Visa just launched a protocol to secure the AI shopping boom — here’s what it means for merchants

Visa is rolling out a new security framework aimed at addressing a key challenge in AI-powered commerce: distinguishing between legitimate AI shopping assistants and malicious bots that can harm retailers. The company introduced its Trusted Agent Protocol, which serves as the foundation for “agentic commerce” where consumers delegate shopping tasks to AI agents for tasks like product searches, price comparisons, and purchases.

The protocol allows merchants to verify that an AI agent visiting their website is authorized and trustworthy, rather than a bot engaging in fraudulent activities. This is crucial as AI-driven traffic to U.S. retail websites has surged by over 4,700% in the past year, posing a dilemma for merchants whose bot detection systems may inadvertently block legitimate AI shoppers.

Visa’s Global Head of Growth, Rubail Birwadker, highlighted the need for tools that offer transparency into agentic commerce activities to ensure safe participation for merchants. The company’s Trusted Agent Protocol aims to address this need by providing merchants with insights to differentiate between legitimate AI agents and malicious bots.

The protocol operates through a cryptographic handshake process between merchants and approved AI agents. Approved agents receive a unique digital signature key, which they use to create a digital signature containing information on agent intent, consumer recognition, and payment details when visiting a merchant’s website. Merchants then validate these digital signatures against Visa’s registry of approved agents to confirm their trustworthiness.

Visa collaborated with Cloudflare, a web infrastructure and security company, to develop the protocol, recognizing the need for cooperation across the web stack to combat bot verification challenges. The company is also engaging with other technology giants like Google, OpenAI, and Stripe to promote compatibility across emerging AI commerce standards.

While the Trusted Agent Protocol offers enhanced security for AI-driven transactions, questions remain regarding liability and authorization when AI agents make purchases on behalf of consumers. Visa’s gatekeeping role in approving AI agents for the Intelligent Commerce program also raises concerns about fairness and competition in the agentic commerce ecosystem.

Despite these challenges, Visa remains committed to building trust and credibility in agentic commerce through the protocol. The company has invested significantly in technology, including AI and machine learning, to enhance fraud detection and network security. Visa’s strategic partnerships and expansion into new payment territories reflect its ongoing efforts to remain at the forefront of digital commerce.

As the adoption of AI agents in e-commerce continues to grow, the success of Visa’s protocol will depend on how quickly merchants embrace verification systems like the Trusted Agent Protocol. By establishing itself as a key player in AI-powered commerce, Visa aims to shape the future of digital transactions and ensure secure and reliable interactions between consumers, merchants, and AI agents.