American Express has introduced a new framework to authenticate payments made by AI agents, aiming to reduce errors and unauthorized transactions in autonomous shopping. This move, part of the company's broader "Agentic Commerce" strategy, focuses on replacing card numbers with secure tokens. While it aims to build trust in AI-driven retail, the company continues to operate under high regulatory scrutiny following recent compliance penalties.
American Express is moving to address the risks associated with "Agentic Commerce," where artificial intelligence bots shop and make purchases on behalf of consumers. As AI becomes more capable of tasks like price discovery and product ordering, the potential for unintended purchases or system errors has increased. To manage this, the company has launched the "Intent Intelligence Framework," a security layer designed to verify that a transaction aligns with the user's actual intent before it is finalized.
How the Security Protocol Works
Instead of providing an AI agent with actual credit card credentials, the framework uses a digital token system. When a user authorizes an AI to perform a purchase, the system generates a unique "Intent ID" and a specific token. This token acts as a temporary credential that is only valid for the authorized purchase. If an AI agent attempts to spend more than the set budget, switch brands, or deviate from the user's original instructions, the framework is designed to block the transaction. This mechanism aims to provide a safety net for users who want the convenience of AI shopping but are concerned about unauthorized spending.
Strategic Shift Toward AI Payments
This framework is a key part of American Express's broader strategy to remain central to payment processing as consumer behavior shifts. In April 2026, the company introduced the "ACE Developer Kit" to provide the technical foundation for these transactions. More recently, on October 6, 2026, the company released its "Amex Business Playbook for Agentic Commerce" to help merchants and partners understand how to integrate these AI-driven payment flows. The company is also proposing an "Amex Agent Purchase Protection" program, which would theoretically cover card members and merchants against errors, though the specific terms and conditions are still being finalized.
Regulatory and Compliance Context
While the company is pushing forward with this technology, it is doing so under significant regulatory observation. American Express recently faced a $350 million penalty from the Office of the Comptroller of the Currency (OCC) related to deficiencies in its anti-money laundering and Bank Secrecy Act compliance programs. For investors and stakeholders, this creates a critical background: any new technology, especially one involving autonomous AI payments, will likely be scrutinized to ensure it meets strict compliance standards. The ability of the company to integrate these AI systems without creating new regulatory or operational gaps will be a primary focus for observers.
Looking Ahead
The framework remains in the developmental and socializing phase, meaning it is not yet a fully operational product with set industry standards. The success of this initiative will depend on how widely merchants and AI developers adopt these specific protocols. For the company, the next step involves finalizing the terms of its protection programs and ensuring that the technology can handle complex, multi-step shopping tasks reliably. Investors will be watching for updates on the rollout and whether the company can successfully scale this without adding to its existing compliance challenges.