Banks have had a long standing policy that if you willing hand over your credentials, you are responsible for any losses. This applies to AI agents as well as scammers.