- The assistant asks for credentials, recovery codes, or broader account permissions
- Stop, use the site's normal login and multifactor flow yourself, and restrict the assistant to approved read only page context.
- The reported return ignores deposits, withdrawals, fees, dividends, currency, or the selected date range
- Request the exact formula and source values, then compare them with the official statement or export.
- A summary drifts into a trade, transfer, or high stakes personalized recommendation
- Do not authorize transactions, and review consequential investment or tax decisions with a qualified professional.
- Sensitive balances, account numbers, or tax information are retained or exposed unnecessarily
- Limit visible pages and fields, redact exports, review provider retention controls, and remove stored sessions or data when supported.