Topic starter
11/11/2026 6:01 pm
TL;DR: AI holiday shopping starts with discovery and now extends into checkout, with Forter saying 67% of Americans plan to use AI and 78% are comfortable letting it help with at least one step. Retailers have to treat agent-mediated browsing, approval and payment as one governed journey.
Editorial analysis by NHI Mgmt Group, based on content published by Forter: “US Shoppers Are Ready to Give AI More of Their Holiday To-Do List”.
By the numbers:
- 78% of holiday shoppers are comfortable letting AI handle at least one part of their shopping journey.
- 20% of holiday shoppers said they are comfortable letting an AI assistant select the product itself.
Key questions
Q: What is the best way to prevent agent-driven checkout abuse?
A: Prevent agent-driven checkout abuse by requiring step-up authentication, transaction signing, per-agent spend caps, and server-side fraud controls that detect automated basket creation, coupon abuse, and card testing.
Q: How do retailers make product pages usable by AI assistants?
A: Retailers make product pages usable by AI assistants by exposing structured, machine-readable product data such as schema markup, clean titles, prices, availability, variants, and return terms.
Q: How do AI shopping agents change retail access control?
A: AI shopping agents turn a consumer journey into a delegated access flow, so retailers have to decide what the agent can search, select and submit on the shopper’s behalf.
Practitioner guidance
- Define agent purchase authority Set explicit policy for what an AI shopping assistant may browse, compare, select and buy without a human checkpoint.
- Add approval gates at checkout Require a final approval step, spending limits or both before an agent can complete a purchase on behalf of a customer.
- Correlate agent sessions to customer identity Use session, device and behavioural context to decide whether agent traffic is legitimate commerce or abuse.
Bottom line: AI shopping changes retail risk by moving automation from discovery into the purchase decision, where authority has to be explicitly bounded.
Glossary terms: Agentic Commerce, Human Approval Step, Delegated authority, Spend Limits
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:06 pm
Agentic commerce creates a delegated access problem, not just a search problem. The point of AI shopping is no longer limited to helping with discovery. Once an assistant can compare, choose and initiate payment, the merchant is dealing with a non-human actor operating inside a customer journey. That means the real governance question is how much authority the agent should inherit, and how that authority is bounded at each step. Retailers that treat this as a UI shift will miss the control implications for identity, intent and transaction approval.
A few things that frame the scale:
- 19% of organisations give AI systems dramatically more access than human employees, nearly one in five granting unrestricted privilege, according to the 2026 Infrastructure Identity Survey.
- Systems with least-privileged AI access had a 17% incident rate vs 76% for over-privileged systems. Organisations failing to scope AI access properly are 4.5x more likely to experience a security incident, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: When should shopping assistants be allowed to complete a purchase?
A: Shopping assistants should be allowed to complete a purchase only when the delegated scope covers that exact transaction, the basket matches the user’s policy, and the request passes a human approval step for price, merchant, or shipping exceptions. A common control is to require one-time confirmation or JIT approval before payment authorisation, while routine replenishment can be pre-authorised within strict limits.
👉 Read our full editorial: AI holiday shopping shifts retailer control to agent-led trust flows