United Airlines rewrote its contract of carriage on Nov. 11 to ban AI agents from booking, changing or servicing tickets, even when a customer approves every step.
If you sell high-ticket products online, this is a live example of a large seller writing agent rules into the contract its buyer accepts. The rule applies whether or not a human supervises, so the old defense of “I clicked approve” does not work here. Store owners who book travel on points, pay for things with agent tools or take orders through agent checkout all have a decision to make, and I cover it at Ecommerce Paradise because the same fight is coming to your cart.
Below is what the contract says, how banks like Amex got here first, and what I would change this week on your checkout, your payment setup and your own travel booking. I wrote about Amex barring AI agents from cardmember logins on Nov. 10, and United’s move is the same instinct applied to a ticket instead of a login.
Issuers keep tightening agent rules, so give your store its own business bank account instead of mixing it with personal money. Agent-touched spending is easier to cap and audit when it lives in one place. Open a Mercury account for your store →
United Rule 6.J.6 Bans AI Agents From Buying Tickets
United revised its contract of carriage on Nov. 11, 2026. Rule 6.J.6 now lists a new prohibited ticketing practice: “The use of AI Agents to make, modify or service a Ticket, and/or to purchase any service or product,” according to Gary Leff at View from the Wing.
A companion change to Rule 5.H lets United cancel reservations made, modified or serviced by AI agents without notice, per PPC Land. The same report says Rule 1 defines an AI agent as software that acts autonomously or semi-autonomously to search, book or manage United products, “whether or not Passenger or another individual supervises or approves” what it does.
The definition is wide. Ben Schlappig at One Mile at a Time reports that it covers AI assistants built into social media, messaging and search platforms, AI-enabled browsers, standalone agents, and third-party assistants that reach United through a travel agency’s tools. It does not turn on whether a person is watching.
United framed the change as customer protection. According to the airline’s press release as quoted by One Mile at a Time, “Sharing account credentials with personal, third-party, AI assistants can expose sensitive information.” The release also says automated actions “may result in unintended purchases, account changes, or use of MileagePlus miles,” and argues that check-in requires a human to acknowledge that bags do not contain banned substances.
CEO Scott Kirby gave a blunter reason at an event in Chicago. Per View from the Wing, which cites the Wall Street Journal, Kirby said: “To be honest, I don’t want to create another middleman.”
Search is still allowed. View from the Wing, citing the Journal, reports that agents can show United flights and prices, but the customer has to complete the purchase personally. United has not said how it will detect agent bookings, and no source reports enforcement against any tool yet.
The penalties are broad on paper. PPC Land reads Rule 6.K as allowing ticket invalidation, itinerary cancellation, refusal to board, charges up to the full ticket value, miles deletion, elite status revocation and MileagePlus termination. The same report says it is unclear whether AI bookings will face those measures.
On timing, the revision is dated Nov. 11. Tbreak reports that earlier bookings will not be cancelled for this reason alone, while PPC Land says tickets issued before Nov. 11 appear to fall under the earlier contract text. The two reports frame the transition differently, and no source reports a cancellation under the new rule yet.
From Amex Logins to United Tickets: How Agent Bans Spread
United did not invent this. In my Nov. 10 post, citing Doctor of Credit, Amex’s terms tell cardmembers not to share credentials with “any automated tool or AI agent.” The same post notes Chase’s updated agreement takes effect Jan. 1, 2027 and Wells Fargo’s takes effect Nov. 24.
Banks got there in waves. First came JPMorgan, then Citi and BofA, which I covered in Citi and BofA restrict AI agents. Canada followed with TD, RBC and BMO blocking agents from online banking.
The UK came next. HSBC, Barclays and Lloyds restricted agents inside accounts, and that story is in my post on UK banks restricting agents.
United had already been tightening its loyalty program before this. On Oct. 13 I wrote that United dropped flight counts and lifted 1K to 32,000 PQP. The AI ban is the next change to the same program.
The legal precedent points the other way. Amazon sued Perplexity in November 2025 over its Comet shopping browser, and a district court granted Amazon an injunction in March 2026, per eMarketer. The Ninth Circuit later vacated it. The panel found Amazon was unlikely to win its Computer Fraud and Abuse Act claim. Its reasoning, as eMarketer describes it, is that when a user directs the assistant, the user is the one accessing Amazon’s systems. eMarketer notes the underlying case continues and Amazon can seek rehearing, so whether a terms-of-service ban holds against an agent is still open.
