The Agent Fee Is the Prize, Blocking Is the Defense — and JPMorgan Chase's New Terms Send the Fraud Bill to Shared Passwords insight cover
Industry NewsSHOP · AMZN · WMT•22 min read

The Agent Fee Is the Prize, Blocking Is the Defense — and JPMorgan Chase's New Terms Send the Fraud Bill to Shared Passwords

Retail and banking have split into two camps on AI shopping agents: platforms that charge for the transaction, and platforms that refuse it. OpenAI already takes 4% of ChatGPT checkout sales on top of Shopify's fees, while Amazon and JPMorgan Chase shut the door and push the risk onto the customer who shared a password. Detection is the weak link — third-party tools catch only 3.1% to 14.8% of disguised agents — so whoever owns the consent layer will own the transaction. For investors the near-term money is in the rails and in the platforms building gates; the near-term risk sits with anyone whose revenue depends on a checkout they did not build.

Published Nov 2, 2026Updated Nov 2, 2026

Disguised agents caught by third-party bot tools

3.1%–14.8%

Best and worst of six tools tested, reported Nov. 1, 2026

OpenAI fee on ChatGPT checkout sales

4%

Charged to Shopify merchants on top of platform fees, effective Jan. 26, 2026

Amazon advertising services revenue

$19.64B

Q3 2026, reported Oct. 29, 2026; up 10.9% year over year

Shopify Payments penetration

68%

Share of GMV on Shopify Payments, quarter ended June 30, 2026

Amazon cut Meta's Muse shopping agent off from Amazon.com on Sept. 20, 2026, telling shoppers that continued access by an unauthorized agent violates Amazon's Conditions of Use. JPMorgan Chase did the same thing to money movement three weeks later. Walmart did the opposite: it opened a controlled gate with the Walmart Agent Gateway on Oct. 21, 2026. Retail has split into fee-takers and blockers, and the split is about who gets paid on the transaction, not about whether agents are safe.

Disguised agents caught by third-party bot tools

3.1%–14.8%

Best and worst of six tools tested, reported Nov. 1, 2026

OpenAI fee on ChatGPT checkout sales

4%

Charged to Shopify merchants on top of platform fees, effective Jan. 26, 2026

Amazon advertising services revenue

$19.64B

Q3 2026, reported Oct. 29, 2026; up 10.9% year over year

Shopify Payments penetration

68%

Share of GMV on Shopify Payments, quarter ended June 30, 2026

Merchant transactions involving AI agents

~3%

Merchant survey; 89% say they are preparing for agentic commerce

AI-assisted purchases still ending on Amazon

59%

Of U.S. adults who used AI to help with a retail purchase

The split

The Fight Is Over the Fee, Not the Fraud

OpenAI charges Shopify merchants 4% on sales made through ChatGPT checkout, on top of Shopify's own platform and payments fees, effective Jan. 26, 2026. Meta co-wrote an open agent standard with Walmart, Shopify and Stripe on Oct. 6, 2026, but left payments as a future extension. Amazon and JPMorgan Chase take nothing on an agent order because they refuse it. Every platform in this market is choosing between a fee and a wall.

Where each platform stands on third-party agents
PlatformPosition on third-party agentsDateWhat is at stake
AmazonBlocks agents that do not identify themselves; cites its Conditions of UseSept. 20, 2026$19.64B of quarterly advertising services revenue
JPMorgan ChaseBlocks agents from moving money; permits read-only open banking accessOct. 13, 2026$76.19B of quarterly revenue and a liability it no longer carries
WalmartAgent Gateway and Agent Profiles; invite-only beta, approval by defaultOct. 21, 2026$187.9B of quarterly revenue and a new agent discovery channel
ShopifyLets agents pay with Shop Pay; helps write the open standardSept.–Oct. 2026Merchant solutions revenue up 38% over the first half of 2026
MetaCo-authored the Personal Agent Protocol; ships the Muse agentOct. 6, 2026$64.60B of quarterly revenue and the ad relationship that follows the agent
MastercardAgent Pay rails; scores how likely a transaction was agent-initiated2026$11.63B of quarterly net revenue, up 35% year over year

The sequencing matters. Amazon blocked first, on Sept. 20, 2026. On Oct. 6, 2026 the open standard was signed by Meta, Walmart, Shopify, Stripe, Genesys, Instinct and Rocket — every interested party except the blockers. JPMorgan Chase closed the write path a week later, on Oct. 13, 2026, and Walmart opened its gateway eight days after that. The standard was written by the platforms the blockers exclude, and the payment layer that decides who gets paid was deliberately left unspecified.

