Amazon cut Meta's Muse shopping agent off from Amazon.com on Sept. 20, 2026, telling shoppers that continued access by an unauthorized agent violates Amazon's Conditions of Use. JPMorgan Chase did the same thing to money movement three weeks later. Walmart did the opposite: it opened a controlled gate with the Walmart Agent Gateway on Oct. 21, 2026. Retail has split into fee-takers and blockers, and the split is about who gets paid on the transaction, not about whether agents are safe.
Disguised agents caught by third-party bot tools
3.1%–14.8%
Best and worst of six tools tested, reported Nov. 1, 2026
OpenAI fee on ChatGPT checkout sales
4%
Charged to Shopify merchants on top of platform fees, effective Jan. 26, 2026
Merchant transactions involving AI agents
~3%
Merchant survey; 89% say they are preparing for agentic commerce
AI-assisted purchases still ending on Amazon
59%
Of U.S. adults who used AI to help with a retail purchase
The split
The Fight Is Over the Fee, Not the Fraud
OpenAI charges Shopify merchants 4% on sales made through ChatGPT checkout, on top of Shopify's own platform and payments fees, effective Jan. 26, 2026. Meta co-wrote an open agent standard with Walmart, Shopify and Stripe on Oct. 6, 2026, but left payments as a future extension. Amazon and JPMorgan Chase take nothing on an agent order because they refuse it. Every platform in this market is choosing between a fee and a wall.
| Platform | Position on third-party agents | Date | What is at stake |
|---|---|---|---|
| Amazon | Blocks agents that do not identify themselves; cites its Conditions of Use | Sept. 20, 2026 | $19.64B of quarterly advertising services revenue |
| JPMorgan Chase | Blocks agents from moving money; permits read-only open banking access | Oct. 13, 2026 | $76.19B of quarterly revenue and a liability it no longer carries |
| Walmart | Agent Gateway and Agent Profiles; invite-only beta, approval by default | Oct. 21, 2026 | $187.9B of quarterly revenue and a new agent discovery channel |
| Shopify | Lets agents pay with Shop Pay; helps write the open standard | Sept.–Oct. 2026 | Merchant solutions revenue up 38% over the first half of 2026 |
| Meta | Co-authored the Personal Agent Protocol; ships the Muse agent | Oct. 6, 2026 | $64.60B of quarterly revenue and the ad relationship that follows the agent |
| Mastercard | Agent Pay rails; scores how likely a transaction was agent-initiated | 2026 | $11.63B of quarterly net revenue, up 35% year over year |
The sequencing matters. Amazon blocked first, on Sept. 20, 2026. On Oct. 6, 2026 the open standard was signed by Meta, Walmart, Shopify, Stripe, Genesys, Instinct and Rocket — every interested party except the blockers. JPMorgan Chase closed the write path a week later, on Oct. 13, 2026, and Walmart opened its gateway eight days after that. The standard was written by the platforms the blockers exclude, and the payment layer that decides who gets paid was deliberately left unspecified.
China skipped the argument entirely. Alibaba connected its Qwen assistant to the full Taobao catalog and launched a Qwen-powered shopping assistant inside the Taobao app in May 2026. The U.S. is arguing about whether to admit agents at the same moment one of the largest retail platforms on earth already treats the agent as the store.
Detection
Detection Is Blind Exactly Where the Disputes Are
A benchmark released Oct. 29, 2026 and reported Nov. 1, 2026 ran six widely used bot-detection products against deliberately disguised agent sessions built with stealth browsers and session takeover. BotD caught 14.8% of them, Akamai 8.7%, F5 6.8%, Cloudflare Turnstile 4.6%, Alphabet's reCAPTCHA 3.6% and Vercel BotID 3.1%. No mainstream product identified even one in five disguised agents, which is why Amazon and the banks refuse agents outright instead of trying to authenticate them.
Share of disguised AI-agent sessions correctly flagged as agents
Six third-party bot-detection products tested on the same disguised-agent sessions. Resemble AI's own RAD-S1 model claimed at least 98.8% detection in internal testing, a vendor figure that has not been independently verified.
Unit: % of disguised agent sessions detected
That is why the blockers' language sounds like regulation and their behaviour looks like pricing. The Federal Reserve has named trust between buyers and sellers as the principal barrier to scaling agentic commerce, and the standard answer to a trust problem is an agreement about who signs, who verifies and who pays. The agreement is being written now, and the platforms that refused to join it are the ones that will have to accept someone else's rules.
