ChatGPT Financial Account Links Raise Privacy and Account-Takeover Concerns

· Original article ↗

Summary

OpenAI is rolling out ChatGPT financial-account connections via Plaid, with Intuit integration planned. Experts warn that account takeover could expose sensitive financial details and recommend stronger account and data controls.

Key points

  • The feature is rolling out to ChatGPT Pro subscribers, with Plus access planned; OpenAI says it aims to make it available to everyone.
  • Plaid supports the connections, and Intuit is expected to power the feature in the future; it can integrate information from more than 12,000 financial institutions.
  • OpenAI says users can disconnect accounts, delete financial memories and use temporary chats that do not access financial accounts.
  • Noma Security’s Diana Kelley warns that view-only access may still expose a consolidated picture of a user’s finances if their ChatGPT account is taken over.
  • Center for Democracy and Technology’s Ridhi Shetty says collected financial information could reveal sensitive personal details; she also raises questions about possible commercial use and the reliability of chatbot financial guidance.
  • Kelley recommends using multi-factor authentication, reviewing active sessions and memory settings, disabling training for sensitive chats, and deleting chats and memories when no longer needed.

Article Details

Event Type
Rollout of a ChatGPT feature that connects users’ financial accounts for personalized financial guidance
Impact
The feature centralizes sensitive financial information, including balances, spending, investments, debts, goals, and financial history. Experts warn that this could create privacy risks and make compromised ChatGPT accounts a valuable target for account-takeover attacks. The article reports these as potential risks, not as a breach or confirmed misuse.

People

Vendors

Products

Industries

Related Articles