Retail sellers split. In October I reported that Walmart opened to AI shopping agents while Amazon blocked them. PPC Land puts Walmart’s limit for outside agents at $50 to $100 per purchase as of Oct. 21 and says Walmart found in-chat checkout converted three times lower than click-out links in March 2026.
Shopify sits in the middle. Forkast reports that Shopify turned on Shop Pay agent checkout by default for eligible US merchants on Sept. 21, with an opt-out in Shopify Admin under Sales channels, then Agentic, then the Meta channel, where Direct checkout can be switched off. Forkast also reports that storefront robots.txt files carry the line “Checkouts are for humans. Do NOT complete checkout, payment, or order placement automatically.” Per the same report, discovery crawlers such as GPTBot and PerplexityBot can still read product pages. I covered the setup in Shopify lets AI agents submit orders on your store.
Not everyone thinks United is right. Leff argues a contract ban is not a technical block and that United cannot easily tell how an Expedia booking was made. He says the federal hazmat rule requires passenger acknowledgment but not manual completion of every booking step, so an assistant could pause for confirmation. He also notes Visa is working on ways for merchants to recognize approved agents without sharing a MileagePlus password, and that American reversed a similar plan to deny mileage earning on travel agency bookings.
United’s side has real arguments too, as Leff lays them out. Someone has to be accountable for a wrong date or an unwanted cancellation. Intermediary agents could eventually charge referral fees or sell placement. Agent bookings are still rare, so the ban costs United little today.
Schlappig raises a narrower worry for travel hackers. He says the definition could sweep in award search tools, though United has not said it will apply it that way.
What United’s AI Ban Means for a High-Ticket Store Owner
My read: the sellers with the most to lose from a middleman are the ones banning agents. United owns the customer relationship and the miles. Amazon owns the ad business. Walmart and Shopify want the reach, so they allow agents and put limits on them.
A high-ticket store sits in the second camp, but with a twist. A $3,000 outdoor kitchen or a $4,500 generator is not an impulse buy. Buyers will research it with an AI assistant, then either call or check out. I would not block the research step. I would control the last step, because that is where the money and the liability sit.
United’s own reasons tell you what that liability looks like. “Unintended purchases” is a polite way to say an agent ordered the wrong model. On a $20 item that is an annoying return. On a high-ticket item, it is a freight claim, a restocking fight and sometimes a dispute.
Here is hypothetical math, not reported data. Say your store does 100 orders a month at a $2,500 average ticket, which is $250,000 in revenue. If 3 of those orders arrive through an agent flow and 1 of the 3 gets disputed as unauthorized, that is $2,500 in contested revenue plus the dispute fee, from one order. The number is small. The point is that you cannot see it coming.
You cannot see it because agent orders arrive without a verified identity. Arkose Labs measured that 97.7% of legitimate AI agent sessions carried no verified ID, per PPC Land’s summary of the Oct. 20 data, and I wrote up the numbers in Arkose: 97.7% of legit AI agent sessions lack verified ID. A real agent and a fraud bot look alike at checkout.
That is a chargeback problem first. If you do not already screen orders, ClearSale is built for fraud and chargeback protection. My guide to chargeback prevention for high-ticket stores covers the habits that cut disputes before they start.
When a dispute does land, you need to know which code you are fighting. Chargeback reason codes for Visa, Mastercard and Amex lays that out in plain terms.
Buyers are not ready to hand over full control either. PPC Land cites HUMAN Security data from June 2026 showing 54% of Americans were comfortable with AI trip planning but only 12% with autonomous booking. A person who researches with an agent and buys with a human click is the safe bet, and it matches how Home Depot is asking agents to behave. I covered that in Home Depot wants AI shopping agents to prove who they are.
Phone sales matter more now, not less. High-ticket closes still happen on the phone, and an agent cannot replace a call that confirms fitment, freight and delivery. A business line with texting, such as Quo, gives you a human checkpoint on large orders. Keep your number visible.
Agents are also not going away. The payment networks are building rails for them, and Mastercard calls one-time agent cards a bridge, which I broke down in Mastercard’s one-time cards for AI agents. Until those rails mature, the safe path is a store that welcomes agent research and routes the purchase through a human or a verified flow.
If you build trips on points, there is a personal angle too. A tool that searches United awards could fall inside the definition. I would book United flights by hand until United clarifies, and I would keep the cards that earn the miles current. My business credit card picks are where I send people who want to earn on business spend.
Getting the store itself agent-ready is a bigger job than a settings change. Product data, feeds, fraud rules, supplier terms and phone workflows all have to line up, and many store owners do not want to wire that up alone. This is the kind of work my team handles in the turnkey done-for-you store build.