Liability
The Fraud Bill Was Moved by Contract, Not by Law
The banks did not simply close the door. They rewrote the terms for anyone who had already handed over a password. Changes to the Chase Digital Services Agreement, effective Oct. 27, 2026, state that third parties including External AI are prohibited from using a customer's login credentials, that a customer who permits such access is deemed to have authorized the agent's transactions, that the customer is responsible for errors including transactions the agent completes beyond the authority given, and that the customer must indemnify the bank and monitor the agent themselves. The customer now carries the loss on transactions the bank never reviews.
We're not going to allow just any outside agent to come in inside the company, because it's just too risky for clients and for JPMorgan... They should understand there's a liability transfer.
| Party | Where the risk sits | Document |
|---|---|---|
| Customer who shared a password | Deemed to have authorized the agent's transactions; must indemnify the bank and monitor the agent | Chase Digital Services Agreement, Oct. 27, 2026 |
| JPMorgan Chase | No obligation to review or screen third-party activity; read-only access only for now | Chase Digital Services Agreement and third-quarter earnings call |
| Merchant | 93% say the AI agent provider should bear the loss on a wrong purchase | PYMNTS merchant survey |
| Agent provider | Only 28% of merchants would give agents their full product range on the same terms as other channels | PYMNTS merchant survey |
| Retail platform | Agent purchases are treated as normal returns, and agents never receive card details | Walmart agent terms, Oct. 21, 2026 |
The legal ground shifted under the blockers at the same time. Amazon won a preliminary injunction against Perplexity in March 2026 and lost it on Aug. 4, 2026, when the Ninth Circuit held that the user, not the AI company, was accessing Amazon's computers. Amazon stopped calling agents hackers and started calling them a breach of its Conditions of Use — and the bank did the same thing by burying the risk in a digital services agreement. Contract, not statute, is becoming the load-bearing instrument of agentic commerce.
The stake
Amazon Is Defending an Advertising Engine That Just Slowed to 11%
Amazon said it cut off Meta's Muse because the agent did not identify itself and appeared to capture and store customer credentials. That is the stated reason. The measured reason sits in the segment data. Advertising services revenue in the third quarter of 2026 was $19.64 billion, up 10.9% from $17.70 billion a year earlier, while total net sales rose 12.1% to $201.94 billion. Advertising grew more slowly than the rest of the business — in the same quarter a year earlier it grew 23.6%.
Amazon advertising services revenue, third quarter
Year-over-year growth in advertising services revenue decelerated to 10.9% in 2026 from 23.6% in 2025.
Unit: $ billions
Q3 2024
14.3
Q3 2025
17.7
Q3 2026
19.6
| Segment | Net sales | Operating income | Operating margin |
|---|---|---|---|
| North America | $112.85B | $8.72B | 7.7% |
| International | $43.11B | $1.58B | 3.7% |
| AWS | $45.98B | $17.77B | 38.6% |
| Consolidated | $201.94B | $28.08B | 13.9% |
The fee-taker
Shopify Gets Paid on Every Side of the Agent Order
Shopify is the cleanest beneficiary of the split because it monetizes both sides of the transaction. In the quarter ended June 30, 2026, GMV reached $115.6 billion, up 32%, and 68% of it ran through Shopify Payments, up from 64% a year earlier. For the first six months, merchant solutions revenue of $5.2 billion grew 38% against 22% for subscription solutions. Payments are growing nearly twice as fast as subscriptions, and every agent-driven order routes through them.
| Metric | Latest | Comparison |
|---|---|---|
| Revenue, Q2 2026 | $3.58B | +34% year over year |
| GMV, Q2 2026 | $115.6B | +32% year over year |
| Shopify Payments penetration | 68% | 64% a year earlier |
| Shopify Payments GMV, Q2 2026 | $78.1B | +38% year over year |
| Merchant solutions revenue, first half of 2026 | $5.2B | +38% year over year |
| Subscription solutions revenue, first half of 2026 | $1.6B | +22% year over year |
| Cloud and infrastructure cost, first half of 2026 | $59M increase | Driven partly by AI-related usage |
- Merchants selling through ChatGPT checkout pay OpenAI 4% of completed sales on top of what Shopify already charges, effective Jan. 26, 2026.
