OpenAI lets its AI agents pay for things with your Visa, Mastercard or Amex, but never sees the card number

OpenAI on Friday launched ChatGPT Wallet, a payment feature that lets its "dots" AI agents buy things on a user's behalf. It was built with American Express, Mastercard and Visa, and starts with ChatGPT Pro subscribers in the US who are over 18, CNBC reported.

How a purchase works

According to OpenAI, a user adds a card once. Before each purchase the user reviews the items, total and card, then approves with a security check such as Face ID or a fingerprint. The card network then issues a payment token: a substitute card number, security code and expiration date specific to that transaction. The agent and the business never receive the real card details.

OpenAI says users keep the card's rewards and its protections for eligible disputes, such as a defective item. CNBC reports OpenAI is not taking a cut of transactions at launch, and that the rollout is deliberately limited. Amex's Luke Gebb told CNBC the company wants to "start it in a contained environment."

OpenAI also says it expects users to eventually delegate purchases within set limits, such as spending caps, categories or time periods. That is a stated plan, not a feature available today.

The part for merchants

OpenAI is blunt that the burden sits with sellers. To accept a payment from ChatGPT Wallet, it says, websites must make sure agents are not inadvertently blocked, and payment and risk systems must recognize legitimate agent purchases. Some sites "may unintentionally block" them. It published a Commerce Partner Playbook with guidance.

The big platforms are not uniformly welcoming. CNBC notes United Airlines said Wednesday it will block agents from booking tickets, and Amazon prevents agents from buying on its platform.

For a small online seller the practical issue is mundane. Many shops run bot protection, fraud filters and checkout rules built to stop automated traffic. A customer whose agent is turned away does not file a complaint; the sale just does not happen. Our directory counts 112,779 independent retail businesses in the US. Any of them that sell online will eventually have to decide how to treat a legitimate buyer that is a piece of software.

112,779 independent retail stores are listed on CheckThisBiz, a directory of 7,704,724 independent US businesses, including 14,307 in CA, 9,799 in TX, 9,064 in NY. Chains and franchises are excluded from that count, so these are the owner-operated businesses that actually apply for funding.

What is not yet known

Neither OpenAI nor CNBC gives purchase volumes, merchant counts or a date for wider availability. Pro is a paid tier, so the first users are a small slice of the 1.2 billion weekly ChatGPT users OpenAI cites. Fees, chargeback handling between merchants and the networks, and how risk systems will score token payments from agents are all open questions the release does not answer. OpenAI previously launched an Instant Checkout feature and moved away from it, CNBC notes, so the track record here is mixed.

What owners can do now

• Ask your payment processor or e-commerce platform whether it supports network-tokenized payments and has a stance on agent traffic.
• Check whether your bot protection would block a legitimate shopping agent, and what your fraud tool does with a first-time buyer on a token.
• Read OpenAI's Commerce Partner Playbook before changing anything. Doing nothing yet is reasonable if you sell mostly in person or by phone.

Sources: OpenAI; CNBC; Reuters and Quartz also reported the launch. Business counts from CheckThisBiz. This is market information, not investment advice.