Can an AI Agent Really Shop and Pay for You? What's Real Right Now

Safety & scams Guide7 min read·Updated September 29, 2026

This article is for general information only and is not financial advice. For decisions that affect your money, speak with a qualified financial professional.

The short answer

Right now, most AI shopping help is limited to finding and comparing products — only a few tools, like Perplexity paired with PayPal, can actually complete a purchase, and even those are built to ask for your final confirmation before paying. OpenAI already tried and retired an in-chat 'buy button' in ChatGPT. If you try any AI checkout feature, use a low-limit card, review the exact cart before confirming, and stay alert for unfamiliar sellers.

The idea of telling an AI assistant "find me a good pair of walking shoes under $60 and just order them" sounds like science fiction — but small pieces of it are already real. The bigger truth, though, is that the flashiest version of this already came and went: a major AI company built an in-chat "buy it now" button, launched it widely, and quietly shut it down about six months later. That's worth knowing before you hand any AI agent your payment details.

This guide separates what AI shopping agents can actually do today from what's still marketing, and gives you a short, practical checklist for staying safe if you decide to try one.

Understand the difference between 'finding' and 'paying'

Almost every AI tool that talks about "shopping" is doing one of two very different things, and it's worth knowing which one you're using:

  • Product discovery — the AI searches, compares prices, and suggests options, then hands you off to the retailer's own website or app to actually pay. This is the overwhelming majority of what "AI shopping" means today, including ChatGPT's current shopping experience.
  • Completed payment inside the AI tool — the AI actually finalizes the purchase using a payment method you've linked. This is rare, and every real example of it that we could verify still asks you to confirm the final order before money moves.

If a company advertises an AI "shopping assistant," assume it means discovery unless it specifically says it can complete a purchase — and even then, expect a confirmation step. No mainstream tool available to ordinary consumers right now buys things fully on autopilot with zero review from you.

The cautionary tale: ChatGPT's 'Instant Checkout' came and went

In September 2025, OpenAI launched a feature called Instant Checkout directly inside ChatGPT, built on something called the Agentic Commerce Protocol, developed jointly with Stripe. It started with Etsy sellers, with Shopify merchants set to follow. The pitch was simple: ask ChatGPT a shopping question, see products, tap buy, and finish the purchase without ever leaving the chat window.

By March 2026 — about six months later — OpenAI quietly retired it. Results were weak: Walmart reportedly saw roughly a third of the conversion rate it gets on its own website, and only around 30 Shopify merchants had bothered to sign up. ChatGPT now works purely as a "product discovery" tool — it helps you find and compare items, then sends you to the retailer's website to pay, just like a search engine would.

The lesson isn't that AI shopping is a dead end. It's that even a well-funded, well-known company's first serious attempt at an AI "buy button" didn't survive contact with real shoppers. Don't assume any single AI checkout feature you encounter is mature or permanent — treat all of them, for now, as experiments.

What's actually live: Perplexity, PayPal, and a 'review before you pay' design

The clearest working example right now is Perplexity, the AI answer engine, which partnered with PayPal starting in the summer of 2025. Ahead of Black Friday in November 2025, the two companies launched a feature called Instant Buy: inside Perplexity — including its Comet web browser — you can ask it to find a product, and it can complete checkout using a PayPal or Venmo account you've already linked, at participating retailers that reportedly include brands like Abercrombie & Fitch, Ashley Furniture, Fabletics, Adorama, and Newegg.

What matters most for your safety isn't the brand name — it's the design pattern. Perplexity's Comet browser can navigate a retailer's site and build a shopping cart on your behalf, but it's built to stop short of completing payment without showing you the final order and asking you to confirm it. That "pause and confirm" step is the single most important safety feature in any AI checkout tool. If you ever encounter one that skips it, treat that as a red flag rather than a convenience.

The real risk: fake sellers built to fool AI, and murky liability

Here's the part that matters more than any single company's feature: security researchers have started documenting what's being called "agentic commerce fraud" — fraudulent storefronts specifically engineered to look legitimate to an AI agent's scanning and product-comparison process, not necessarily to a human eye. If an AI agent completes a purchase at one of these fake stores, the scammers can harvest your payment details the same way a phishing site would.

This matters because an AI agent evaluates a "good deal" differently than you do. It might weigh price, apparent reviews, and product-description keywords in ways a convincing fake storefront can game — sometimes more easily than it could fool a skeptical human shopper who notices a site "feels off."

