Claude introduces Personal Finance to analyze bank accounts, expenses, subscriptions and credit cards with artificial intelligence. Access is read-only, but sharing such sensitive data raises questions about security and privacy.
Anthropic introduced a new feature that enables its AI assistant Claude to analyze data from bank accounts linked by users. Is called Personal Finance and allows you to control your expenses, consult your balances and obtain summaries without having to open the individual bank applications.
To use this function, however, you must allow services outside the bank to access your financial information. Banking data can in fact reveal details of your private life and, if stolen, be used for fraudulent purposes. The question therefore concerns both the privacy both security, and it affects not only Claude, but also other chatbots.
How Personal Finance works and what data Claude can read
Presented on November 5, 2026, the feature is being distributed in the United Statesin beta, for Pro, Max and Ultra subscribers. At the moment it is not available in Italy. In addition to current accounts, it allows you to link credit cards and loan and investment reports. Users can ask which subscriptions are active, how expenses have changed in recent months, or how much money is left after recurring payments. Claude can provide graphs and summaries, while a dedicated screen collects information from linked reports.
The connection is made through Plaida platform that allows applications to communicate with financial institutions. The user selects the bank, authenticates and chooses which accounts to share. According to Anthropic, Claude it does not ask or display the home banking password: the procedure is managed by Plaid, which, depending on the institution, can use authorization systems that do not require memorization of credentials or, in some cases, retain them.
Once consent has been obtained, the chatbot can consult the name of the bank and the relationships, their type, the last four identifying digits, the balances and any credit limits. It can also read up to 24 months of transactionsincluding amounts, dates, merchants, categories and descriptions of transactions. For loans and investments, access concerns balances and limits, not the details of the securities held, rates or contractual conditions.
Access is read-onlyPersonal Finance does not allow Claude to make transfers, pay bills or invest money. The answers, however, may contain errors. A balance may not be updated, or the same account, if linked twice, may be counted twice in totals. This is why Anthropic recommends verifying important figures through the app or your bank statement.
What are the privacy risks and possible scams
The balance indicates how much money is available, but Your payment history can reveal much morefrom purchasing habits to travel and economic relationships with other people. Some operations may even suggest confidential matters, such as medical visits or donations to certain organizations, although these inferences are not always reliable.
The problem isn’t just about possible theft, but it’s important to know as well who processes the data, for what purposes and how long they keep it. Nel caso di Personal Finance sono coinvolti Anthropic, Plaid ei fornitori che ospitano il servizio.
According to Anthropic, conversations in the Personal Finance space they are not used to train AI models. Outside of this section, your account privacy settings apply. Replies may remain in your history according to the platform’s retention rules.
Once the accounts are linked, Claude can consult them even in normal chats without asking permission every time. However, the user can deactivate the Plaid connector or set a confirmation before each login. You should also pay attention to links in shared conversations, through which other people may view financial details. Revoking the authorization prevents new consultations, but does not automatically delete responses or documents already generated.
If this information falls into the wrong hands, there could also be economic consequences. Knowing the bank used by a person or their recent expenditure, for example, would help build more credible false assistance messages. However, these are hypothetical scenarios, not documented frauds related to Claude’s new function.
The TeamSystem case helps to understand the problem. The theft of IBAN and accounting data raised fears of possible targeted scams. These elements alone are not enough to withdraw money, but could be used to convince a victim to make fraudulent payments or communicate their credentials. Scams of this type can exploit the phishingsometimes accompanied by spoofingwhich allows you to mask the sender’s identity.
Not just Claude: other AIs and how to protect their data
In the United States too ChatGPT offers Financesa function introduced by OpenAI in May 2026 and subsequently extended to Free, Go, Plus and Pro users. Like Claude, it allows you to connect accounts via Plaid and obtain information on balances, expenses, subscriptions and investments, without being able to make payments or money transfers.
One difference concerns the treatment of contents: for ChatGPT Finances the following applies privacy settings chosen by the userwhile Anthropic excludes conversations held in the Personal Finance area from training. According to OpenAI, after logging out, synced banking data is deleted from its systems within 30 days. Chats and any financial memories, which may contain savings goals or other personal information, must instead be managed separately.
With Gemini and other chatbots, you can also manually upload a PDF bank statement or spreadsheet and ask the AI to analyze it. In this case, you do not necessarily authorize continued access to the bank, but you still share a document containing personal financial information. It is therefore important to know the conditions established by the service for their use and storage.
Sharing banking information with external applications, however, was not born with AI. Services already exist in Europe open banking which allow you to consult multiple accounts from a single interface, with the owner’s consent. Account information providers are subject to the PSD2 directive and, as the Bank of Italy reminds us, must be authorized to operate.
The first measure to protect your privacy is share only the necessary information. To analyze an expense category, for example, a partial statement may be enough, without names, identifying numbers or superfluous details. Before authorizing a service to consult your account, it is also advisable to know which reports will be included, the access limits and how to revoke consent.
It is also advisable to protect the chatbot account with thetwo-factor authentication and periodically review the permissions granted. Instead, home banking passwords and security codes they must never be communicated to the chatbot. When the service is no longer needed, it is best to disconnect the banking relationships and delete any chats or documents containing economic data.
