Topic starter
11/07/2026 1:59 pm
TL;DR: Agentic commerce fraud, Signifyd reports, stems from customers granting AI shopping agents permissions that produce clean, fast transactions. Ecommerce controls need sequence-based detection and post-purchase visibility to catch abuse beyond checkout.
Editorial analysis by NHI Mgmt Group, based on content published by Signifyd: “What is Agentic Commerce Fraud? Risk, Tactics and Prevention”.
Key questions
Q: Why do delegated AI shopping flows increase fraud risk even when authentication succeeds?
A: Authentication only proves that access was granted, not that the agent still reflects the customer's intent.
Q: How can merchants tell legitimate agent-led orders from bot takeover?
A: By looking for drift across the full purchase sequence.
Q: What breaks when an AI shopping agent can act without clear purchase limits?
A: Without clear purchase limits, an AI shopping agent can move from convenience to delegated financial risk.
Practitioner guidance
- Treat delegated access as a governed risk surface Map which agent actions are authorised, which are merely tolerated, and which require re-verification before execution across the shopping lifecycle.
- Detect behavioural drift across the full order journey Correlate basket changes, shipping destination changes, spend acceleration, refund timing, and cancellation patterns instead of scoring isolated checkout events.
- Extend fraud controls beyond payment approval Apply monitoring to account updates, shipment rerouting, cancellation requests, returns, and chargebacks so post-purchase abuse is visible.
Bottom line: Agentic commerce fraud exploits customer-granted authority, which means clean-looking orders can be the symptom of a deeper governance problem.
Glossary terms: Delegated Access, Agentic Fraud, Behavioural Drift, Bot-Takeover
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 hours ago by NHI Mgmt Group
11/07/2026 2:08 pm
Delegated access is now the fraud boundary. Agentic commerce shifts the decisive control from checkout behaviour to the authority granted to software acting on a customer's behalf. That means the governance question is not whether an order looks automated, but whether the agent remains inside the customer's intended scope. Merchants that still anchor detection on human-session assumptions will miss the abuse pattern most likely to scale.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
- Systems with least-privileged AI access had a 17% incident rate vs 76% for over-privileged systems. Organisations failing to scope AI access properly are 4.5x more likely to experience a security incident, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Should fraud teams treat returns and refunds as part of identity governance?
A: Yes. In agentic commerce, the identity decision does not end at payment authorisation because the same delegated authority may later be used to cancel, reroute, or refund orders. That makes post-purchase actions part of the governed trust chain, especially where the agent can operate without fresh human confirmation.
👉 Read our full editorial: Agentic commerce fraud exposes the governance gap in delegated access