# Why Websites Are Blocking AI Shopping Agents Security concerns and commercial interests drive websites to restrict automated AI shopping assistants. - **Source:** [Engadget](https://www.engadget.com) - **Published:** 2026-11-02 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/4c756c2e-f82e-4e4d-ba53-6ee93f4d9e82 ## The AI Agent Friction Personal AI agents like Meta’s Muse aim to automate tasks like grocery shopping and travel booking. However, these tools frequently encounter human-verification prompts like CAPTCHA. While some blocks are intentional, others stem from security systems that struggle to distinguish between helpful user-authorized agents and malicious automated traffic, causing failed task completion. ## Amazon and Retail Restrictions Amazon has taken a direct approach by deliberately blocking shopping agents from its platform. The retailer argues that these tools violate access rules and jeopardize customer data security. This conflict extends to Perplexity’s Comet AI browser, where a federal appeals court vacated a preliminary injunction in August 2026, leaving the dispute unresolved. ## Financial Security Risks JPMorgan Chase CFO Jeremy Barnum highlighted severe risks during an October earnings call regarding AI agents. He noted that some agents utilize shared login credentials and screen scraping for fund transfers, which the bank deems insecure. Consequently, the bank actively blocks these methods to prevent unauthorized actions and potential financial liability for customers. ## Commercial Control Mechanisms Businesses are increasingly asserting control over automated access for commercial reasons. eBay’s user agreement explicitly prohibits unauthorized buy-for-me agents without prior permission. Similarly, Delta has clarified that it lacks integrations for third-party agents to book flights, demonstrating how major service providers maintain strict oversight over their digital storefronts and booking processes. ## Unintended Blocking Consequences Not all agent blocks are deliberate bans. Walmart’s experience with Meta’s Muse shows that verification checks can accidentally interrupt automated sessions. Zillow has also acknowledged that its anti-scraping defenses sometimes flag permitted agents. For users, these technical hurdles manifest as an assistant that simply fails to complete the requested shopping task. ## The VPN Traffic Parallel The current struggle mirrors the routine challenges faced by VPN users. When traffic from shared networks resembles automated activity, it triggers reCAPTCHA challenges. AI agents encounter similar obstacles while navigating websites, even when acting under direct user instructions. Switching to a VPN does not override these site-specific restrictions on automated web access. ## Cloudflare’s New Control Rules Cloudflare has introduced granular controls allowing website owners to distinguish between search crawlers, AI training bots, and user-authorized agents. Since September 15, new domains default to blocking AI agents on ad-supported pages. This allows site owners to permit search indexing while simultaneously restricting automated agents that might interfere with their specific business models. ## Future of Managed Access Platforms like Shopify are exploring more controlled integration methods for browser agents. Their checkout tools allow agents to update details and submit orders only after explicit buyer confirmation, returning control to shoppers for authentication. This approach suggests a potential path forward where security and automation coexist through structured, platform-approved API access protocols. ## Sources covering this story - https://www.engadget.com/2300357/websites-blocking-ai-agents-from-web/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._