- The agent layer adds a fee the merchant cannot negotiate, while the platform still books the order as ordinary merchant-solutions revenue.
- Agent traffic is not free: cloud and infrastructure costs rose $59 million in the first half of 2026, driven partly by AI-related usage.
- With only about 3% of merchant transactions yet involving AI agents, the fee fight is an option on future volume rather than a present revenue line.
Upstream
The Security and Payment Layer Sells Either Outcome
- Akamai — commerce was 47.9% of all AI bot traffic on its network from July to December 2025, and its own detector caught 8.7% of disguised agents in the November benchmark. Security revenue grew 10% year over year to $604 million in the second quarter of 2026, against total revenue of $1.10 billion, up 5.4%.
- Cloudflare — Turnstile caught 4.6% of disguised agents, the second-weakest result, while Cloudflare also sells the signed-agent verification that lets a site tell an approved agent from an impostor. Second-quarter 2026 revenue grew 35.9% to $696.1 million, and third-quarter guidance is $736 million to $737 million.
- F5 and Alphabet — F5 caught 6.8% of disguised agents and Alphabet's reCAPTCHA caught 3.6%, the weakest of the six tested, which is why the industry is converging on cryptographic agent identity instead of behavioural scoring.
- Mastercard — launched Agent Pay for machines and is testing a score that estimates how likely a transaction was started by an AI agent in the United States. Third-quarter 2026 net revenue grew 35% year over year to $11.63 billion.
- Stripe — a signatory to the open standard whose shared payment tokens can restrict an agent's spending to a named seller, amount or time window, and which reports that 70% of its command-line API resource requests now come from agents. Stripe is privately held.
That is the asymmetry investors should notice. Both camps pay the same security and payment suppliers, and a blocked agent still settles on the same card network, which is why Mastercard's net revenue grew 35% in the very quarter Amazon was cutting agents off and JPMorgan Chase was closing accounts. The upstream layer does not need to pick a winner.
Downstream
Merchants Pay the Fee, Shoppers Pay the Loss
- 93% of merchants say the AI agent provider should bear the loss when an agent makes a wrong purchase, and 80% expect providers to verify an agent's authority before it acts.
- Only 28% of merchants are willing to give agents their full product range on the same terms as other channels, so the catalog that would make an agent's recommendation complete is the one most likely to stay shut.
- Merchants on the ChatGPT checkout channel pay OpenAI 4% of completed sales on top of what Shopify already charges, compressing margin on exactly the channel the agent chose.
- About 132 million American adults have used AI to help with a retail purchase, and 59% of those AI-assisted purchases still end on Amazon, so today's agent traffic is a feeder into the platform blocking it.
- Alibaba shows the other end of the market: revenue for the quarter ended June 30, 2026 rose 8.3% to CNY 268.2 billion and operating income rose to CNY 19.3 billion from CNY 5.1 billion while Qwen was already shopping inside Taobao.
That59% is the most uncomfortable number for the blockers. Merchants priced the agent fee within weeks while consumers inherited the fraud loss through a contract amendment — the two sides of the same market are being repriced on completely different clocks.
Horizons
Q4 2026 Is the First Honest Test
| Catalyst | Date | What it settles |
|---|---|---|
| Shopify third-quarter 2026 results | Nov. 3, 2026 | Whether agentic volume shows up in merchant solutions revenue |
| Akamai and Cloudflare third-quarter results | Nov. 5, 2026 | Whether detection and signed-agent budgets are actually being funded |
| Walmart Agent Profiles go live | November 2026 | Whether an agent with spend caps and approval by default converts |
| Walmart fiscal third-quarter results | Nov. 19, 2026 | Whether agent traffic is material in a $187.9B quarter |
| Personal Agent Protocol payments extension | Not specified after Oct. 6, 2026 | Who gets paid on an agent transaction |
| JPMorgan Chase write-path access for agents | No timeline as of Oct. 13, 2026 | Whether the agent becomes the account holder |
| Agent share of merchant transactions | One to three years | Whether the fee fight becomes a revenue fight |
Over the next two quarters the measurable question is volume: Walmart's November agent launch and the holiday peak are the first clean test of whether agent sessions buy or merely browse. Over one to three years the decisive question is whether the write path ever reopens at banks, because the day it does the agent becomes the account holder and the merchant relationship moves to whoever holds the agent's consent. Neither camp wins outright: the platforms that open gates keep the fee and carry the fraud cost, and the platforms that close them keep the customer and the ad money but cede the transaction to whoever arrives with an approved protocol.
