Topic starter
11/07/2026 1:59 pm
TL;DR: Agentic commerce fraud emerges when attackers abuse the permissions customers give AI shopping agents, producing clean and fast transactions that bypass patterns traditional ecommerce fraud systems were built to detect, according to Signifyd. The control problem is delegated access, not checkout noise, so merchants need behavioral drift and post-purchase signals to govern agent-led buying.
Editorial analysis by NHI Mgmt Group, based on content published by Signifyd: “What is Agentic Commerce Fraud? Risk, Tactics and Prevention”.
Key questions
Q: What breaks when an AI shopping agent can act without clear purchase limits?
A: Without clear purchase limits, an AI shopping agent can move from convenience to delegated financial risk.
Q: Why do delegated AI shopping flows increase fraud risk even when authentication succeeds?
A: Authentication only proves that access was granted, not that the agent still reflects the customer's intent.
Q: How can merchants tell legitimate agent-led orders from bot takeover?
A: By looking for drift across the full purchase sequence.
Practitioner guidance
- Treat delegated access as a governed risk surface Map which agent actions are authorised, which are merely tolerated, and which require re-verification before execution across the shopping lifecycle.
- Detect behavioural drift across the full order journey Correlate basket changes, shipping destination changes, spend acceleration, refund timing, and cancellation patterns instead of scoring isolated checkout events.
- Extend fraud controls beyond payment approval Apply monitoring to account updates, shipment rerouting, cancellation requests, returns, and chargebacks so post-purchase abuse is visible.
Bottom line: Agentic commerce fraud exploits customer-granted authority, which means clean-looking orders can be the symptom of a deeper governance problem.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 2:08 pm
Delegated access is now the fraud boundary. Agentic commerce shifts the decisive control from checkout behaviour to the authority granted to software acting on a customer's behalf. That means the governance question is not whether an order looks automated, but whether the agent remains inside the customer's intended scope. Merchants that still anchor detection on human-session assumptions will miss the abuse pattern most likely to scale.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
- Systems with least-privileged AI access had a 17% incident rate vs 76% for over-privileged systems. Organisations failing to scope AI access properly are 4.5x more likely to experience a security incident, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Should fraud teams treat returns and refunds as part of identity governance?
A: Yes. In agentic commerce, the identity decision does not end at payment authorisation because the same delegated authority may later be used to cancel, reroute, or refund orders. That makes post-purchase actions part of the governed trust chain, especially where the agent can operate without fresh human confirmation.
👉 Read our full editorial: Agentic commerce fraud exposes the governance gap in delegated access