Can AI agents open bank accounts? What is legally possible in the EU

Short answer: an AI agent can do almost all of the work of opening a business account in the EU, but not all of it, and the two steps that remain human are not a technical limitation. They are anti money laundering law and PSD2.

What the agent can legally do

An agent can collect company details from a conversation, file the application, submit registry data, poll the status of the KYB review and configure everything after approval: sub accounts, cards, budgets, integrations. In an MCP based flow this looks like a handful of tool calls: start_onboarding with the company data, check_status until the review clears, then create_agent to set up the first mandate. None of this requires a human at the keyboard.

What must stay human

Two moments are reserved for people. First, identity verification of the beneficial owners and directors, required by EU anti money laundering rules, which is why every serious flow hands the founder a verification link for video ident or bank ident. Second, the mandate signature: under PSD2, strong customer authentication ties payment authority to a verified human, typically via a passkey. The clean pattern is that the human authorises the rules once, and the agent then acts inside those rules without per transaction approvals.

Why this split is a feature

A flow where an agent could also verify identity would be a flow where stolen agents open accounts. The human handoff is the security anchor that makes everything else automatable. Design the onboarding so the agent does the paperwork and the human does exactly two taps, and you get both speed and a compliance story that survives an audit.