Not sure which AI agents to let into your store and which to keep out? We can map it for your niche on a 1-on-1 call. Get the coaching details →
Five Moves to Make This Week on Agents and Checkout
Here are the five things I would do before the end of the week, in this order.
- Check your agent checkout setting. If your store runs on Shopify, open Admin, go to Sales channels, then Agentic, then the Meta channel, and see whether Direct checkout is on. Forkast reports it defaults to on for eligible US merchants. Decide on purpose, and read No Shopify store in 122 passed all 9 AI-agent checks if you want to see where stores fail.
- Add a human checkpoint above a set order value. Pick a number, such as every order over $1,500, and confirm it by phone or text before it ships. Put a live chat such as Tidio on product pages. Then hire a person through OnlineJobs.ph to run the confirmations.
- Tag any order that arrives through an agent or a new buyer with no history, and watch its dispute rate for 30 days. Pair that with fraud screening, and if you want a second set of eyes on the setup, book a discovery call.
- Separate your money and your credentials. Keep the store in its own business bank account, and my Mercury application walkthrough shows how. Pay overseas suppliers and contractors from a multi-currency account like Wise. Do not give an agent your login. If you need help, give a human assistant a named login of their own.
- Book your United flights yourself for now, and test your award search tool before you count on it. Run any trip-planning agent in search mode only until United clarifies how it will enforce Rule 6.J.6.
Agent rules are changing weekly. Bank terms, airline contracts and platform defaults are all being rewritten, so put a recurring 15-minute check on your calendar.
Frequently Asked Questions
Can I still use ChatGPT or another AI to research United flights?
Yes. Per View from the Wing, citing the Wall Street Journal, agents can still show United flights and prices. The customer has to complete the purchase personally.
Can United cancel my ticket if an agent booked it?
Rule 5.H lets United cancel reservations made, modified or serviced by AI agents, per PPC Land. No source reports a cancellation yet, and United has not said how it will detect agent bookings.
Does United’s ban apply to my Shopify store?
No. It binds United’s passengers, not your customers. It does show where sellers are heading, and my Shopify Fall Edition post on fraud rules and AI shopping controls covers the platform side.
Should I block AI agents from my store?
I would not block discovery, because buyers use agents to research big purchases. I would limit the final checkout step on high-value orders. If you are still working out what to sell, start with the high-ticket niches list.
What if an agent buys from my store and the buyer disputes it?
Treat it like any unauthorized-charge dispute and gather your order, delivery and contact records fast. If disputes start to pile up, a second processor matters, and I explain why in your payment processor is a single point of failure.
Where can I get a free list of niches that sell well at high ticket?
Grab the free high-ticket niches list. If you are new to the model, read how high-ticket dropshipping works first.
Agents will reward stores with clean product data, fast support and tight fraud rules. Want my team to scale the store you already have? See the scaling service →
I will keep watching which sellers ban agents and which ones build rails for them. Subscribe to the YouTube channel for daily breakdowns. More breaking news coming through the day.
Related Articles
If this was useful, these go deeper:
- Shopify Opens Its Catalog to Personal AI Agents
- Best Business Bank Accounts for Digital Nomads and Expat Entrepreneurs in 2026
- Meta’s Muse AI Can Now Check Out With Shop Pay
- BofA Tells Customers Not to Give AI Agents Passwords
- Claude Duet Can Buy Supplies via Link and Shop Pay
Trevor Fenner is an ecommerce entrepreneur and world traveler from Seattle, Washington, and the founder of Ecommerce Paradise, a platform focused on helping entrepreneurs build and scale profitable high-ticket ecommerce and dropshipping businesses. With over a decade of hands-on experience, Trevor specializes in high-ticket dropshipping strategy, niche and product selection, supplier recruiting and onboarding, Google & Bing Shopping ads, ecommerce SEO, and systems-driven automation and scaling. Through Ecommerce Paradise, he provides free education via in-depth guides like How to Start High-Ticket Dropshipping, advanced training through the High-Ticket Dropshipping Masterclass, and fully done-for-you turnkey ecommerce services for entrepreneurs who want a faster, more hands-off path to growth. Trevor is known for emphasizing sustainable, real-world ecommerce models over hype-driven tactics, helping store owners build scalable, sellable, and location-independent brands.
He maintains homes in Seattle and Bali, spends most of the year overseas, and usually returns to Seattle for about a month each summer.