China skipped the argument entirely. Alibaba connected its Qwen assistant to the full Taobao catalog and launched a Qwen-powered shopping assistant inside the Taobao app in May 2026. The U.S. is arguing about whether to admit agents at the same moment one of the largest retail platforms on earth already treats the agent as the store.

Detection

Detection Is Blind Exactly Where the Disputes Are

A benchmark released Oct. 29, 2026 and reported Nov. 1, 2026 ran six widely used bot-detection products against deliberately disguised agent sessions built with stealth browsers and session takeover. BotD caught 14.8% of them, Akamai 8.7%, F5 6.8%, Cloudflare Turnstile 4.6%, Alphabet's reCAPTCHA 3.6% and Vercel BotID 3.1%. No mainstream product identified even one in five disguised agents, which is why Amazon and the banks refuse agents outright instead of trying to authenticate them.

Share of disguised AI-agent sessions correctly flagged as agents

Six third-party bot-detection products tested on the same disguised-agent sessions. Resemble AI's own RAD-S1 model claimed at least 98.8% detection in internal testing, a vendor figure that has not been independently verified.

Unit: % of disguised agent sessions detected

BotD

14.8%

8.7%

6.8%

Cloudflare Turnstile

4.6%

Alphabet reCAPTCHA

3.6%

Vercel BotID

3.1%

Akamai's own 2026 research finds that more than 90% of commerce organizations placed their AI bot activity in a \"monitor\" category and that three-quarters of the remaining activity was allowed through unrestricted. Merchants are not failing to detect agents — they have stopped trying to stop them, which turns a security problem into a pricing problem.

That is why the blockers' language sounds like regulation and their behaviour looks like pricing. The Federal Reserve has named trust between buyers and sellers as the principal barrier to scaling agentic commerce, and the standard answer to a trust problem is an agreement about who signs, who verifies and who pays. The agreement is being written now, and the platforms that refused to join it are the ones that will have to accept someone else's rules.

Liability

The Fraud Bill Was Moved by Contract, Not by Law

The banks did not simply close the door. They rewrote the terms for anyone who had already handed over a password. Changes to the Chase Digital Services Agreement, effective Oct. 27, 2026, state that third parties including External AI are prohibited from using a customer's login credentials, that a customer who permits such access is deemed to have authorized the agent's transactions, that the customer is responsible for errors including transactions the agent completes beyond the authority given, and that the customer must indemnify the bank and monitor the agent themselves. The customer now carries the loss on transactions the bank never reviews.

We're not going to allow just any outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan... They should understand there's a liability transfer.

Jamie Dimon, chief executive of JPMorgan Chase, on the bank's third-quarter 2026 earnings call, Oct. 13, 2026
Who carries the loss when an agent gets it wrong
PartyWhere the risk sitsDocument
Customer who shared a passwordDeemed to have authorized the agent's transactions; must indemnify the bank and monitor the agentChase Digital Services Agreement, Oct. 27, 2026
JPMorgan ChaseNo obligation to review or screen third-party activity; read-only access only for nowChase Digital Services Agreement and third-quarter earnings call
Merchant93% say the AI agent provider should bear the loss on a wrong purchasePYMNTS merchant survey
Agent providerOnly 28% of merchants would give agents their full product range on the same terms as other channelsPYMNTS merchant survey
Retail platformAgent purchases are treated as normal returns, and agents never receive card detailsWalmart agent terms, Oct. 21, 2026

The legal ground shifted under the blockers at the same time. Amazon won a preliminary injunction against Perplexity in March 2026 and lost it on Aug. 4, 2026, when the Ninth Circuit held that the user, not the AI company, was accessing Amazon's computers. Amazon stopped calling agents hackers and started calling them a breach of its Conditions of Use — and the bank did the same thing by burying the risk in a digital services agreement. Contract, not statute, is becoming the load-bearing instrument of agentic commerce.

