Your Chatbot Can Now Spend Your Money at 130 Million Merchants. The Fraud Protection You Assume You Have Might Not Cover It.
Visa wired its full network into ChatGPT and Mastercard built tokens that let an AI agent hold and spend a credential — the AI you talk to is becoming the AI that buys. The part shipped without a safeguard: if your agent overspends its scope, the Electronic Fund Transfer Act's 'unauthorized transfer' shield may not apply, and the consumer, not the bank, may eat it. No federal regulator has ruled, so the card networks are writing the consumer-protection rules themselves. Meanwhile the front door is being rebuilt to transact (Google's search box became an agent, -58% click-through, publisher antitrust suits) and the default-agent antitrust fight is next.
Visa just wired its entire network — more than 130 million merchants — into ChatGPT, and Mastercard built a token system that lets an AI agent hold a payment credential and spend against it, scoped to a merchant and a consent policy. The AI you talk to is becoming the AI that buys, autonomously, on your behalf. Here's the part nobody shipped alongside the convenience: if your agent overspends — buys something you didn't intend, or exceeds the scope you thought you'd set — the consumer-protection law you assume covers you may not, and the consumer, not the bank, may eat the loss. The purchase button got handed to an AI before anyone decided who's liable when it presses the wrong one.
Step back and the shape is clear: the consumer AI fight stopped being about model quality and became about who owns the front door — and the front door is turning into an agent that transacts. That reframes the prize (the customer relationship plus a cut of everything the agent buys, a bigger pool than API or subscription revenue) and it exposes two fault lines the coverage skips: who's liable when the agent overspends, and who gets to be the default agent. The first is a consumer-protection problem; the second is an antitrust one. Neither is resolved, and the money is already moving.
Start with liability, because it's the sharpest and least-covered piece. The Electronic Fund Transfer Act shields you from "unauthorized" transfers — the reason a stolen card number isn't your problem past $50. Agent commerce may quietly strip that shield. When you hand credentials to an agent and it initiates a purchase you didn't intend, is that an "unauthorized transfer" the bank eats, or did you "authorize the agent" and therefore own the mistake? Mastercard's Agentic Tokens bind a credential to a specific agent, merchant, and consent scope, and the issuer bears fraud liability only if the token was validly issued and the consent policy was honored — which leaves the scope-overage zone, where the agent technically had permission but exceeded your intent, legally ambiguous. No federal regulator has issued agentic-payment guidance. So the card networks are writing the consumer-protection rules for autonomous AI spending themselves, privately, and they happen to be the parties that collect a toll on every transaction.
Why is this happening now? Because the interface itself is being torn out and rebuilt. Google replaced its search box with an agent — a billion people now use AI Mode — and the cost was brutal for everyone downstream: top-of-page click-through fell about 58%, zero-click searches hit roughly 69%, publisher referrals dropped around a third. The click economy is counter-attacking in court: Penske Media, which owns Rolling Stone, Variety, and The Hollywood Reporter, filed an antitrust suit, and the European Publishers Council filed an EU complaint. The old web's toll booth — a link you click — is collapsing, and the new one is a transaction the agent completes without you ever leaving the chat.
A word on the scoreboard everyone's citing, because it's muddier than it looks. Yes, ChatGPT slipped below 50% market share for the first time — 46.4%, down from 65% in late 2024 — while Gemini sits at 27.7% and Claude quadrupled to 245 million users. But that single number braids together three unrelated stories. Gemini's rise is mostly Google bundling it into Workspace, Android, and Search — passive placement, not user choice. Claude's surge is enterprise and Claude Code, not consumer chat. Only ChatGPT's figure is a real consumer-preference measure. "ChatGPT is losing" is a methodology artifact of counting bundled, enterprise, and consumer usage as one thing. The real contest isn't the share chart; it's who becomes the default agent — which is the second fault line.
And that fight is a rerun the regulators should recognize. Everyone is racing to own the default agent surface: Meta's assistant across 3.2 billion users, Perplexity's Comet browser, Apple's Siri — which, notably, runs on a custom Gemini. The antitrust logic that defined the last era was about defaults: Google paying to be the default search engine. That exact logic is about to repeat one layer up, as default-agent placement in operating systems and browsers. The same case being litigated over search defaults is sitting there, pre-written, waiting at the agent layer — except now the default doesn't just answer your question, it holds your credit card.
So watch three things. The first agent-overspend liability case, and whether any regulator extends EFTA-style protection to agent purchases before the card networks' private rules harden into the de facto standard. The Penske and EU publisher litigation, which is the click economy's attempt to force compensation for interface displacement. And the default-agent antitrust question, the search-default fight reborn one level up. My read: the transaction layer is the real prize of this whole era — whoever owns the default agent owns the customer relationship and a cut of everything it buys — and the industry once again shipped the capability before the safeguard, spending first and assigning liability later. What would change my mind is a regulator putting the liability where the capability is, extending consumer protection to cover an agent that overspends. Until then, the AI you talk to can spend your money, the law you think protects you might not, and the rules are being quietly written by the companies that collect the toll.