Agent payments and fraud rules: what leaders need to decide
In short
When an agent buys for a customer, three questions land on leadership: who is the merchant of record, which payment routes you accept and how your fraud rules treat a purchase an agent started. Most stores need no new payment method first. They need a written position and a provider who can say what each surface needs.
Merchant of record
The merchant of record owes the customer refunds and service. In most agent checkouts that stays you.
- 8 Jan 2026
Microsoft says merchants stay the merchant of record and own the transaction, the customer data and the relationship.
- Read 4 Nov 2026
OpenAI's commerce docs state that OpenAI is not the merchant of record under the Agentic Commerce Protocol.
Routes and limits
Agent payment routes, such as UCP, ACP, x402 and Stripe Link, are new and none is universal. Some come with limits that protect the buyer.
- 19 Oct 2026
Ora's lab found agents paying through Stripe Link got 92.3 percent of test checkouts right (733 of 794 runs in a cloud browser), across 26 agent setups on the same 33 checkout tasks (AgentReady guide, October 2026).
- 30 Apr 2026
Stripe sets a default limit of 100 US dollars a month per provider for agents buying through Stripe Projects, per Cloudflare's announcement.
Fraud rules
Fraud tools built to stop automation can decline a legitimate agent. Agree a written position first: allowed, allowed within limits, or handed back to the customer. Then set the rules to match. See whether an agent may complete a purchase and agent payments.
Related
- Whether to accept agent paymentsThe decision.
- Whether an agent may complete a purchaseThe related decision.
Sources
- Microsoft Advertising: Copilot Checkout and Brand Agents (Jan 2026) (about.ads.microsoft.com/en/blog/post/january-2026/conversations-that-convert-copilot-checkout-and-brand-agents), read 4 Nov 2026. Vendor claim.
- OpenAI commerce docs: key concepts (developers.openai.com/commerce/guides/key-concepts), read 4 Nov 2026.
- AgentReady.org guide (agentready.org), read 4 Nov 2026. Vendor claim.
- Cloudflare: Agents can now create Cloudflare accounts (30 Apr 2026) (blog.cloudflare.com/agents-stripe-projects), read 4 Nov 2026.
Last reviewed