The Daily Red Flag #011: The AI shopping assistant that shops with your credit card
THE SCAM The AI shopping assistant that shops with your credit card. You tell a chatbot to do your shopping — find the best deal, place the order, done. The newest wave of AI assistants, pushed by companies like OpenAI, Google, Anthropic, and Meta, can now check out on websites on your behalf. On September 22, six of the world's biggest banks — Bank of America, Capital One, NatWest, ING, Commonwealth Bank of Australia, and New Zealand's ASB — warned that the technology is moving faster than the protections around it.
The scam angle is simple. Crooks don't need to fool you anymore; they just need to fool your shopping bot. A fake storefront built to trick an AI agent can get your bot to type your real card number straight into a shady checkout page, or steer you toward a payment method with weaker fraud protections, or quietly buy the wrong item at the wrong price. And when something goes wrong, it's murky who pays: you told a robot to shop, so good luck arguing the charge wasn't authorized. Retailers are already racing to influence what the bots recommend — British retailer John Lewis says searches coming from AI agents jumped from 0.3% to 2.5% of all searches in a year. Your "personal" shopper may be taking tips from the store.
THE RED FLAG The convenience hides the one thing that matters: who is actually holding your card. A chatbot has no gut feeling. It can't squint at a sketchy checkout page, notice the weird URL, or pause because something feels off the way you might. The banks' report put it bluntly: "Consumers are unclear if AI will act in their interests," and customers worry the agent "may buy the wrong thing or spend too much — or even worse, lose their money to scams and fraud."
The second tell is who else is in the loop. Between you and the seller now sits an agent that asks for your card details, stores them, and enters them into websites on its own — and every new middleman is a new place your money can leak. Until the rules for disclosure, liability, and data protection catch up, nobody can tell you who owes you what when an autonomous purchase goes sideways.
THE RULE Let the bot browse — but you press "buy." Approve every purchase yourself on the final checkout screen, check the seller independently exactly like you would any unfamiliar online offer, and pay by credit card, which carries the strongest chargeback protections. Never let an AI shopping agent store your card details or complete a transaction without you seeing the final screen first.
Until the safeguards are built, the fraud filter is you. Convenience is not proof a seller is trustworthy.
Read it on the site: https://erawaeb.com/digest/daily/011-the-ai-shopping-assistant-that-shops-with-your-credit-card/ (Source: Reuters / bank coalition report "Building Trust in Agentic Commerce," September 22, 2026)