AI Agents Can Pay for Shopping as Refund Rules Remain Unclear

AI agents are moving beyond product recommendations into payments, but Amazon’s new wallet controls do not settle who handles disputes when a purchase fails to meet a buyer’s expectations.

Amazon made Bedrock AgentCore Payments generally available Aug. 18, 2026. The service integrates Coinbase and Stripe Privy wallets and supports payments through the x402 and Machine Payment Protocol standards.

Users must authorize an agent to access a wallet. Each payment session includes a maximum spending amount and an expiration time. Supported wallets can be funded with credit cards or USDC, while agents use short-lived tokens instead of receiving raw wallet credentials.

The system monitors payment activity and enforces the session’s spending limits. Those safeguards can restrict an agent’s authorized spending, but they do not establish whether a product arrived, a service matched its description or a refund is owed.

Payment authorization and payment disputes remain separate issues. A record can show that a user approved a budget and that a payment was signed, but that record does not by itself determine whether the agent followed the buyer’s instructions or whether the merchant must provide a remedy.

Amazon initially focused AgentCore Payments on micropayments for web content, application programming interfaces, Model Context Protocol servers and other agents. It has also described broader applications such as airline bookings, hotel reservations and purchases across merchant platforms.

“There will soon be more AI agents transacting than humans, and they need money that’s built for the internet – programmable, always on, and global,” Brian Foster, Coinbase’s head of infrastructure growth and strategy, said.

The Reserve Bank of Australia’s payment-system review highlighted concerns about liability when an agent exceeds its authority, along with cybersecurity risks and uncertainty over how to identify agent-initiated transactions. Payment participants may lack a consistent way to recognize those transactions.

The review described agentic commerce as being in an early adoption phase, with limited evidence of harm. Stakeholders generally favored monitoring and industry standards over immediate regulation.

Stablecoin payments may not be covered by a universal refund or chargeback process. Responsibility may depend on the merchant, payment provider, card network or platform involved.

The development extends earlier work on AI agents using stablecoins for data and services. AgentCore provides wallet access, spending controls and audit trails, but those features do not create a universal dispute process for every merchant or payment method.

For now, authorization controls do not by themselves resolve disputes over how an agent spent money.