Banks Say You Authorized It: The AI Scam That Costs Victims Everything
Federal rules protect you when someone steals your money, but scammers have found a loophole that leaves banks legally off the hook and victims with nothing. AI just made that loophole much, much wider.
This post may contain links from our sponsors and affiliates, and Flywheel Publishing may receive compensation for actions taken through them.
If a thief drains your account with a stolen debit card, you usually lose very little. If a scammer talks you into sending the money yourself, you can lose all of it. Clark Howard, the consumer finance host, explained the gap on his podcast Wednesday:
The financial institutions say, because you were a participant in it, the fraud protections don’t apply. This is the gray area where there is no protection, where someone impersonates the financial institution.
Howard is right, and artificial intelligence is widening that gap.
Why Your Bank Can Say No After You Hit Send
Federal rules for electronic transfers protect you from unauthorized transactions, meaning ones you never approved. If you report a stolen card within two business days, your liability is generally capped at $50.
A caller posing as your bank’s fraud department convinces you to move $10,000 into a “safe” account. You approved the transfer and the text code. To the bank, you authorized it, and the full amount is gone.
The Consumer Financial Protection Bureau’s latest complaint report shows this pattern. When banks denied fraud claims, they cited that the consumer supplied account numbers, PINs, or text confirmations, or actively participated in the transaction. In 2025, the monthly average of domestic money transfer complaints rose 1,317% from the prior two years.
A young caller to the Clark Howard Podcast told Howard she lost money to a gift card scam. Howard’s response:
Olivia, the odds that you will be able to get any of that money restored are not good. They’re sadly very low. This money is taking a one way trip.
How Scammers Get You to Move Your Own Money
Howard described the tactic:
The criminals are so practiced at creating a sense of urgency. Your money’s at risk right now. We need you to take these steps. They already know so much about you from prior data breaches.
A caller who already knows your address and bank sounds like an insider. AI takes away the last check most people rely on: a voice they recognize. Voice cloning copies a real person’s voice from a short recording. Howard warned:
We’ve talked about voice cloning through AI where you could get a call from what you recognize to be the boss’s voice and it won’t even be the boss calling you. When asked to do something out of the ordinary, verify face to face whenever possible.
A Self-Policing Debate Victims Never Joined
On Wednesday morning, President Trump described his AI oversight approach:
I believe they’re going to be used for the good, and when they’re not, we’re going to be able to nab them. But there’s going to be a tremendous self-policing aspect.
Jim Cramer took the opposite view on CNBC’s Mad Money Tuesday evening:
Right now we have a president who says, the guardrails, full speed ahead. He believes self-policing is enough, even as the record of private industry self-policing isn’t all that great.
Both men disagree on how far to trust industry self-policing. Whoever is right, a loss from a cloned voice still lands on the account holder.
Who Pays When an AI Agent Holds Your Bank Login
An AI agent is software that carries out tasks like moving money between accounts. Some would need your banking login. Cramer doubts consumers will accept this:
I find it hard to believe that consumers will be happy to let AI move their money around bank to bank, night by night, just to get a few extra basis points of yield. I don’t think people want to give their bank information to these agents.
Today’s protections assume a person moved the money. If you give an agent your login, it remains unresolved who pays when the agent makes a mistake or gets hijacked.
Four Habits That Close the Gap
- Hang up on any fraud alert you didn’t expect. Howard’s rule: “When you are contacted out of the blue by somebody claiming to be with the fraud department of any financial institution, say thank you so much for the alert and you hang up the phone. Period.”
- Call back on a number you look up yourself, from the back of your card or a paper statement. Never use a number the caller, a text, or an email gives you.
- Check any unusual request through a second channel, in person whenever possible. This applies to wires, transfers, and gift cards.
- Freeze your credit at all three major credit bureaus. A freeze limits what a thief can open in your name, but it cannot stop a transfer you make yourself.
Until consumer protections catch up with how fraud works now, your safety net disappears the moment you approve a transfer yourself.
Contact [email protected] for any questions or corrections.
Trey has been an editor and author at 24/7 Wall St. for more than a decade, where he has published thousands of articles analyzing corporate earnings, dividend stocks, short interest, insider buying, private equity, and market trends. His comprehensive coverage spans the full spectrum of financial markets, from blue-chip stalwarts to emerging growth companies.
Beyond 24/7 Wall St., Trey has created and edited financial content for Benzinga and AOL's BloggingStocks, contributing additional hundreds of articles to the investment community.
Trey's editorial expertise extends across multiple publishing environments. He served as production editor at Dearborn Financial Publishing and development editor at Kaplan, where he helped shape financial education materials. Earlier in his career, he worked as a writer-producer at SVE. His freelance editing portfolio includes work for prestigious clients such as Sage Publications, Rand McNally, the Institute for Supply Management, the American Library Association, Eggplant Literary Productions, and Spiegel.
Outside of financial journalism, Trey writes fiction and has been an active member of the writing community for years, moderating workshop sessions at regional conventions.
