If you handed an AI agent your login, fraud protection may not apply.