The next visitor to your store might not be a person. It might be an agent buying on their behalf.

The next visitor to your store might not be a person. It might be an agent buying on their behalf.

OpenAI, Google and the card networks have all shipped ways for AI agents to buy things automatically. Here is what that means for your store before 2027.

By Yannis Spanenburg · · 6 min read

For most of e-commerce history, the buyer at the other end of a transaction was assumed to be a person: someone scrolling, comparing, reading reviews, typing a card number. That assumption is now wrong often enough to matter. OpenAI's ChatGPT can complete a purchase without leaving the chat. Google, Visa, Mastercard and Stripe have all shipped infrastructure for AI agents to shop and pay on a person's behalf. None of this is speculative roadmap talk. It is live, and merchants are already plugged into it.

This is not another SEO shift. It is a new category of visitor showing up at your checkout, one that reads your site differently than a human does and expects a different kind of answer.

The rails are already built

In September 2025, OpenAI launched Instant Checkout inside ChatGPT, built on the Agentic Commerce Protocol it developed with Stripe. Etsy sellers and over a million Shopify merchants were connected on day one, letting a user complete a purchase inside the chat window without visiting the retailer's site at all.

Google answered with its own Agent Payments Protocol, AP2, an open standard for authorising and executing payments initiated by an AI agent, built with dozens of partners spanning card networks, payment processors and crypto rails.

Visa and Mastercard have both released their own agentic commerce frameworks, Visa Intelligent Commerce and Mastercard Agent Pay, so an agent can be issued a verifiable, spend-limited credential rather than handed your customer's raw card number.

Three different players building three overlapping standards is a strong signal, not a fad. Card networks do not rebuild payment infrastructure for something they expect to be temporary.

What actually changes for your business

An AI agent does not browse the way a person does. It does not scroll past a hero banner, admire a photo, or get nudged by a countdown timer. It reads structured data, calls an API or a feed, and needs a clean, unambiguous answer to a narrow question: is this in stock, at what price, with what return terms.

  • Publish a real, machine-readable product feed (Shopify, Google Merchant Center or a plain structured feed) with accurate price, stock and variant data, kept current, not batch-updated once a week.
  • Add Product, Offer and Review schema markup, since agentic checkout tools lean on the same structured data that already powers rich results and AI citations.
  • Write your return, shipping and warranty policy as clear, literal statements an agent can parse, not a paragraph of legal hedging that requires human judgement to interpret.
  • Check whether your platform (Shopify, or your own store) has connected to the Agentic Commerce Protocol or AP2 yet. If you are on Shopify, this may already be closer than you think.
  • Keep a human checkout path that still works well, since not every buyer will route through an agent for years yet.

The trust problem nobody has solved

Agentic payments introduce a fraud question that did not exist before: how does a merchant know the agent is acting with real authorisation from the actual cardholder, and not executing a prompt injected by a malicious page. The card networks' answer, for now, is tokenised, spend-limited, revocable credentials rather than raw card details. That protects the buyer more than it protects you. Expect your payment processor to add new verification steps for agent-initiated orders over the next year, and expect chargeback rules for this category to still be unsettled.

Do not overbuild for a visitor that is not here yet

It is worth being precise about where things actually stand. Agent-initiated purchases are still a small fraction of e-commerce volume. This is closer to where AI Overviews were in 2023: real, growing fast, not yet the majority of traffic. The businesses that will be fine are the ones that treat this as a data-hygiene project they were going to need anyway, not the ones that panic-build a chatbot.

An agent cannot buy from a store it cannot read. Clean data is the only ticket to entry, hype campaigns are not.

Where to start

  1. Audit your product feed for accuracy, since agents will act on stale price or stock data as confidently as fresh data, and the failed order lands on your support queue either way.
  2. Add or fix Product and Offer schema across your top revenue pages.
  3. Ask your platform or agency directly whether ACP, AP2 or Visa and Mastercard's agentic rails are on their 2026 roadmap.
  4. Keep shipping the same fundamentals that already make a site trustworthy to a person: clear pricing, honest stock counts, and a return policy that says what it means.

Frequently asked questions

What is agentic commerce?

Agentic commerce is the general term for AI agents like ChatGPT completing purchases on a person's behalf, using protocols such as OpenAI and Stripe's Agentic Commerce Protocol or Google's Agent Payments Protocol (AP2) to browse, select and pay without the buyer manually checking out.

Do I need to build something new to support AI shopping agents?

Usually not from scratch. Most of the work is data hygiene you already owe your human visitors: accurate product feeds, Product and Offer schema, and a clear return policy. Check whether your existing platform, such as Shopify, already supports the Agentic Commerce Protocol before building anything custom.

Is agentic commerce actually happening yet, or is this hype?

It is live, not speculative. OpenAI launched Instant Checkout with Etsy and over a million Shopify merchants in September 2025, and Google, Visa and Mastercard have each shipped their own agent payment standards. Volume is still small relative to total e-commerce, but the infrastructure is real and shipping.

How do I protect my store from fraud through agentic checkout?

The card networks handle most of this at the protocol level, using tokenised, spend-limited credentials instead of raw card numbers. On your side, expect your payment processor to introduce extra verification for agent-initiated orders, and keep a close eye on chargeback rules for this category since they are still being worked out.

Keep reading

Where this fits