Who Is Liable When an AI Agent Buys the Wrong Thing?

Agentic commerce, where an AI assistant places an order on your behalf rather than just recommending one, moved from demo to feature during 2026. It is genuinely convenient and it raises a question the convenience skips over: when the agent buys the wrong thing, orders ten instead of one, or gets steered into a fraudulent purchase, who is responsible for the bill?

The honest answer in September 2026 is that the law is still catching up, and the practical answer is that responsibility mostly lands on you unless you can show otherwise. Here is what is settled, what is not, and what to do in the meantime.

The Default Is That You Authorized It

When you connect an agent to a payment method and let it transact, you have in effect pre-authorized purchases within whatever scope you granted. From the merchant’s side, a completed order looks like your order. That is the starting position, and it is not favorable to the buyer: the burden tends to fall on the person who enabled the agent to prove that a given purchase was not what they intended.

This is the commerce version of a broader accountability problem. An agent acting under your credentials produces actions attributed to you, and untangling intent after the fact is hard. We covered the general shape in who is accountable when an AI agent acts for you.

The Regulation Is Being Drafted, Not Finished

Regulators have noticed the conflict of interest at the center of agentic commerce: the same platforms building the shopping agents also profit from what the agents buy. In the United States, the Federal Trade Commission and lawmakers have signaled interest in frameworks for agent-mediated purchases, and standards bodies are working on the protocol side. But as of September 2026 this is proposals and consultation, not a settled body of rules you can rely on. The Federal Trade Commission is the place to watch for the consumer-protection side rather than any single vendor’s terms.

Because the rules are unsettled, do not assume a regulator will make you whole after a bad agent purchase. Design as if the protection does not exist yet, because for now it largely does not.

The Manipulation Case Is the Ugly One

A straightforward mistake, the agent bought the wrong size, is annoying but easy to argue. The harder case is manipulation: an agent hijacked by a poisoned page or listing into completing a purchase the attacker chose. Researchers have already demonstrated agents being steered into altering orders through injected instructions. In that case there is a genuine dispute about fault between you, the platform, and the attacker, and no clean precedent for how it resolves. We covered the underlying attack in zero-click agent hijacking: what it means for work.

This is not legal advice, and a real dispute needs a real lawyer. What you can do before it gets there is limit the exposure.

How to Limit Your Exposure

Cap the agent’s spending authority. A per-transaction and per-period limit turns a catastrophic error into a small one. If the agent cannot spend more than a set amount without confirmation, the worst case is bounded.

Prefer confirmation over autonomy for anything that costs money. A draft-the-order-for-approval flow keeps a human decision in front of every purchase. We drew that general line in when to let an agent act and when to only draft.

Keep records of what you authorized. If you ever need to argue a purchase was outside scope, the scope you set and the agent’s action log are your evidence. Write the authorization down in plain language rather than relying on a checkbox you clicked once.

Separate payment methods. An agent connected to a low-limit card or a dedicated account cannot reach the rest of your finances, whatever it is tricked into doing.

How to Write the Authorization Down

Whether for yourself or a team rolling out agentic purchasing, the scope you grant should be a written instruction, not a vague permission.

Before:

The assistant can buy office supplies for us when we need them.

After:

The assistant may place office-supply orders up to 200 dollars per order and 1,000 dollars per month, from our approved vendor list only. Any order above those limits, or from a new vendor, requires my written approval first. All orders are logged and reviewed weekly.

The second version defines the blast radius before anything goes wrong, which is the only time you can.

A Wrivio Context for writing an agent authorization could say:

Rewrite this as a precise authorization statement. Keep every limit, figure, and vendor exactly as written. State clearly what the agent may do without approval and what requires approval first. Do not broaden a specific permission into a general one.

Press Ctrl+Shift+Space, paste your draft, and check the diff. A rewrite that keeps the spending caps exact is doing its job; one that turns “up to 200 dollars” into “for small purchases” has removed the enforceable part.

Common Questions

Who is liable if my AI agent buys the wrong thing?

By default, responsibility tends to fall on the person who connected the agent to a payment method and authorized it to transact, because a completed order looks like your order. Recovering costs usually means proving the purchase was outside the scope you granted.

Are there laws covering AI agent purchases yet?

As of September 2026 the rules are being drafted rather than settled. Regulators including the FTC have signaled interest, but you should not rely on regulation to make you whole after a bad agent purchase.

What happens if an agent is manipulated into a purchase?

That is a genuinely disputed case with no clean precedent, involving you, the platform, and the attacker. Limiting spending authority and keeping records is the practical protection while the law is unsettled.

How do I limit the risk from an agentic purchase?

Set per-transaction and per-period spending caps, require confirmation for anything that costs money, keep a written record of what you authorized, and connect the agent to a low-limit or dedicated payment method.

Is this legal advice?

No. This is general information. A specific dispute or a business rollout of agentic purchasing should be reviewed by a qualified lawyer in your jurisdiction.

Download Wrivio for Windows to keep the writing part of your workflow on a tool that only rewrites text and never touches your accounts.