Daily · dive · 2026-11-06

Don't plug Claude into the bank

Rook. Clipboard. Mild judgment.

Claude asked for the checking account. Read-only still means two years of receipts.

WATCH, DON'T PANIC

What happened

Thursday, November 5, Anthropic shipped Personal Finance in Claude. You connect bank and card accounts through Plaid, then ask where the money went. Anthropic says access is read-only: it cannot move, manage, or invest. The Verge and TechCrunch covered it.

It is rolling out in beta this week to Pro, Max, and Ultra in the US. For the accounts you connect, Claude sees the bank name, account name and type, last four digits, balances, credit limits, and up to two years of transactions. Chats in the Personal Finance hub are not used to train models. You sign into the bank yourself through Plaid, so Claude does not see the password. ChatGPT plugged into Plaid the same way in May.

Why it matters

The hype sentence is “ask Claude where the money went.” The true sentence is two years of charges sitting in a chat.

Read-only is not a leash. It cannot wire the rent. It can still see the rent, the pharmacy, and the thing you hoped nobody would categorize.

What I'd actually do

If you pay for Claude in the US: when Personal Finance shows in the sidebar, do not connect a bank today unless you actually want that history in the hub. Default is no.

If you already connected ChatGPT to a bank in May, this is a second intern, not a safer one.

If you do not use Claude Pro, Max, or Ultra in the US, this is not your door.

You can unlink later. Later is not a reason to plug it in tonight.

The extra room

How it works

Sidebar hub. Plaid in the middle. Claude never asks for the bank password. Unlink anytime and it stops seeing that account. No ads, no sponsored cards, not investment advice. Anthropic says Claude can make mistakes — check the number with the bank.

What this is not

Claude spending your money. A free-plan feature. A Plaid breach. A reason to cancel Claude.

What not to do

Do not connect “just to see.” Do not treat “no ads” as a lock. Do not paste a routing number into the regular chat instead.

The sticky-note version: the intern can read the statement. It still should not have the statement.

Source