Five Questions Before You Let an AI Agent Buy for You

AI shopping agents may be the most convenient innovation of this decade. You type a wish, and minutes later you have comparison, recommendation, order — all in one conversation.…

AI shopping agents may be the most convenient innovation of this decade. You type a wish, and minutes later you have comparison, recommendation, order — all in one conversation. Great when it works. Problematic when it doesn't. Not every agent is the same. Some are open, transparent, on your side. Others are closed tunnels that use you as a data supplier. The five questions below help you see the difference — before you let an agent buy for you the first time. Question 1 — Where Does My Payment Method Go? The most important question. There are essentially two options: Good answer: Your payment method lives in Apple Pay or Google Pay. The agent gets a tokenized one-time code per purchase, valid only for this merchant. If the agent gets hacked, the token is worthless. Bad answer: The agent wants to store your credit card number directly — in its cloud, in its own wallet, on its servers. This is convenient to set up but risky: a leak at the agent provider means your card is exposed. What you can do: Always ask for the Apple Pay / Google Pay path. If an agent provider says "we securely store your card in our wallet," that is a warning sign. It is only truly safe in the place built for payment cards: Apple, Google, or your bank. Question 2 — Who Sees My Shipping Address? Your shipping address is more sensitive than you might think — it is a puzzle piece of your digital profile. The question is: who sees it? Good answer: The merchant sees your address (must, in order to ship). The agent provider only sees it when strictly necessary — and does not store it permanently if not needed. Bad answer: The agent provider hoards every shipping address of yours centrally, builds a profile ("works in Zurich, lives in Baden, orders to the holiday home on Fridays") and uses it for advertising or resale. What you can do: Check your agent provider's privacy policy for the "shipping addresses" section. If the answer is vague, be cautious. If it clearly says "we only forward it to the merchant," that's better. Question 3 — Can I Limit the Scope? An agent with unlimited purchase authority is like a car without a speed limit. Usually fine, but when something goes wrong, it goes wrong badly. Good answer: You can set at …

Author

Holger von Ellerts

Published

2026-04-26

Topics

Agentic, Privacy, Glossary