TL;DR: AI referrals to merchants rose 1,247% year over year in October 2025, while account takeover grew 45% in apparel and 29% of online grocery accounts sat untouched for more than a year, according to Signifyd’s 2026 commerce analysis. The practical shift is clear: merchants now need trust decisions that work for both human shoppers and AI agents acting on their behalf.
Editorial analysis by NHI Mgmt Group, based on content published by Signifyd: “Top 5 Ecommerce Trends that are Reshaping Retail in 2026”.
By the numbers:
- Same-store ecommerce spending grew 6% last year, even with inflation sitting at 2.7% by December.
- The top 10% of earners now account for almost 50% of all consumer spending in the U.S., up from about 33% in the early 1990s.
- ATO fraud grew 45% year over year in apparel, 31% in grocery and 31% in electronics in 2025.
Key questions
Q: What breaks when fraud controls are built only for human browsing sessions?
A: Fraud controls built only for human browsing sessions lose critical context when AI agents act on behalf of customers.
Q: Why do AI agents create more risk around trust and checkout decisions?
A: AI agents compress the shopping journey and often reduce the behavioural evidence merchants rely on to validate intent.
Q: How do you know if account takeover controls are actually working?
A: Look for reduced successful takeovers, lower fraud losses, and preserved good-user throughput at the same time.
Practitioner guidance
- Separate human and agent trust paths Define different trust and risk decisioning for human shoppers and AI-agent-driven sessions, especially where behavioural signals are thinner or absent.
- Harden account lifecycle monitoring Track dormant accounts, new-device logins, email and phone changes, shipping edits and unusual redemption behaviour as part of account takeover defence.
- Improve machine-readable product data Normalize product titles, attributes, pricing, shipping promises and return terms so agentic buyers can interpret offerings without ambiguity.
Bottom line: Ecommerce in 2026 is becoming a dual-audience environment, with human shoppers and AI agents driving different trust and fraud requirements.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
AI agent shopping creates a verification trust gap: ecommerce fraud controls were built to interpret human behaviour, but agent-led journeys remove many of those cues. That does not make the journey untrustworthy by default, but it does make legacy session scoring less reliable. Practitioners should treat delegated shopping as a distinct trust condition with its own controls.
A question worth separating out:
Q: How do security teams make risk scores actionable for both people and AI agents?
A: Risk scores become actionable when they are tied to plain-language explanations and a clear response path. Teams need to know why a score is elevated, what changed, and what action should follow. That makes interventions easier to defend, helps owners understand the issue, and turns scoring into a working governance control.
👉 Read our full editorial: Ecommerce is splitting into human and AI agent buyers in 2026