Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Does AI or the Online Store Get Access to Your Actual Credit Card Details?
Summary
OpenAI's payment system uses tokenisation to protect users' actual credit card information during AI-assisted shopping. The technology replaces sensitive card details with a unique payment token, which is used to process transactions after users approve a purchase. The token acts as a substitute for the card number, security code and expiry date.
According to the information provided, neither the Dots agent nor the online retailer gets access to the user's actual card details. Since payments are processed through existing card networks, users can continue to receive their regular credit card rewards and retain standard dispute protections for defective or undelivered products. Why Are Online Stores Blocking AI Shoppers?
AI-powered shopping agents are facing challenges from existing anti-bot security systems used by e-commerce platforms. These systems are designed to block automated traffic associated with activities such as ticket scalping and data scraping. Banks may also flag transactions initiated by AI agents as potentially fraudulent.
To address these challenges, OpenAI has released a Commerce Partner Playbook and established technical partnerships with payment gateways such as Stripe, Adyen and Checkout.com. It has also partnered with fraud-screening companies, including Forter, Riskified, Sardine and Signifyd, to help retailers identify verified AI agents. What Is OpenAI's Long-Term Plan?
OpenAI plans to gradually move beyond requiring users to approve every individual purchase. Its longer-term approach involves allowing users to set spending limits, select approved product categories and establish specific time windows for purchases. Is ChatGPT Wallet Available in India?
ChatGPT Wallet is not yet available in India. At launch, access is limited to ChatGPT Pro subscribers aged 18 and above in the United States, using eligible US-issued credit cards. The service currently works only through Dots agents.
OpenAI plans to begin with a limited rollout before expanding availability, allowing it to address reliability issues involving banks and retailers.
KazaSec's take
AI-related security incidents are a genuinely new category, prompt injection, model manipulation, and data leakage through an LLM integration don't map cleanly onto traditional application security testing, and are worth assessing deliberately rather than assuming existing controls already cover them.
Coverage details
We've archived 100 other articles touching the same topic (world) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.