OpenAI is connecting ChatGPT to bank accounts via Plaid

Scope and Optionality of the Feature

• The Plaid–ChatGPT bank link is described as optional today.
• Several commenters fear “optional” will erode over time as businesses, banks, and CTOs adopt it by default, similar to “Sign in with Google” or Cloudflare interstitials.
• Some see it as just another budgeting/finance-tool-style integration; others see it as qualitatively different because of who’s running it and how central it could become.

Privacy, Profiling, and Monetization

• Many assume the real value is granular consumer profiling and targeted advertising, not user convenience.
• Financial data is seen as especially powerful: it can reveal political donations, relationship issues, vices, and social graphs via payment counterparties.
• Debate exists over how “new” this is: some argue Google/Meta and banks already infer much of this; others say this is deeper, more structured, and easier to query at scale.

Security, Attack Surface, and AI Risk

• Linking LLM agents to bank data is viewed by many as a hard red line: “things nobody should be doing.”
• Concerns include:
  • Larger attack surface: prompt-injection from web content or memes could trigger exfiltration or harmful actions.
  • Single exploit could impact many users at once; disagreement on whether this could be “systemic” (e.g., affecting banks) or just individually catastrophic.
  • Examples cited of agents already causing large unintended bills when given API access.

Plaid-Specific Criticisms

• Strong resistance to giving Plaid bank usernames/passwords; some call this indistinguishable from well-executed phishing.
• Clarifications and disagreements:
  • Some say Plaid has persistent read-only access; others note that with full credentials it can, in principle, do anything the user can, depending on bank 2FA.
  • Newer flows sometimes use OAuth, but commenters stress that persistent, broad data access remains the core issue.
• People report being pressured to use Plaid for loans, mortgages, credit cards, and rentals, and sometimes accept worse financial terms to avoid it.
• Comparisons are made between giving routing/account numbers (seen as limited-risk) versus giving full online-banking access (seen as much riskier).

Normalization, Identity, and Dystopian Trajectory

• Some fear this is part of a gradual “boiling the frog” process: normalizing third-party financial surveillance.
• A dark endgame is sketched where internet access or communication requires a bank-verified identity (via entities like Plaid), with high false-positive denial risks and little recourse.
• Others argue this is just another step in a long-running trend: banks already share data under existing laws; many people trade privacy for convenience without much concern.

Workarounds and User Strategies

• Suggested mitigations include “burner” or low-balance accounts at separate institutions, though efficacy depends on underwriting requirements.
• Some users always refuse Plaid and rely on manual processes or alternate providers, reporting that phone support often bypasses Plaid when pushed.
• A minority argues critics are out of touch with what mainstream users actually want—frictionless, integrated financial tooling—even at privacy cost.