Restrictions and Blocking of AI Agents Across Websites
On November 3rd at 14:04, reports emerged about websites implementing blocks on AI agents. These measures stem from concerns over the security of financial transactions, commercial oversight, and technical limitations of protection systems. AI agents have the ability to independently purchase products and book services, posing threats not only to data security but also to the integrity of companies' business operations.
Meta's AI assistant, Muse, operates online but has encountered scrutiny on Walmart's website. Notably, Walmart has not introduced specific tools to block AI assistants. In contrast, Amazon deliberately restricts Muse’s functionality on its platform. During an October report, JPMorgan Chase's CFO Jeremy Barnum highlighted risks linked to AI agents using shared account credentials. He warned:
“Some agents leverage shared credentials and screen-scraping techniques to transfer funds. These practices are inherently risky.”
Customers who share their login details with AI agents might be held liable for unauthorized actions taken by these assistants. Amazon is also engaged in legal action against Perplexity concerning its AI-powered browser, Comet. In August 2026, a U.S. federal appeals court overturned a prior injunction against Perplexity. Amazon features a 'Buy for Me' option enabling purchases from various brands, but eBay’s policies forbid unauthorized agents from making purchases on their platform.
Platform-Specific AI Agent Limitations
Delta Airlines does not support bookings via third-party AI agents and denies intentionally blocking them. Walmart employs verification methods to ensure visitors are human users. Zillow acknowledges that its security system occasionally blocks legitimate agents, while Google notes that shared VPN networks can trigger reCAPTCHA challenges. Using VPNs does not bypass website restrictions against bots.
Since September 15, 2026, Cloudflare has defaulted to allowing search engine crawlers but blocks AI training bots and agents on advertising pages. Website owners using Cloudflare can customize bot access rules. Shopify permits compatible browser agents to modify purchase details and complete orders once confirmed by users. If authentication is required, control reverts to the user.
Overall, the growing restrictions on AI agents across platforms reflect the urgent need to protect users and businesses from risks tied to automated technologies. These measures address rising concerns about potential abuses and threats related to automating processes involving financial information and personal data management.
As concerns over the integrity of financial transactions grow, major financial institutions are taking similar measures to limit AI access to sensitive client information. A recent report highlights how Charles Schwab and JPMorgan Chase are restricting AI agents from accessing client accounts due to security risks. These actions reflect a broader trend among companies to safeguard their operations and customer data amidst rising technological threats.