The other open question is liability. If an AI agent gets tricked into an unauthorized or fraudulent purchase, who's responsible — you, the AI company, the payment network, or the merchant? Industry surveys from 2026 found only about 16% of consumers say they're comfortable letting an AI agent spend money autonomously even with permission granted, and over half believe AI increases fraud risk overall. That skepticism is reasonable: the rules for exactly this scenario are still being written.

What this means for you in practice: your normal card-issuer fraud protections and dispute rights generally still apply to a purchase made through an AI agent, because the transaction still runs through your regular card network like any other charge. But because AI-specific liability rules aren't fully settled industry-wide, don't assume a dispute involving an AI agent will move as smoothly or quickly as an ordinary one. Keep every confirmation and receipt.

Your practical safety checklist

If you decide to try any AI shopping or checkout feature, a few habits go a long way:

  1. Use a dedicated, low-limit payment method first. A prepaid card, a virtual card number, or a card you don't use for anything else limits your exposure while you learn how the feature actually behaves.
  2. Always review the exact cart before confirming. Check the item, price, seller name, and shipping cost yourself — don't tap "confirm" on autopilot just because the AI presented it as a good match.
  3. Be suspicious of unusually low prices from an unfamiliar seller, even when the AI flagged it as a top result. AI agents can be fooled by fake storefronts the same way humans can be fooled by phishing sites — sometimes more easily.
  4. Treat "no final confirmation screen" as a warning sign. The safest AI shopping tools available today, like Perplexity's Comet, are built to pause and show you the order before paying. A tool that skips that step deserves extra caution, not extra trust. (If you're building your own agent rather than using an off-the-shelf shopping tool, the same pause-and-approve pattern can be added with a service like Impri — disclosure: built by the author of this site.)
  5. Keep your receipts and confirmations. Your card issuer's dispute process still applies, but a paper trail makes any dispute involving an AI-initiated purchase easier to resolve.

What to Try Next

If you want to explore AI shopping tools that stop at the discovery stage — no payment involved at all — AI Shopping Tools That Find Better Prices While You Browse covers the safer, more established options. And since any AI shopping conversation involves sharing some personal preferences and sometimes payment details, it's worth reading What Not to Tell an AI Chatbot before your next session.

Sources

Published September 17, 2026 · Updated September 29, 2026How we test →

Frequently asked questions

Can ChatGPT buy things for me right now?
No. OpenAI launched an in-chat 'Instant Checkout' feature in September 2025 that let you buy products without leaving the conversation, but retired it in March 2026 after weak results. ChatGPT can still help you find and compare products, but it now sends you to the retailer's own website to actually pay.
What AI tool can actually complete a purchase today?
Perplexity, paired with PayPal, launched 'Instant Buy' in November 2025. Inside Perplexity (including its Comet browser), you can ask it to find a product and pay using a linked PayPal or Venmo account at participating retailers. Comet's browser can build a shopping cart for you but is designed to require your explicit review and confirmation before it completes payment.
If an AI agent gets tricked into buying from a fake seller, am I covered?
Your normal card-issuer fraud protections and dispute rights generally still apply, since the payment still runs through your regular card network. But liability rules specifically for AI-initiated purchases are still being worked out industry-wide, so don't assume a dispute will be resolved as quickly or smoothly as a typical one. Keep your order confirmations and receipts.
Is it safe to link my main bank card to an AI shopping assistant?
Not as a first step. Use a dedicated payment method with a low limit — a prepaid card, a virtual card number, or a card you don't use for anything else — while you're still getting a feel for how the feature behaves.
What are Visa and Mastercard doing about AI agents making payments?
Both card networks are building infrastructure for this. Mastercard's Agent Pay uses 'Agentic Tokens' that tie a tokenized card number to one specific AI agent, one merchant, and one spending policy, so the agent never sees your real card number. Visa's Trusted Agent Protocol verifies an AI agent's identity to a merchant and attaches a signed record of your consent. Most of this happens invisibly in the background — you won't interact with it by name.
How do fake sellers trick AI shopping agents?
Scammers can build storefronts engineered to look legitimate to an AI agent's scanning and comparison process, even when they wouldn't fool a careful human. If the agent completes a purchase there, the fake seller can harvest your payment details. This is why reviewing the exact seller name and price the AI found — not just trusting that it picked a good option — matters.
Radim S.
Founder & editor

Radim is a software developer who spends his days building with AI and his evenings explaining it to family members who don’t care how it works — only what it can do for them. The safety guides are checked claim by claim against primary sources before they go out.