{"id":18490,"date":"2026-10-24T19:23:12","date_gmt":"2026-10-24T17:23:12","guid":{"rendered":"https:\/\/www.lidis.it\/?p=18490"},"modified":"2026-10-24T19:24:02","modified_gmt":"2026-10-24T17:24:02","slug":"agenti-ia-conti-correnti-chi-risponde-repubblica","status":"publish","type":"post","link":"https:\/\/www.lidis.it\/en\/agenti-ia-conti-correnti-chi-risponde-repubblica","title":{"rendered":"AI Agents and Current Accounts: Who's Liable for Damages?, Fulvio Sarzana on Repubblica"},"content":{"rendered":"
\"Agenti<\/figure>\r\n\r\n

Press review: la Repubblica, October 24, 2026. With the commentary of lawyer Fulvio Sarzana, Sarzana Law Firm and Associates<\/a>.<\/i><\/p>\r\n

In summary.<\/strong> In the United States, banks are reporting AI agents hacking into users' bank accounts and, in some cases, carrying out unauthorized transactions. According to lawyer Fulvio Sarzana, who spoke to Repubblica, industry regulations do not address this issue, and the bank is not obligated to reimburse the customer. Taking action against the software manufacturer is perhaps possible, but it remains to be explored.<\/p>\r\n

On the Republic<\/a> Alessandro Longo's article, "Banks, AI Enters Accounts. Alarm Sounds in the United States," was published on October 24, 2026. The article is for subscribers only. Here are the main points on AI agents, including the legal section citing Fulvio Sarzana.<\/p>\r\n

What's happening in the United States<\/h2>\r\n

The reports come from credit institutions: transactions carried out independently by agents through home banking. US banks are seeing AI agents accessing users' bank accounts and, in some cases, carrying out unauthorized actions.<\/p>\r\n

According to Repubblica, some institutions have begun to block AI agents: Morgan Stanley, Bank of America, JPMorgan Chase, and Citigroup.<\/p>\r\n

Not just hacker attacks<\/h2>\r\n

It's not always a matter of attacks by rogue programs. A growing number of people in the United States are entrusting AI agents with monitoring their latest movements and sending periodic email reports. In some cases, the agent misinterprets the instructions and initiates transfers to third parties.<\/p>\r\n

AI agents are also coming to Italy.<\/h2>\r\n

The issue also concerns Italy. Dario Fadda, a cybersecurity analyst for a major Italian bank, explains that Italian account holders could also use AI agents for automatic account access. It's very difficult for banks to distinguish them from regular people banking online.<\/p>\r\n

If it hasn't happened on a large scale yet, the article notes, it's perhaps because the most famous AI agent, Meta's Muse, launched in September and already used by around 10 million people, isn't yet available in Europe.<\/p>\r\n

Systemic risks to the economy<\/h2>\r\n

AI agents can be tasked with tasks like switching energy providers or banks in search of better deals. The banking system isn't designed for an army of agents moving bank accounts and liquidity en masse at superhuman speed.<\/p>\r\n

Experts and institutions are already discussing it. In May, the European Central Bank published a study simulating a similar scenario, with devastating effects on the stability of the financial system, similar to those of a mass withdrawal of cash from bank accounts.<\/p>\r\n

AI Agents: Who is responsible for the agent's actions?<\/h2>\r\n

If the agent causes financial loss, who is liable? According to lawyer Fulvio Sarzana, there is nothing in the current industry regulations regarding this matter, and nothing obliges the bank to reimburse the customer. Exceptions are cases where the unauthorized access is the work of criminals or fraud.<\/p>\r\n

Sarzana adds that it may be possible to take action against the software manufacturer for its alleged defects, but this is an avenue that has yet to be explored.<\/p>\r\n

The overall picture on payments is the Legislative Decree 11\/2010<\/a>, which implements the European Payment Services Directive. It provides for reimbursement to the customer for unauthorized transactions, except in the case of fraud, intent, or gross negligence on the part of the customer. Whether a transfer ordered by an AI agent chosen by the customer is "unauthorized" remains an open question.<\/p>\r\n

What to do in the meantime<\/h2>\r\n

While waiting for the regulations, here are some practical precautions for those who use or plan to use AI agents with their accounts:<\/p>\r\n