Topic starter
11/07/2026 8:28 pm
TL;DR: Agentic commerce shifts e-commerce from user-driven actions to AI agents that can search, decide, and complete transactions, creating new fraud and privacy risks as these systems operate across channels and on behalf of consumers, according to Sift. The governance problem is no longer just purchase fraud, but delegated action without clear accountability or reliable guardrails.
Editorial analysis by NHI Mgmt Group, based on content published by Sift: “The Next Stage of E-Commerce: What is Agentic Commerce?”.
By the numbers:
- Agentic commerce is expected to be adopted by 33% of enterprises by 2028, according to Gartner research cited by Sift.
Key questions
Q: What breaks when an AI shopping agent can act without clear purchase limits?
A: Without clear purchase limits, an AI shopping agent can move from convenience to delegated financial risk.
Q: Why do AI shopping agents create a fraud risk beyond normal e-commerce bots?
A: AI shopping agents create more risk because they can infer intent, combine signals across channels, and act with delegated authority rather than waiting for each user click.
Q: How can security teams tell if an agent is being manipulated by hidden instructions?
A: Look for unusual tool-use chains, unexpected content traversal, repeated context switches, and actions that do not match the declared task.
Practitioner guidance
- Define delegated agent authority Set explicit limits for what an AI commerce agent may buy, share, or cancel, and require separate approval for sensitive actions such as payment changes or personal-data disclosure.
- Instrument cross-channel fraud signals Correlate listings, reviews, seller identity, payment behaviour, and session context so an agent's decision path can be evaluated across every channel it touches.
- Separate convenience from consent Require clear consent capture and revocation for automated purchases, subscriptions, and renewals, with logs that show which prompt or signal triggered the action.
Bottom line: Agentic commerce shifts the fraud problem from one transaction to an end-to-end decision chain that includes prompts, seller signals, and payment authority.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 8:57 pm
Agentic commerce creates a delegated trust problem, not just a fraud problem. The risk is that systems increasingly act with consumer authority while operating across channels the consumer cannot continuously inspect. Fraud controls therefore have to govern the decision path, the data path, and the transaction path together. Practitioners should treat agent consent, scope, and revocation as first-class controls.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should governance teams do when software can act on a person's behalf?
A: They should treat the software as a delegated identity with defined authority, audit logs, and revocation pathways. That means documenting what it can access, what decisions it can make independently, and which actions require fresh consent. Without that structure, accountability becomes unclear after the transaction is already complete.
👉 Read our full editorial: Agentic commerce raises a new fraud and identity risk model