The stake

Amazon Is Defending an Advertising Engine That Just Slowed to 11%

Amazon said it cut off Meta's Muse because the agent did not identify itself and appeared to capture and store customer credentials. That is the stated reason. The measured reason sits in the segment data. Advertising services revenue in the third quarter of 2026 was $19.64 billion, up 10.9% from $17.70 billion a year earlier, while total net sales rose 12.1% to $201.94 billion. Advertising grew more slowly than the rest of the business — in the same quarter a year earlier it grew 23.6%.

Amazon advertising services revenue, third quarter

Year-over-year growth in advertising services revenue decelerated to 10.9% in 2026 from 23.6% in 2025.

Unit: $ billions

Q3 2024

14.3

Q3 2025

17.7

Q3 2026

19.6

Amazon third-quarter 2026 segment results
SegmentNet salesOperating incomeOperating margin
North America$112.85B$8.72B7.7%
International$43.11B$1.58B3.7%
AWS$45.98B$17.77B38.6%
Consolidated$201.94B$28.08B13.9%
North America earned $8.72 billion of operating income on $112.85 billion of sales, and that is the segment where Amazon's $19.64 billion advertising business sits. The segment hosting that ad engine now produces less than half the profit of AWS alone, which is what makes a third-party agent a strategic threat rather than a nuisance.

The fee-taker

Shopify Gets Paid on Every Side of the Agent Order

Shopify is the cleanest beneficiary of the split because it monetizes both sides of the transaction. In the quarter ended June 30, 2026, GMV reached $115.6 billion, up 32%, and 68% of it ran through Shopify Payments, up from 64% a year earlier. For the first six months, merchant solutions revenue of $5.2 billion grew 38% against 22% for subscription solutions. Payments are growing nearly twice as fast as subscriptions, and every agent-driven order routes through them.

Shopify, latest reported quarter and first half of 2026
MetricLatestComparison
Revenue, Q2 2026$3.58B+34% year over year
GMV, Q2 2026$115.6B+32% year over year
Shopify Payments penetration68%64% a year earlier
Shopify Payments GMV, Q2 2026$78.1B+38% year over year
Merchant solutions revenue, first half of 2026$5.2B+38% year over year
Subscription solutions revenue, first half of 2026$1.6B+22% year over year
Cloud and infrastructure cost, first half of 2026$59M increaseDriven partly by AI-related usage
  • Merchants selling through ChatGPT checkout pay OpenAI 4% of completed sales on top of what Shopify already charges, effective Jan. 26, 2026.
  • The agent layer adds a fee the merchant cannot negotiate, while the platform still books the order as ordinary merchant-solutions revenue.
  • Agent traffic is not free: cloud and infrastructure costs rose $59 million in the first half of 2026, driven partly by AI-related usage.
  • With only about 3% of merchant transactions yet involving AI agents, the fee fight is an option on future volume rather than a present revenue line.

Upstream

The Security and Payment Layer Sells Either Outcome

  • Akamai — commerce was 47.9% of all AI bot traffic on its network from July to December 2025, and its own detector caught 8.7% of disguised agents in the November benchmark. Security revenue grew 10% year over year to $604 million in the second quarter of 2026, against total revenue of $1.10 billion, up 5.4%.
  • Cloudflare — Turnstile caught 4.6% of disguised agents, the second-weakest result, while Cloudflare also sells the signed-agent verification that lets a site tell an approved agent from an impostor. Second-quarter 2026 revenue grew 35.9% to $696.1 million, and third-quarter guidance is $736 million to $737 million.
  • F5 and Alphabet — F5 caught 6.8% of disguised agents and Alphabet's reCAPTCHA caught 3.6%, the weakest of the six tested, which is why the industry is converging on cryptographic agent identity instead of behavioural scoring.
  • Mastercard — launched Agent Pay for machines and is testing a score that estimates how likely a transaction was started by an AI agent in the United States. Third-quarter 2026 net revenue grew 35% year over year to $11.63 billion.
  • Stripe — a signatory to the open standard whose shared payment tokens can restrict an agent's spending to a named seller, amount or time window, and which reports that 70% of its command-line API resource requests now come from agents. Stripe is privately held.

