1.5 years ago, my first major consulting client was a top 5 bank and the biggest problem was exactly this: not being able to tell if an agent or human was logging in. And once you're logged in we found out that you can pretty much take any action inside an account: sending money via Zelle, sending a wire transfer, etc. I tried to express how this was a significant problem if consumers adopted agents and wanted an agent to manage their banking. But they wanted to focus more on things like call center fraud and transaction monitoring (also important.) Teaching these legacy systems how to identify agents isn't simple. The only real solution that's fast and effective is blocking agentic traffic completely (and even then, don't know how long before personal agents find a workaround for that.) It's a tricky situation that I doubt will be getting any easier soon