Shop, Book, Bank: Why Sites Are Starting to Lock Out AI Agents
Retailers, airlines and now big banks are blocking AI agents that try to act on a customer's behalf. The fight is about control and who pays when things go wrong.
AI agents that can shop, book flights or manage accounts for you sound convenient. In practice, a growing number of websites are shutting the door on them. Reports this month describe blocks at Amazon, airlines and retail sites, and now two large banks say they keep outside agents away from customer money.
Start with the shops. According to TechCrunch, Amazon began blocking Meta’s Muse agent from its retail site in September. Delta says it has no partnership allowing third-party agents to book and is protecting customers from unauthorised automation. United points to terms of use that bar robots without written permission. Yelp allows non-human traffic only if the agent has paid for data access. Walmart, by contrast, is a Muse partner and says its failures were accidental: a human-check button that breaks when an agent interrupts it.
Then the banks. Schwab CEO Rick Wurster told Bloomberg TV, as reported by Forkast, that a weekly report shows “tens and twenties” of blocked attempts by major AI agents to reach or move client funds. Schwab lets outside models connect through read-only access, such as checking balances, but not move money. JPMorgan’s Jamie Dimon says the bank blocks outside agents from customer account information. Those numbers are one executive’s description, not audited data.
What’s behind it: two things are tangled together. Some blocks are old anti-bot defences, built to stop spam and scraping, that cannot tell a helpful agent from a bad one. Others are deliberate business choices: a shop wants to show you its own recommendations, and a bank wants to know who is liable if an agent makes a bad transfer. Wurster’s worry is simple: if you hand an agent your password, neither you nor the bank fully controls it, and nobody knows who pays for a mistake. No US law settles that yet.
The industry is working on solutions. Meta, Walmart, Stripe and five other companies are developing a shared protocol so sites can tell trustworthy agents from bad bots, and Meta is signing partnerships so partner sites welcome Muse. Meta’s line is: “Turning away a personal agent means turning away the customer behind it.”
What this means for you: if an agent fails halfway through a purchase or booking, a block may be the reason, not a bug in your prompt. Never give an agent your banking password. Prefer official, read-only connections, and for payments keep a human click in the loop. For most people, agents doing your banking is not a thing yet, and that is fine.
Sources
Source: https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/
Android Adds More AI Protection Against Scam Texts and Fake Bank Calls
Google is adding Gemini-based scam checks to Messages, blocking apps from silently forwarding your calls, and expanding verified bank calls. Some of it is opt-in, and several parts arrive only 'later this year'.
