Shufti Launches a Way for Businesses to Check AI Shopping Agents

Shufti, an identity verification company, has launched a tool that lets a business check an AI agent before it acts. The tool is called Know Your Agent, or KYA. It was announced on Oct. 29, 2026. It is meant for businesses that get orders, account requests or payments from AI programs working for customers.

What changed

AI agents can now open accounts, place orders and move money for their owners. A business on the other end has to decide whether to trust the request. Shufti says a valid access token, which works like a digital key, is not enough. Stolen keys can look real, and fake agents can pose as trusted ones.

KYA checks three things in one flow: who the agent is, whether a real person authorized the action, and whether the agent has permission to do it.

How it works

• Each agent gets a unique credential that expires on a set date and can be revoked.
• Known agents are recognised by name. New ones are assessed by how they behave.
• Every agent gets a trust score to help a business judge risk.
• Each agent is tied to a person or company verified through Shufti's identity checks.

The person behind an agent sets a mandate. It covers what the agent may do, its limits, when it expires and how it can be cancelled. The mandate is enforced on every request, and Shufti says it keeps monitoring for misuse.

When a person steps in

If an agent asks for something outside its mandate, or something above a high-risk threshold, the person who approved it must take a short selfie check. Shufti says its selfie check is iBeta Level 3 certified, a test of resistance to spoofing attempts such as photos or masks. KYA also keeps a record of requests, decisions and revocations for each agent and its owner.

Who it affects

Businesses set their own rules. A bank could let agents view balances and pay approved billers, while new payees need another check. A digital assets platform could let agents trade within a limit and keep withdrawals blocked. A marketplace could allow purchases within a customer's budget. Shufti says the aim is to cut fraud and chargeback disputes, which are cases where a customer contests a payment.

Shufti says it already supports agents such as Meta Muse, GrokBot and OpenAI Dots, within a week of their launch.

What is not known yet

The announcement does not give pricing, customer names or any independent results showing how well KYA stops fraud. Shufti says the product is available now to businesses working with agentic commerce.