Schwab blocks AI agents that log in on clients' behalf, while touting its own Charley assistant as the future way to connect to AI
Schwab will block AI agents that log in with client credentials or browser automation, CEO Rick Wurster said on its earnings call. American Banker reports a view that billions in cash-sweep interest revenue is the real fear.
The Investor · Invest desk
Outside AI agents are blocked from using client logins or browser automation. Clients may use ChatGPT and other LLMs to trade. More LLMs will trade but not move money. Charley starts with a few actions. Some fear agents sweeping cash. Dimon won't allow just any outside agent.
- What it limits constraint Outside AI agents Blocked from using clients' login credentials or browser automation to access Schwab's systems, claim 2
- What's now possible capability ChatGPT and other LLMs Clients may use them for stock trades and other transactions, claim 3
- Who has to decide decision More clients and LLMs, later Wurster says they will get to trade, but not to move money, citing risk to client and firm, claim 6
- What's now possible capability Charley, Schwab's assistant Will at first take only a few actions, like changing an address or naming a trusted contact, claim 5
- Who's exposed exposure Net interest revenue American Banker says some fear agents sweeping uninvested cash into higher yields, threatening billions, claim 11
- What it sets up precedent JPMorgan CEO Jamie Dimon said he won't allow just any outside agent in, as too risky for clients and JPMorgan, claim 8
| Who | How | Kind | Claim |
|---|---|---|---|
| Outside AI agents | Blocked from using clients' login credentials or browser automation to access Schwab's systems | constraint | 2 |
| ChatGPT and other LLMs | Clients may use them for stock trades and other transactions | capability | 3 |
| More clients and LLMs, later | Wurster says they will get to trade, but not to move money, citing risk to client and firm | decision | 6 |
| Charley, Schwab's assistant | Will at first take only a few actions, like changing an address or naming a trusted contact | capability | 5 |
| Net interest revenue | American Banker says some fear agents sweeping uninvested cash into higher yields, threatening billions | exposure | 11 |
| JPMorgan | CEO Jamie Dimon said he won't allow just any outside agent in, as too risky for clients and JPMorgan | precedent | 8 |
What happened
- Schwab still lets clients use ChatGPT and other large language models to trade stocks and complete other transactions.
- Wurster said more clients and LLMs will eventually get trading access, but not the ability to move money, because of the risk to the client and the firm.
- Charley, built on outside LLMs and Schwab's own data, arrives in coming months and will at first take only a few actions, such as changing an address.
Why it matters
- Who's exposed exposure Uninvested client cash is the exposed asset: an agent that moves it to a higher yield cuts Schwab's net interest revenue directly, and the client keeps the difference.
- What it limits constraint A client who wants automated help has two sanctioned routes, an LLM that can trade but not move money, or Charley, whose first permissions are narrow.
- What doesn't add up contradiction Wurster gives security as the reason, while Nexus Strategies' Tim Welsh says Schwab also has an incentive to protect its own business; the reporting leaves both explanations standing.
- What it sets up precedent Dimon took a similar line two days before Wurster, so refusing unvetted agents is a stance two large firms have now stated in one week.
Wurster's own description of the problem is small. He said he gets a notice every time Schwab blocks an AI-driven agent, and the reports are few and far between because most clients "aren't using it in that way in their financial life" [9].
The money argument is about a future flow. American Banker's summary reports a view that the real fear is that third-party agents could pull clients' idle cash out of brokerage accounts that pay little and move it into investments that pay more, putting billions in net interest revenue at risk [11]. By American Banker's account, industry analysts have spent recent months flagging the threat Muse and other agents pose to Schwab's and other brokerages' cash-handling business [12]. The account we have does not put a Schwab-specific figure on the sweep revenue, so we cannot size the exposure.
