Security firm Thales warns that AI tools that shop and pay for people create new risks for online stores just as holiday sales and fraud both peak.
Thales, a security company, says AI shopping agents are creating new security risks for online retailers. The warning landed just ahead of the holiday season, the time of year when online sales and online fraud both climb. If you run a store or let software buy things for you, it is worth paying attention now.
AI shopping agents are tools that browse, compare and buy items for a shopper. Instead of a person clicking through a site, software does the clicking and sometimes the paying. Thales says this brings new risks for retailers. The material available does not spell out which specific risks Thales has in mind.
Online retailers are the main target of the warning. Their customers are affected too, especially anyone who lets an AI tool shop or pay on their behalf. Shoppers who buy the old way, by hand, are not the focus of this alert.
The details are thin. There is no word here on any attack that has already happened, how many stores are exposed, or how big the losses could be. It is also unclear which AI shopping tools Thales is talking about. Treat this as an early warning, not a report of a crisis.
The alert box above lists the steps. In short, store owners should look at how their site treats automated buyers, and shoppers should set limits on what an AI tool can spend and check every order it places.
Expect more guidance as the holiday rush gets going. Store owners can start by asking their payment and website providers what protection they offer against bot fraud.
Before the holiday rush, stores should check how they handle automated buyers, and shoppers should cap what any AI tool can spend.
Mastercard describes AI tools that could buy things for you, and says trust is the hard part: who gets to spend your money, and under what rules.
Read more: Mastercard outlines how AI assistants could shop and pay for youFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourselfSecurity firm Flashpoint says criminals are trading in refund tricks, gift card fraud and hacked online stores ahead of the holidays. Shop owners should check their refund steps.
Read more: Scammers are targeting store refunds and gift cards before the holidays
