Amex introduces a framework to prevent AI agents from making unauthorized purchases

Your AI assistant's future purchases will be verified by American Express before they happen.

American Express has launched an "Intent Intelligence Framework" to address potential issues with AI agents making unauthorized purchases. As personal AI agents increasingly handle transactions, the nondeterministic nature of large language models poses a risk of misfires and unintended spending. Amex's framework aims to capture and authenticate customer purchase intent before an AI agent finalizes a transaction. It ensures purchase instructions are maintained throughout the transaction lifecycle, from initiation to post-purchase activities. The framework includes a Create Intent API to record customer instructions and constraints, followed by customer authentication and an Intent ID with a Proof of Intent Token. This token is then used to obtain a secure digital payment credential for the agent, replacing the customer's actual card number. Amex believes this proactive approach will mitigate risks by verifying intent early in the transaction flow, preventing erroneous purchases based on customer-specified parameters, and it hopes the framework will become an industry standard for AI-powered transactions.

This framework's introduction signifies American Express's proactive stance on securing the emerging landscape of agentic commerce. By creating a verifiable intent capture and authentication process, Amex aims to build trust in AI-driven transactions, potentially setting a precedent for how financial institutions approach AI-powered commerce and risk management. The success of this framework could encourage wider adoption of agentic commerce, as both consumers and merchants may feel more confident engaging in these automated purchase scenarios.

The "Intent Intelligence Framework" addresses a critical gap in agentic commerce by moving beyond simple consent to a robust validation of the customer's precise purchasing instructions. This could lead to a more nuanced approach to transaction security, differentiating between simple re-ordering of staples and complex, multi-constraint purchases. As Amex seeks industry-wide adoption, its success will depend on integration with various AI models and partner ecosystems, potentially influencing the development of industry standards for AI-agent authentication and transaction integrity.