Websites are blocking AI agents. Your bot wall is a policy now

AI agents from Meta, OpenAI, xAI and Instinct are hitting closed doors on big websites. The Verge reports that Yelp, Delta, JPMorgan Chase, Charles Schwab and Amazon are all blocking AI agents in some form. Other sites seem to be doing it quietly. For a merchant, the takeaway is simple: your bot settings already decide which shopping agents can buy from you. You should decide that on purpose.

What actually happened

In an October 17 report, The Verge's Emma Roth collected the blocks:

• Yelp told TechCrunch it only allows AI agents that pay for its data licensing program.
• Delta stops agents from booking tickets for users.
• JPMorgan Chase and Charles Schwab confirmed they block agents from customer accounts and cite security.
• Amazon told Meta that Muse's "continued access" violates its site policies. Users also report blocks for Grok, Instinct and OpenAI's Dots.
• Cars.com and Amtrak users say pages that worked for their agents no longer do. Neither company confirmed a block.

Meta went the other way. It partnered with Walmart, Gap, Sephora, Best Buy and others so Muse can shop on their sites, and Shopify has opened its storefronts to agents. Meta's line: "Turning away a personal agent means turning away the customer behind it."

Many blocks are not a decision at all. Chris Canal, CEO of EquiStamp, told The Verge that anti-bot systems built to stop scams and attacks also catch agents. Reddit users report Muse checkout trouble at Walmart, even with the partnership in place.

Why it matters for your business

If you sell online, you are in this fight whether you chose a side or not. Your CDN, your WAF, your CAPTCHA and your checkout fraud rules already treat agent traffic some way. You likely never looked at which way.

Amazon can afford to block agents. It has the traffic and it sells the ad space agents skip. A small store is in a different spot. An agent that arrives with a ready buyer is a sale, and a sale you did nothing to win. But an agent you cannot identify is also how scrapers, card testers and inventory bots get in.

So treat it like any other access policy. Decide which agents you let browse, which can check out, and what proof of identity you need. Log agent traffic as its own segment so you can see what it buys and what it costs. Then test it: send Muse, Dots or another agent through your store and watch where it fails.

Sources: The Verge.