That is the asymmetry investors should notice. Both camps pay the same security and payment suppliers, and a blocked agent still settles on the same card network, which is why Mastercard's net revenue grew 35% in the very quarter Amazon was cutting agents off and JPMorgan Chase was closing accounts. The upstream layer does not need to pick a winner.

Downstream

Merchants Pay the Fee, Shoppers Pay the Loss

  • 93% of merchants say the AI agent provider should bear the loss when an agent makes a wrong purchase, and 80% expect providers to verify an agent's authority before it acts.
  • Only 28% of merchants are willing to give agents their full product range on the same terms as other channels, so the catalog that would make an agent's recommendation complete is the one most likely to stay shut.
  • Merchants on the ChatGPT checkout channel pay OpenAI 4% of completed sales on top of what Shopify already charges, compressing margin on exactly the channel the agent chose.
  • About 132 million American adults have used AI to help with a retail purchase, and 59% of those AI-assisted purchases still end on Amazon, so today's agent traffic is a feeder into the platform blocking it.
  • Alibaba shows the other end of the market: revenue for the quarter ended June 30, 2026 rose 8.3% to CNY 268.2 billion and operating income rose to CNY 19.3 billion from CNY 5.1 billion while Qwen was already shopping inside Taobao.

That59% is the most uncomfortable number for the blockers. Merchants priced the agent fee within weeks while consumers inherited the fraud loss through a contract amendment — the two sides of the same market are being repriced on completely different clocks.

Horizons

Q4 2026 Is the First Honest Test

What to watch, and when
CatalystDateWhat it settles
Shopify third-quarter 2026 resultsNov. 3, 2026Whether agentic volume shows up in merchant solutions revenue
Akamai and Cloudflare third-quarter resultsNov. 5, 2026Whether detection and signed-agent budgets are actually being funded
Walmart Agent Profiles go liveNovember 2026Whether an agent with spend caps and approval by default converts
Walmart fiscal third-quarter resultsNov. 19, 2026Whether agent traffic is material in a $187.9B quarter
Personal Agent Protocol payments extensionNot specified after Oct. 6, 2026Who gets paid on an agent transaction
JPMorgan Chase write-path access for agentsNo timeline as of Oct. 13, 2026Whether the agent becomes the account holder
Agent share of merchant transactionsOne to three yearsWhether the fee fight becomes a revenue fight

Over the next two quarters the measurable question is volume: Walmart's November agent launch and the holiday peak are the first clean test of whether agent sessions buy or merely browse. Over one to three years the decisive question is whether the write path ever reopens at banks, because the day it does the agent becomes the account holder and the merchant relationship moves to whoever holds the agent's consent. Neither camp wins outright: the platforms that open gates keep the fee and carry the fraud cost, and the platforms that close them keep the customer and the ad money but cede the transaction to whoever arrives with an approved protocol.

Risk

What Would Break This Thesis

The thesis breaks if agent volume scales faster than the liability regime. If detection stays in the single digits and a court or regulator decides an agent's mistakes are the platform's problem, the terms written on Oct. 27, 2026 become unenforceable, and nothing in the current contract stack survives a rule that puts the loss back on the platform.

Two things to watch. First, who sets the price: the standard that Meta, Walmart, Shopify and Stripe signed still lists payments as a future extension, so the fee on an agent transaction is undefined and the first party to write it down captures the economics. Second, what Shopify prints on Nov. 3, 2026: a third quarter in which agentic volume appears in merchant solutions would confirm that the fee-taker camp is compounding while the blockers are still arguing about whose liability it is.

