transactions "are deemed to have been initiated and authorized directly by you, without further verification." Section 15(e) makes you "solely responsible" for "unintended actions performed by the AI Agent" and for the agent "exceeding the authority granted by you." Both start with "Unless otherwise provided by law or regulation," so legal protections still apply where the law requires.

How do I revoke an AI agent's access under the new Wells Fargo agreement?

Section 15(f) says you must revoke the authorization yourself, "retain evidence of such revocation" and provide it "at our request," and that you stay responsible until you notify Wells Fargo "pursuant to Section 17(d)." Section 17(d) says to "Call 1-800-956-4442 anytime, 24 hours a day, seven days a week" or write to Wells Fargo Customer Correspondence, PO Box 6995, Portland, OR, 97228-6995. The agreement doesn't say what counts as evidence, so save dated confirmation from the provider and a note of when you contacted Wells Fargo.

Can Wells Fargo make me register or block my AI agent?

Yes. Section 15(g) reserves the right, "at any time," to change its rules for agents, "including requiring that you register your AI Agents with us," to cut off APIs or other access methods for agents, and to "Limit, prohibit, prevent, suspend, or terminate access by any AI Agent." Wells Fargo says it is "not responsible for any resulting impact."

Can people under 18 use AI agents with Wells Fargo?

No. Section 15(h) says "you will not permit any AI Agent to access or use the Service or any Eligible Account on your behalf if you are under 18 years of age."

How does Wells Fargo's AI Agent definition compare with Chase's?

Chase's Terms of Use (checked Nov 6, 2026) defines an AI Agent as taking "autonomous or semi-autonomous action." Wells Fargo's upcoming Section 15(a) adds "or non-autonomous," which can reach scripts, budgeting apps and other automation that act for you. Wells Fargo also adds revocation-evidence, possible registration, an under-18 ban, and Delegates/indemnity/security-procedure language that Chase's Terms of Use page does not mirror.

Source

Detected on the Wells Fargo terms page: https://www.wellsfargo.com/online-banking/online-access-agreement/upcoming/. Always check the source; this summary is not legal or financial advice.

Other sources:

• Wells Fargo Online Access Agreement (upcoming; Version Effective November 24, 2026)
• Wells Fargo Online Access Agreement (in force; Version Effective May 21, 2026)
• Wells Fargo: We Are Updating Our Online Access Agreement (customer summary)
• American Banker: Wells Fargo wants customers to prove they've revoked AI agents
• National Law Review: Major banks move to block or limit customer-directed AI agents
• Chase Terms of Use (AI Agent or Agentic AI Notices)
• Captain Compliance: Wells Fargo AI agent revocation / Regulation E

Provenance: detected in our Nov 6 snapshot of the Wells Fargo terms page. Excerpts marked "Quoted from the documents" come from the sources linked above.

Published by QuietlyChanged: pages tracked automatically, each change reviewed by a person before publishing. About · Contact & corrections