Tim Welsh, founder of Nexus Strategies, said the security concerns are no doubt real but that Schwab has an incentive to keep business it wants for itself [10]. His line was blunt: "An outside agent works for the client. Charley works for Schwab." [13]
We think the credential block stands on security alone. Wurster called an agent arriving at the site and logging in for a client the one route Schwab considers unsafe, and said "We are not going to allow that." [4] Logging in as a client is how a credential-stuffing attacker also gets in, and the block applies to both. The revenue motive is plausible, but nothing in the record shows it driving the decision, and JPMorgan's Jamie Dimon reached the same stance on Tuesday with his own reasoning, that an outside agent inside the company is "just too risky for clients and for JPMorgan" [8].
Start with the permitted channel: Schwab lets clients use certain LLMs to trade, and Wurster said more clients and LLMs will get that ability, though not to "move money" [3][6]. A trade is the instruction an agent would need to put idle cash into a higher-yielding fund. How Schwab treats that case is the open question. Then there is Charley's scope. It starts with a few actions, "like changing an address or naming a trusted contact" [5], yet Wurster expects it to become "the primary way to connect to AI at Schwab" [7].
If trade access widens to many LLMs with no friction on cash-to-fund purchases, the sweep thesis weakens. If Charley starts steering idle cash on Schwab's terms while outside agents stay locked out, it strengthens.
What to watch
- Whether Schwab widens trading access to more LLMs, and whether those trades include moving idle cash into higher-yielding funds.
- Charley's launch in the coming months, and whether its action list grows beyond address changes and trusted contacts.
- Any Schwab disclosure on cash-sweep balances or net interest revenue sensitivity to client use of agents.
Information, not investment advice. This story is general information about companies and markets, drawn from cited reporting. It is not a recommendation to buy, sell or hold any security; check the cited sources before acting.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence50
- Adoption15
- Hype gap+20
- Incentives75
- Confidence55
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Charles Schwab says it is blocking outside AI agents from accessing its clients' accounts, and CEO Rick Wurster discussed the decision on an earnings call on Thursday.
- [2]
Schwab is specifically preventing AI agents from using clients' login credentials or browser automation to access its systems.
- [3]
Schwab allows clients to use ChatGPT and other large language models for stock trades and other transactions.
- [4]
Wurster said: "And there's one way we think is not safe, and that's just an agent coming to our site and trying to log in on behalf of a client. We are not going to allow that."
- [5]
Charley will initially be able to take only a few actions on clients' behalf, "like changing an address or naming a trusted contact," Wurster said; it will be introduced in coming months and is built atop various outside LLMs and Schwab's own data.
- [6]
Wurster said more clients and LLMs will eventually be given the ability to trade but not to "move money, because we think there's too much risk there to the client and to the firm."
- [7]
Wurster predicted Charley will become an "important front door to Schwab" and said: "I expect, over time, it will be the primary way to connect to AI at Schwab."
- [8]
On Tuesday, JPMorgan CEO Jamie Dimon told analysts he and his fellow executive aren't going to allow just any "outside agent to come in inside the company, because that's just too risky for clients and for JPMorgan."
- [9]
Wurster said he receives notice every time Schwab has to block an AI-driven agent; the reports are few and far between because most clients "aren't using it in that way in their financial life."
- [10]
Tim Welsh, founder of consulting firm Nexus Strategies, said concerns about protecting client data are no doubt real but that Schwab clearly has an incentive to prevent AI agents from infringing on business it wants to keep for itself.
- [11]
American Banker says some say the real fear is that third-party AI agents could automatically sweep uninvested cash out of low-yield brokerage accounts into higher-yielding investments, threatening billions in net interest revenue.
- [12]
Industry analysts in recent months have noted the threat Meta's Muse and other AI agents could pose to Schwab and other brokerages' lucrative business handling clients' cash.
- [13]
Welsh said: "An outside agent works for the client. Charley works for Schwab."
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
1 independent publisher whose own reporting we read for this story.
- americanbanker.comSchwab blocks unauthorized AI agents, points clients to 'Charley'
1 article · October 15, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.