Visa says scammers are building fake stores to fool AI shopping tools this holiday season, so a purchase made for you could send your money to a fraudster.
Visa is warning that fake online stores are being built to fool AI shopping helpers. The payments company says this holiday season will bring a new wave of scams run at an industrial scale. The warning was reported by Inc. on October 21, 2026.
More people now let AI agents do their shopping. An AI agent is software that can search for products, compare prices and sometimes buy for you. Visa says that shift gives scammers a new target. Fake stores are designed to trick the software, not only the person using it.
If you hand a purchase to an AI tool, you may not see the store it picks. A fake store that looks good to the software could take your payment and send nothing. Small online retailers are also at risk, because scammers could copy their names.
People who shop by hand and know the stores they use face less of this particular risk. The warning is aimed at people who rely on AI agents to find sellers and finish purchases.
The alert box above lists the steps. The short version: check that a store is real, limit what an AI agent can spend, and watch your card statements.
The material does not say how many fake stores exist, how much money has been lost, or which AI tools are affected. It also does not explain how the scams trick the software. Those details may come out as the holiday shopping season gets underway.
Do not let an AI tool buy from a store you have not checked, and read your card charges often this holiday season.
Visa tested 22 AI models on realistic shopping tasks. They passed just over half, and often bought the wrong thing anyway.
Read more: Visa tested 22 AI shoppers, and most still make costly mistakesA viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
