Some already can, if you connect them to an exchange account and grant trading permission; most still only track, alert and suggest. The shift from alerts to actions is under way, and crypto users are open to it. In one survey of 2,632 crypto users, 87% said they would let AI manage at least 10% of their portfolio, yet only 34.5% trusted AI with access to their wallet.
A note on the legal and regulatory points here: they summarise public sources as of November 2026 and should not be relied on. Rules for AI agents are still being written, and some of what is described here is proposed or coming soon rather than settled. Check the current position, or ask a qualified professional, before acting on it.
What is actually changing?
Portfolio tools are moving from telling you something to doing something about it. It helps to think of five levels, each one handing the software a little more authority:
- Tracking. The app shows balances, prices and news. It can only read.
- Alerts. It tells you when something crosses a line you set.
- Suggestions. It proposes a trade and explains why.
- Approval-gated actions. It prepares the trade, and nothing happens until you approve it.
- Autonomy within limits. It acts without asking, inside caps and rules you set.
In our reading, most consumer tools sit at levels one to three. The plumbing for levels four and five arrived in 2026. In early March 2026, within about a week, three large exchanges each released toolkits that let AI agents connect to user accounts and place orders. One of them required explicit user approval before any action that changes the account. That is level four built into the infrastructure.
How would an app get permission to trade for me?
Only if you give it that permission, and the kind of permission you grant sets your worst case. On an exchange, software usually connects through an API key, a password-like credential that lets a program use your account. Keys can typically be read-only, trade-enabled or withdrawal-enabled.
The difference matters more than any feature list:
| Permission | What the app can do | Worst case if it goes wrong |
|---|---|---|
| Read-only | See balances and history | Your data leaks |
| Trade-only | Buy and sell inside the account | Bad or excessive trades |
| Withdrawal | Move funds out of the account | Your funds leave, usually for good |
Self-custody wallets are getting similar controls. A draft Ethereum standard, ERC-7715, describes how a wallet can grant an app permission to act on its owner's behalf. The permission can carry an expiry date and an allowance, and the owner can list and revoke what has been granted. It is still a draft, and wallet support varies.
Do people actually want this?
Crypto users say yes, within limits; mainstream consumers mostly say not yet. In the crypto-user survey above, about one in seven respondents said they would hand an AI their whole portfolio. But 37.5% said they did not trust AI with wallet access, against 34.5% who did.
Mainstream audiences are warier. A major research firm found that three-quarters of online adults in the US, UK and Canada were uncomfortable letting an AI agent pay on its own, even with preset spending limits. A June 2026 UK survey of 2,080 adults, run for a large payments company, found:
- 43% trust AI to follow spending limits.
- 18% trust it to act in their financial best interest.
- 15% trust it to handle problems when something goes wrong.
- 60% would stop using an AI shopping agent after a single mistake.
Our reading of those numbers: people trust limits far more than they trust judgement. That makes the controls, not the intelligence, the part of an AI portfolio tool that matters most.
What controls should an app that trades come with?
An app that trades should come with limits you set, a record you can read and an off switch that works instantly. None of these needs advanced AI. They are ordinary software design, and their absence is a warning sign. This is our list, not an industry standard:
- Approval by default. Every trade waits for your tap until you choose otherwise, one asset or strategy at a time.
- Hard caps. A maximum size per trade and a maximum total per day, enforced by the account rather than by the app's own judgement.
- An allowlist. The app can only trade assets you have named, so a sudden new token is out of reach.
- A plain-English log. Each action shows what the app saw, what it decided and why, in words a non-specialist can follow.
- A real off switch. One action revokes access everywhere, and you can confirm it worked.
- Clear expiry. Permissions lapse after a set period unless you renew them.
The permission types described above make most of this possible already. What varies is whether an app's design puts these controls in front of you or buries them in a settings menu.
What could go wrong?
The most likely failure is not a dramatic hack but a confident trade based on bad information. An app's view of the market is only as good as its data. A stale price, a misread headline or a fake news item can trigger a trade that a careful person would never make.
Five other risks are worth naming:
- Over-trading. An agent that acts often can lose more to fees and slippage, the gap between expected and actual price, than it gains.
- Fake "AI trading" apps. The SEC's investor education office, with state securities regulators and an industry self-regulator, has warned about AI investment fraud. Its warning signs include guaranteed returns, unregistered promoters and high-pressure sales.
- Forgotten keys. A key you granted for a trial stays live until you revoke it.
- Permission creep. It is easy to tick "withdraw" during setup to save a step later.
- Unclear liability. Read the terms before you connect anything. Assume a bad trade is your loss unless the terms clearly say otherwise.
There is also a trust cliff. If six in ten people would quit after one mistake, an app that trades on its own has very little room for error.
The trust takeaway
Your portfolio app may well start making trades, but only if you hand it the permission. The question to ask is not how smart it is. It is what it can do without you, and how fast you can stop it.
Before you let any app trade for you, check:
- Does it ask for read, trade or withdrawal permission? Never grant withdrawal unless you must.
- Does it ask before each trade, or act inside limits you set yourself?
- Can you see a log of every action and the reason for it?
- How do you revoke its access, and how quickly does that take effect?
- Who pays if it makes a bad trade?
- Is anyone promising returns? If so, walk away.
The Crypto App, TrustSwap's crypto news and portfolio tracking app, sits at the tracking end of this scale today. If portfolio apps do move from alerts to actions, our view is that the checklist above should come first: approval by default, hard limits, a readable log and one-tap revoke. That is where this is going, not a shipped feature.