Banks Are Struggling to Protect Customers from Their Own AI Agents