Who this actually touches

SShopifySHOP--
--Vol --
-
Bullish
  • Merchant solutions revenue grew 38% in the first half of 2026 against 22% for subscriptions, and every agent order books another payment.
  • Books a take rate on every agent order while OpenAI's 4% fee lands on the merchant, not on the platform.
  • Shopify Payments penetration rose to 68% of GMV from 64%, so agent volume reinforces an engine that is already compounding.
  • Over one to three years, agent traffic lifts payments volume even if the agent layer compresses merchant margin.
AAmazonAMZN--
--Vol --
-
Mixed
  • Advertising services revenue grew 10.9% to $19.64 billion in the third quarter of 2026, slower than total net sales of $201.94 billion.
  • North America earned $8.72 billion of operating income against AWS's $17.77 billion, so the ad engine sits inside the least profitable segment.
  • 59% of AI-assisted retail purchases still end on Amazon, so blocking third-party agents forfeits a funnel that still pays.
  • Refusing agents cedes the checkout to competitors unless a protocol Amazon accepts ships, and Meta, Shopify and Walmart already have one.
WWalmartWMT--
--Vol --
-
Bullish
  • Agent Gateway and Agent Profiles launch in November 2026 with $50, $100 and $200 spending caps and approval by default.
  • Agents never receive card details, so Walmart takes the agent's traffic without taking the customer's credential risk.
  • Second-quarter fiscal 2027 revenue grew 5.9% to $187.9 billion, and the gateway adds a discovery channel without adding fulfillment cost.
  • Over one to three years, Walmart is the most likely default agent storefront in the U.S. because it built the gate first.
MMeta PlatformsMETA--
--Vol --
-
Bullish
  • Co-authored the Personal Agent Protocol with Walmart, Shopify and Stripe on Oct. 6, 2026, giving Meta a seat where agent access is granted.
  • Third-quarter 2026 revenue of $64.60 billion grew 26%, against 10.9% for Amazon's advertising services.
  • Payments remain a future extension of the protocol, so the fee on an agent transaction is still unpriced.
  • Over one to three years, whoever owns the consent layer owns the commerce relationship, and Meta is co-authoring it.
JJPMorgan ChaseJPM--
--Vol --
-
Mixed
  • Third-quarter 2026 revenue of $76.19 billion grew 6.0% and net interest income rose to $27.04 billion from $23.97 billion, so the block protects a large fee pool.
  • Terms effective Oct. 27, 2026 transfer the loss to the customer who shared a password, rather than eliminating it.
  • Read-only open banking access still lets agents see balances, which keeps the data relationship even as the write path closes.
  • Over one to three years, if regulators reverse that transfer, banks carry agent fraud on a balance sheet that has never priced it.
MMastercardMA--
--Vol --
-
Bullish
  • Third-quarter 2026 net revenue grew 35% to $11.63 billion, the fastest growth among the platforms in this market.
  • Agent Pay for machines and a U.S. test of agent-initiation scoring position Mastercard as the toll collector on agent transactions.
  • A blocked agent still settles on the card network, so the rails are indifferent to the blocker-versus-fee-taker fight.
  • Over one to three years, agent-initiated volume adds transactions without cannibalising human checkout.
AAkamai TechnologiesAKAM--
--Vol --
-
Watch
  • Commerce was 47.9% of AI bot traffic on its network from July to December 2025, and its own detector caught only 8.7% of disguised agents.
  • Second-quarter 2026 security revenue grew 10% to $604 million against total revenue of $1.10 billion, up 5.4%.
  • Merchants put more than 90% of AI bot activity in a monitor category and let three-quarters of the rest through, so enforcement budgets are not yet funded.
  • Watch the protocol's v0.1 reference implementation: if signed agents become mandatory at checkout, verification budgets shift from monitoring to enforcement.
9Alibaba Group9988.HK--
--Vol --
-
Bullish
  • Connected the Qwen assistant to the full Taobao catalog on May 11, 2026 and shipped agentic shopping inside the Taobao app.
  • Revenue for the quarter ended June 30, 2026 rose 8.3% to CNY 268.2 billion and operating income rose to CNY 19.3 billion from CNY 5.1 billion.
  • No U.S. platform has agentic shopping at this scale, which gives Alibaba the operating template first.
  • Over one to three years, if agents win the Western market, the integration playbook already exists.