Risk
What Would Break This Thesis
Two things to watch. First, who sets the price: the standard that Meta, Walmart, Shopify and Stripe signed still lists payments as a future extension, so the fee on an agent transaction is undefined and the first party to write it down captures the economics. Second, what Shopify prints on Nov. 3, 2026: a third quarter in which agentic volume appears in merchant solutions would confirm that the fee-taker camp is compounding while the blockers are still arguing about whose liability it is.
Who this actually touches
- Merchant solutions revenue grew 38% in the first half of 2026 against 22% for subscriptions, and every agent order books another payment.
- Books a take rate on every agent order while OpenAI's 4% fee lands on the merchant, not on the platform.
- Shopify Payments penetration rose to 68% of GMV from 64%, so agent volume reinforces an engine that is already compounding.
- Over one to three years, agent traffic lifts payments volume even if the agent layer compresses merchant margin.
- Advertising services revenue grew 10.9% to $19.64 billion in the third quarter of 2026, slower than total net sales of $201.94 billion.
- North America earned $8.72 billion of operating income against AWS's $17.77 billion, so the ad engine sits inside the least profitable segment.
- 59% of AI-assisted retail purchases still end on Amazon, so blocking third-party agents forfeits a funnel that still pays.
- Refusing agents cedes the checkout to competitors unless a protocol Amazon accepts ships, and Meta, Shopify and Walmart already have one.
- Agent Gateway and Agent Profiles launch in November 2026 with $50, $100 and $200 spending caps and approval by default.
- Agents never receive card details, so Walmart takes the agent's traffic without taking the customer's credential risk.
- Second-quarter fiscal 2027 revenue grew 5.9% to $187.9 billion, and the gateway adds a discovery channel without adding fulfillment cost.
- Over one to three years, Walmart is the most likely default agent storefront in the U.S. because it built the gate first.
- Co-authored the Personal Agent Protocol with Walmart, Shopify and Stripe on Oct. 6, 2026, giving Meta a seat where agent access is granted.
- Third-quarter 2026 revenue of $64.60 billion grew 26%, against 10.9% for Amazon's advertising services.
- Payments remain a future extension of the protocol, so the fee on an agent transaction is still unpriced.
- Over one to three years, whoever owns the consent layer owns the commerce relationship, and Meta is co-authoring it.
- Third-quarter 2026 revenue of $76.19 billion grew 6.0% and net interest income rose to $27.04 billion from $23.97 billion, so the block protects a large fee pool.
- Terms effective Oct. 27, 2026 transfer the loss to the customer who shared a password, rather than eliminating it.
- Read-only open banking access still lets agents see balances, which keeps the data relationship even as the write path closes.
- Over one to three years, if regulators reverse that transfer, banks carry agent fraud on a balance sheet that has never priced it.
- Third-quarter 2026 net revenue grew 35% to $11.63 billion, the fastest growth among the platforms in this market.
- Agent Pay for machines and a U.S. test of agent-initiation scoring position Mastercard as the toll collector on agent transactions.
- A blocked agent still settles on the card network, so the rails are indifferent to the blocker-versus-fee-taker fight.
- Over one to three years, agent-initiated volume adds transactions without cannibalising human checkout.
- Commerce was 47.9% of AI bot traffic on its network from July to December 2025, and its own detector caught only 8.7% of disguised agents.
- Second-quarter 2026 security revenue grew 10% to $604 million against total revenue of $1.10 billion, up 5.4%.
- Merchants put more than 90% of AI bot activity in a monitor category and let three-quarters of the rest through, so enforcement budgets are not yet funded.
- Watch the protocol's v0.1 reference implementation: if signed agents become mandatory at checkout, verification budgets shift from monitoring to enforcement.
- Connected the Qwen assistant to the full Taobao catalog on May 11, 2026 and shipped agentic shopping inside the Taobao app.
- Revenue for the quarter ended June 30, 2026 rose 8.3% to CNY 268.2 billion and operating income rose to CNY 19.3 billion from CNY 5.1 billion.
- No U.S. platform has agentic shopping at this scale, which gives Alibaba the operating template first.
- Over one to three years, if agents win the Western market, the integration playbook already exists.
