Safely manage your Zendesk from the AI assistant you already use, via the Deltastring MCP. Beacon configuration platform →
← Back to news

Amex introduces a framework to prevent AI agents from making unauthorized purchases

American Express has released the Intent Intelligence Framework, a system designed to capture and authenticate customer purchase intent before AI agents complete transactions on their behalf. The framework operates through a multi-step process: a Create Intent API collects the customer's purchase instructions alongside constraints such as budget caps and merchant preferences, the customer then authenticates and approves the captured intent, and a unique Intent ID and Proof of Intent Token are generated. This token allows the agent to obtain a secure digital payment credential rather than accessing the customer's actual card details. Amex positions this as proactive risk management, noting it has not yet observed increased disputes from agentic commerce but recognises that 66% of surveyed US consumers are likely to use AI agents for price research and 61% for product recommendations within the next year.

The framework's significance lies in its approach to a fundamental problem in autonomous agent deployment: the nondeterministic nature of large language models means agents frequently misinterpret instructions or execute unintended actions. By pulling intent capture earlier into the transaction flow, Amex can prevent mismatches before they occur—such as an agent purchasing Adidas shoes when the customer explicitly requested Nike. For CX teams already managing customer interactions through AI-powered systems, this raises an important question: how should your authentication and verification workflows evolve as agents become more autonomous? The framework also addresses future scenarios where agents operate with minimal friction, such as automatically reordering household staples, suggesting that CX professionals should anticipate a shift from explicit consent models to continuous intent verification embedded within transaction processes.

The broader implication for the CX space is that payment and transaction integrity are becoming inseparable from customer experience design. As Automation Anywhere moves to acquire Boost.ai and other vendors expand agentic capabilities, Amex's framework establishes a template for how trust and security must be architected into agent interactions from the ground up. This means CX teams should expect payment processors and platform vendors to increasingly embed compliance and intent verification into their agent toolkits, fundamentally changing how you design customer journeys that involve autonomous transactions. The question becomes whether your current CX infrastructure—whether built on Salesforce, Zendesk, or proprietary systems—can integrate these intent-verification layers without creating friction that undermines the seamless experience customers expect from agentic commerce.