OpenAI’s ChatGPT Wallet, announced Friday, lets dots complete purchases with a network-issued payment token and a security check on every order, without seeing the real card. For commerce leaders, that splits discovery and approval from pricing, service, and dispute rights, and legitimate checkouts can fail where risk systems treat an agent as fraud. Delegated buying is not the default: users still approve each purchase, while feeds and firewalls can sit outside the path an agent can use.
Updated November 13, 2026
Key Takeaways
- Dots pay via a scoped payment token, not the real card.
- Merchants keep pricing, delivery, returns, and service.
- Risk systems can decline legitimate agent purchases as fraud.
- Guidance covers firewalls, product feeds, and ChatGPT profiles.
Who still owns the customer after ChatGPT Wallet?
The Next Web reports that businesses keep pricing, delivery, returns, and customer service, while cardholders keep rewards and protections for eligible disputes, such as a defective item. The dot never sees the real card. American Express, Mastercard, and Visa issue a payment token with its own number, security code, and expiration for that transaction. The merchant receives the shipping address and contact details from the dot.
Users add a card once, review the items, the total, and the card, and approve with Face ID or a fingerprint. CNBC reported that OpenAI is not taking a cut of transactions to start. Chaya Nayak, who leads product for monetization and payments at OpenAI, told CNBC:
Our goal here is to really focus on merchants and our network partners and start building out a really great foundation that’s safe and easy to use.
The working picture is a split record: discovery and approval in ChatGPT, price and service with the brand, and dispute rights with the card.
Which systems will decline legitimate agent checkouts?
The Next Web reports that some websites may block agent purchases without meaning to, and that risk systems can flag a legitimate agent purchase as fraud, which leads to declines or cancellations.
United Airlines said Wednesday that it will block agents from accessing its systems to book tickets, and Amazon prevents agents from purchasing products on its platform, CNBC reported. TechCrunch reports that Amazon aims to steer users to Alexa. The Next Web reports that Schwab and JPMorgan are blocking AI agents from moving customer money. Related coverage looks at how JPMorgan and Amazon block external AI agents.
| Organization | Agent access |
|---|---|
| United Airlines | Will block agents from booking tickets on its systems |
| Amazon | Prevents agent purchases on its platform |
| Schwab and JPMorgan | Blocking agents from moving customer money |
| Walmart | Lets agents shop via profiles with spending limits |
Visa tested 22 models as shoppers this month, and they failed 42.8% of the time, The Next Web reports.
What must commerce leaders expose?
OpenAI said agentic commerce is still in its early days. TechCrunch identifies a Commerce Partner Playbook. The Next Web says that guidance covers:
- Letting ChatGPT agents through firewalls.
- Uploading product feeds.
- Setting up business profiles in ChatGPT.
The Next Web also reports work with fraud firms Forter, Riskified, Sardine, and Signifyd, and payment providers Adyen, Checkout.com, and Stripe. Nayak told CNBC that the ecosystem will need time before the experience is seamless across sites, and that OpenAI is speaking to the networks and the merchants.
What is planned before agents buy on their own?
Users approve every purchase today. Over time, OpenAI expects them to hand purchases to the agent entirely, within limits on spending, categories, or time periods. TechCrunch reports that spending limits and pre-approval by category or period are planned for later. The Next Web reports that Walmart lets agents shop through profiles with their own spending limits. Teams weighing vendor access can use an AI supplier due diligence checklist before an agent is allowed to buy. Nayak told CNBC that who OpenAI is speaking to is the networks and the merchants.
Launch access, TechCrunch and The Next Web report, is U.S. ChatGPT Pro subscribers ages 18 and up with a U.S.-issued Visa, Mastercard, or American Express. Luke Gebb, executive vice president and global head of innovation at American Express, told CNBC:
It just makes sense to watch it, start it in a contained environment, and then keep rolling from there.
CNBC reported more than 1.2 billion weekly active users and nearly 100 million paying users at the end of the third quarter.
Frequently asked questions
Who can use ChatGPT Wallet at launch?
U.S. ChatGPT Pro subscribers ages 18 and up with a U.S.-issued Visa, Mastercard, or American Express, TechCrunch and The Next Web report. Each purchase needs a security check such as Face ID or a fingerprint.
Does the agent see the real card number?
No. The network issues a payment token with its own number, security code, and expiration, and the real card is not shared with the dot or the merchant.
Who handles returns and disputes?
Businesses keep pricing, delivery, returns, and customer service. Cardholders keep rewards and protections for eligible disputes, including a defective item.
Why might a real agent order be declined?
Risk systems can flag a legitimate agent purchase as fraud, which leads to declines or cancellations. Some sites may also block agents without meaning to.
