Agentic Payments and AI Shopping Agents

Agentic commerce combines an agent’s product-search and decision workflow with payment authorization. The agent may collect constraints such as product type, price range, seller, delivery date, or whether to ask before checkout. A payment system can then apply controls that determine whether a transaction matches those instructions. Tokenized or scoped credentials can reduce exposure of a primary account number, but they do not automatically guarantee a correct purchase or eliminate fraud. A user should understand which actions are permitted, how limits are enforced, what identity or authorization checks occur, and how to revoke access. Payment authorization also differs from product suitability: an agent can execute a permitted transaction for an item that is a poor choice. Clear confirmation thresholds matter for substitutions, recurring purchases, or high-value goods. Merchants and payment providers may use agent identity signals, authentication, and risk checks, but these are controls whose exact implementations vary. Users should receive records of the agent’s instructions and the resulting transaction so they can identify mismatches. Liability and dispute rights depend on the payment method, contract, jurisdiction, and facts; an agent’s participation does not settle those questions. Businesses should test failure paths such as duplicate orders, price changes, out-of-stock substitutions, and unclear merchant identity. Start with narrow permissions and low-risk actions, and require human confirmation when the purchase exceeds scope or important terms have changed.