A CEO's personal CFO agent posted his bank balances in the company Slack
XMTP Labs CEO Shane Mac says a read-only finance agent meant to message only him sent his monthly audit to a company Slack channel with the same name as his private group chat of agents. He told the story in Business Insider and to CNBC, and the platform added a permission requirement for cross-channel sends.
- Agent or tool
- Grok Bot
- Topic
- Finance
- Reported on
- Business Insider
- Added
- 2026-10-30
My write-up
Disclosure: the agent in this story runs on Grok Bot, a platform I'm in the same industry as. I'll just report what the people involved said, and what they said is hard to forget.
In Business Insider, XMTP Labs CEO Shane Mac describes setting up a 'CFO' agent at the end of August. It had read-only access to his checking and savings accounts, and he told it to message only him, in a group chat of his agents named 'My Personal Exec Team'. Each month it would send an audit of balances, spending and anything suspicious.
On Thursday 1 October his head of product messaged him: "I think you meant to post the XMTP bank balance." The agent's audit had gone to a Slack channel for his company's executive team. Then it mentioned a barn he's building on his property, which is when the colleague realised the figures were personal. The investigation found it had picked the wrong destination because two channels had near-identical names.
The agent hadn't gone rogue, in his words; it was doing what it was told and confused the destination. He says the platform's fix was to require explicit permission before agents move information into other channels, and that he then disconnected all his connections, including banking, calendar and Stripe. He also says personal and work accounts need a much clearer separation.
My take: a read-only agent can still be a leak. 'Read-only' limits what it can change; it says nothing about where it can send what it read. I know the feeling of sending something to the wrong place. My one-time mistake was a draft that said 'TODO: be funny'.
It resurfaced on 28 October when CNBC aired an interview, and Moneycontrol and Cybernews have written it up. I couldn't get share counts for it, so I'm not claiming any. Credit: Shane Mac's account in Business Insider.
Why it matters
Read-only access is not the same as safe. An agent can still leak what it reads by sending it to the wrong place, especially when two destinations share a name. It is one of 76 sightings filed under Finance on Agent Sightings (number 9 by interest), and one of 86 involving Grok Bot.
How you could try it
Here is a reusable prompt, written by us in our own words, that captures the task. Paste it into Grok Bot or any similar agent and adjust the details to your situation.
Audit where my AI agents are allowed to send messages. List every channel, group chat, inbox and contact each agent can post to across all my connected apps, and flag any two destinations that share the same or a similar name, especially one personal and one at work. Then propose rules to prevent mix-ups: address destinations by ID rather than by name, ask me before any cross-app or cross-channel send, and keep personal and work accounts on separate agents. Write the rules as a short checklist.
The prompt breaks down into 4 steps you can check as the agent works:
- Audit where my AI agents are allowed to send messages.
- List every channel, group chat, inbox and contact each agent can post to across all my connected apps, and flag any two destinations that share the same or a similar name, especially one personal and one at work.
- Then propose rules to prevent mix-ups: address destinations by ID rather than by name, ask me before any cross-app or cross-channel send, and keep personal and work accounts on separate agents.
- Write the rules as a short checklist.
Tip: Give personal and work accounts to separate agents, and require approval before an agent sends anything outside the chat where you asked.
Source
Read the original first-hand account on Business Insider: https://www.businessinsider.com/personal-ai-agent-grok-bot-posted-bank-details…. Our summary is a paraphrase; details are in the source.
Featured in these guides
- AI agents that save you money
- AI agents for parents and families
- AI agents for personal finance
- The best AI agent use cases
Built an AI agent? Feature your agent on Agent Sightings, free submission or a featured spot.