Comment by stickfigure

This is most likely actual customers deliberately giving their agents access.

Which is an interesting problem, what happens when the agent fucks up and the customer loses lots of money? Who is responsible?

If the official policy is "no agents", it shifts the blame.