Topic starter
11/07/2026 1:53 pm
TL;DR: Account takeover rose 45% in apparel, and 29% of online grocery accounts sat untouched for more than a year, according to Signifyd's 2026 commerce analysis. Account lifecycle controls need to account for dormant profiles and takeover patterns that differ by vertical.
Editorial analysis by NHI Mgmt Group, based on content published by Signifyd: “Top 5 Ecommerce Trends that are Reshaping Retail in 2026”.
By the numbers:
- Same-store ecommerce spending grew 6% last year, even with inflation sitting at 2.7% by December.
- The top 10% of earners now account for almost 50% of all consumer spending in the U.S., up from about 33% in the early 1990s.
- ATO fraud grew 45% year over year in apparel, 31% in grocery and 31% in electronics in 2025.
Key questions
Q: Why do AI agents create more risk around trust and checkout decisions?
A: AI agents compress the shopping journey and often reduce the behavioural evidence merchants rely on to validate intent.
Q: How do you know if account takeover controls are actually working?
A: Look for reduced successful takeovers, lower fraud losses, and preserved good-user throughput at the same time.
Q: What breaks when fraud controls are built only for human browsing sessions?
A: Fraud controls built only for human browsing sessions lose critical context when AI agents act on behalf of customers.
Practitioner guidance
- Separate human and agent trust paths Define different trust and risk decisioning for human shoppers and AI-agent-driven sessions, especially where behavioural signals are thinner or absent.
- Harden account lifecycle monitoring Track dormant accounts, new-device logins, email and phone changes, shipping edits and unusual redemption behaviour as part of account takeover defence.
- Improve machine-readable product data Normalize product titles, attributes, pricing, shipping promises and return terms so agentic buyers can interpret offerings without ambiguity.
Bottom line: Ecommerce in 2026 is becoming a dual-audience environment, with human shoppers and AI agents driving different trust and fraud requirements.
Glossary terms: Agentic Commerce, Account Takeover, Delegated Intent
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 hours ago by NHI Mgmt Group
11/07/2026 2:04 pm
AI agent shopping creates a verification trust gap: ecommerce fraud controls were built to interpret human behaviour, but agent-led journeys remove many of those cues. That does not make the journey untrustworthy by default, but it does make legacy session scoring less reliable. Practitioners should treat delegated shopping as a distinct trust condition with its own controls.
A question worth separating out:
Q: How do security teams make risk scores actionable for both people and AI agents?
A: Risk scores become actionable when they are tied to plain-language explanations and a clear response path. Teams need to know why a score is elevated, what changed, and what action should follow. That makes interventions easier to defend, helps owners understand the issue, and turns scoring into a working governance control.
👉 Read our full editorial: Ecommerce is splitting into human and AI agent buyers in 2026