Amex introduces a framework to prevent AI agents from making unauthorized purchases
Oct 13, 2026, 6:00 AM · TechCrunch
American Express wants agentic checkout to carry a signed record of what you meant to buy — before the bot can spend — and is pitching that Intent Intelligence Framework as an industry pattern.
Why it matters
Personal AI agents are starting to buy things. Large language models are nondeterministic, which means a bot can misread a request and charge the wrong merchant, brand, or amount. Amex is shipping an Intent Intelligence Framework to capture and authenticate a card member's purchase intent before an agent completes the transaction, and it wants that pattern to become a standard for AI-powered payments.
The framework sits inside Amex's broader Agentic Commerce Experiences (ACE) developer toolkit, launched in April. Amex says it has not yet seen a spike in disputes from agentic commerce; this is proactive infrastructure as the category scales. Company Trendex survey figures shared with TechCrunch: 66% of surveyed U.S. consumers say they are likely to use AI agents to research best price in the next 12 months, and 61% for product or service recommendations.
From the desk
We're bullish on the problem statement. Agentic commerce without a durable intent record is a dispute factory waiting to happen. Amex's approach — Create Intent API, customer authentication and sign-off, an Intent ID plus Proof of Intent Token, then a payment credential that is not the raw card number — pulls authorization earlier than "confirm in the chat right before pay." Hannah Bozian, Amex's VP of Agentic Partnerships and Strategy, put the difference plainly to TechCrunch: pull intent earlier to mitigate risk before it occurs.
The Nike-versus-Adidas example is the right failure mode to design for. Customer asks for white Nike sneakers size 9; agent tries Adidas. If the tokenized constraints can block that at the network, the card member never has to fight a chargeback. That same Intent ID is meant to travel into fraud systems and dispute workflows later — a log of what was authorized, by which agent, and when. Useful AI in payments needs exactly this kind of boring rails work.
I'm watching the autonomy horizon carefully. Bozian notes many agents still ask for consent per purchase, but Amex is designing for a world where reordering paper towels or toilet paper runs with price and size constraints and little brand loyalty. That is where "tech in the loop" stops being optional. The downside if this stays Amex-only: agents and merchants implement five incompatible intent schemas and consumers get a fragmented mess. Amex saying it hopes for an industry standard is the right ambition; delivery depends on partners across the payments ecosystem actually adopting ACE tokens and the intent APIs, which Amex says it is already discussing.
Pro-tech with eyes open means celebrating a card network building guardrails before the horror stories, while asking whether consumers will understand what they signed when an agent later buys something adjacent. Intent capture that varies by model is flexible; it is also a consistency risk. The framework only works if "what I authorized" is legible to humans at dispute time, not just to machines at checkout.
Context
Amex launched ACE in April as a developer toolkit for agentic commerce. The Intent Intelligence Framework adds an earlier authorization and credentialing step to that kit. Bozian is scheduled to discuss it further on Industry Stage at TechCrunch Disrupt 2026 on October 13.
Who feels it
- Card members
- Agentic buys should eventually carry an authenticated intent and a tokenized credential instead of exposing the PAN. Expect clearer dispute trails if something goes wrong — once partners actually wire this in.
- AI agent builders
- Create Intent API plus sign-off and token flow become part of the checkout path. Flexible capture across models is promised; plan for constraint fields (merchant, budget, preferences) as first-class inputs.
- Merchants / PSPs
- Intent ID and Proof of Intent Token are meant to feed fraud and dispute systems. Early ACE partners will shape whether this feels like a standard or an Amex silo.
- Other card networks
- If Amex sets the pattern for agentic authorization, expect competing frameworks or pressure to interoperate. Fragmentation is the failure mode to avoid.
What to watch
- Which agent platforms and merchants announce ACE / Intent Intelligence integrations after Disrupt.
- Whether dispute rates stay flat as agentic volume grows — Amex's proactive thesis on trial.
- How legible Intent IDs are to consumers during a real chargeback or fraud review.
- Any move toward cross-network or open standards versus Amex-only rails.