What happened
On Nov 13, 2026 OpenAI launched ChatGPT Wallet, built with American Express, Mastercard, and Visa: agents can complete purchases without ever seeing the user's actual card details (the network issues a per-transaction payment token), and every purchase requires user approval via a biometric security check, preserving card rewards and dispute protections. It initially works for the 'dots' agents to ChatGPT Pro users in the US, and OpenAI published merchant/developer guidance on not inadvertently blocking agents and on recognizing legitimate agent purchases.
Why it matters
It defines a security model for agentic commerce — tokenized credentials, per-purchase authorization, and agent/bot-detection compatibility — that payment and risk systems and enterprises must interoperate with as autonomous agents begin transacting; it also flags the fraud-filter/bot-detection friction teams will face.
Applicability
Payment, fraud/risk, and e-commerce teams (and any org deploying commercial agents that browse and buy) should review the wallet's tokenization, biometric approval, and merchant bot-detection guidance.