ChatGPT’s New Wallet Lets AI Agents Shop for You

Artificial intelligence is shifting rapidly from a conversational novelty into an active participant in digital commerce. OpenAI has officially introduced a new wallet feature inside ChatGPT, empowering autonomous AI agents—referred to as dots—to not only research products and curate recommendations, but to complete real-world purchases on behalf of users. Initially reported by TechCrunch, this rollout marks a major step forward for agentic AI, effectively turning virtual assistants into active buyers.

Currently, the functionality is restricted to a select cohort of U.S. ChatGPT Pro subscribers aged 18 and older who link a U.S.-issued Visa, Mastercard, or American Express card. While consumer-facing AI shopping assistants have seen varying degrees of retail adoption, OpenAI’s entry introduces a secure, tokenized payment architecture designed to bridge the gap between automated suggestions and final checkout without compromising user security.

How the ChatGPT Wallet Works

The core mechanics of the ChatGPT Wallet hinge on a balance between automated efficiency and direct user control. According to OpenAI, the setup process requires subscribers to manually input their eligible payment cards into the new digital wallet just once. Once configured, users can instruct their designated dot to locate specific products, compare options, and tee up a transaction.

Crucially, automation does not mean an absence of oversight. The system is designed so that every single transaction requires explicit human authorization. Before any money changes hands, the user receives a clear summary of the items selected, the total cost, and the specific payment card designated for the charge. Final confirmation requires a biometric security check, such as Apple’s Face ID or a device fingerprint, creating a reliable audit trail for every purchase.

Under the Hood: Security and Payment Tokenization

To understand how agentic commerce functions safely behind the scenes, it helps to look at the underlying software and cryptographic architecture. When a user commands their dot to execute a purchase, the wallet operates via a multi-tiered API bridge that bypasses traditional browser interactions. Rather than simulating manual keystrokes or exposing raw financial data, the system utilizes secure payment tokens—one-time cryptographic substitutes generated dynamically through financial network APIs.

This technical implementation isolates sensitive elements of the transaction. The merchant receives only the exact fulfillment data required to ship physical items, such as the delivery address and contact information, transmitted via secure JSON payloads. Meanwhile, the actual credit or debit card numbers remain entirely obscured from both the merchant’s servers and the underlying large language model running the AI agent. OpenAI enforces strict data boundary protocols to ensure that prompt injection vulnerabilities cannot extract financial credentials from local storage.

Furthermore, this tokenized approach interfaces directly with standard banking fraud detection systems. Because the transaction originates from a verified device using hardware-backed biometric tokens, payment gateways treat the interaction much like a standard Apple Pay or Google Pay remote transaction. Buyers maintain their standard credit card consumer protections, enabling them to dispute faulty or fraudulent transactions through their issuing bank while continuing to accrue normal reward points.

Retail Friction and Industry Reception

The introduction of agentic shopping arrives at a critical juncture for the tech and retail sectors. While platforms like DoorDash and Uber have experienced varied order volumes through early AI integrations, consumer demand for software that handles tedious administrative chores is booming.

However, widespread integration faces logistical friction across the broader digital landscape. Major retail websites are actively establishing barriers to keep autonomous bots off their platforms. Amazon, for instance, has blocked external AI agents from navigating its site, preferring to funnel shoppers toward its proprietary assistant, Alexa. To counter this pushback and encourage cooperation, OpenAI has published a Commerce Partner Playbook offering guidance for retailers wanting to accommodate customers shopping via AI agents. Independent retailers and mid-sized e-commerce platforms are currently evaluating whether supporting autonomous wallet APIs will offset the costs of adapting their checkout pipelines.

Frequently Asked Questions

Who can access the new ChatGPT Wallet feature?

At launch, the feature is available exclusively to a limited group of U.S. ChatGPT Pro subscribers who are 18 years of age or older and possess a U.S.-issued Visa, Mastercard, or American Express card.

Are my actual credit card details shared with merchants or AI agents?

No. The ChatGPT Wallet uses secure payment tokens to handle transactions, meaning your real financial card details are never exposed to the merchant or the AI agent.

How do I authorize a purchase made by my AI agent?

You maintain full control by reviewing the item list, total cost, and payment card on screen, then approving the transaction using a biometric security verification such as Face ID or a fingerprint.

Can I still earn credit card rewards and dispute fraudulent purchases?

Yes. Purchases completed through the ChatGPT Wallet retain standard credit card protections, allowing you to dispute transactions and accumulate your usual credit card reward points.

Sources and further reading

Read the original reporting on TechCrunch.