United Blocks Customer Bots, Joining Walmart, Target and Amazon

United Airlines, the world's second-largest carrier with $59 billion in revenue, blocked third-party AI agents from its digital platforms on Wednesday. Walmart, Target and Amazon had already moved in the same direction.

The airline's stated reasons are concrete: data leakage, unintended purchases, and the risk of violating federal rules. United said customers who share account credentials with personal AI assistants "can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles."

There's a regulatory edge too. The airline warned that "these automated AI actions have the potential to violate FAA and DOT regulations" — for example, check-in requires a human confirming bags contain no banned substances such as explosives.

What does the ban actually cover?

United is restricting access both directly on its own platforms and indirectly through travel agencies and aggregators. In its statement, the airline said it is prohibiting "unauthorized, third-party personal AI agents or assistants" and updating its "booking, ticketing and distribution policies."

The airline noted that banking and retail leaders have taken similar action, and encouraged others to "consider measures that preserve the data and security of their customers and strengthen safety."

It also left the door open. "As personal AI assistants evolve, United will continue to evaluate how these tools interact with our services, with a focus on protecting our customers," the statement said.

Industry observers point to a deeper worry than any single risk: there's no standardization across a fast-growing population of bots from major AI vendors and startups. Supporting every bot customers might use could become an almost infinite drain on IT resources. Strictly enforced industry standards, they said, might persuade some enterprises to soften their resistance.

How are Walmart and Target handling it?

The core technical problem is that bots use the customer's own credentials, so bot activity looks identical to human activity. Analysts say the cleanest fix is giving bots their own credentials.

Walmart moved that way last month. Its Agent Profiles program, scheduled to start this month, lets customers authorize each AI agent with a dedicated profile inside their account. "Customers will be able to see the agent's purchases separately from the rest of their purchases," Walmart's announcement said.

Target took the harder line. Its updated terms allow only a handful of approved agents: Target's own AI Shopping Assistant, OpenAI, Google and Microsoft. Everything else is "unauthorized, expressly prohibited" and may not "access, log into, scrape, query, or otherwise interact with" the site — and Target can change the approved list "at any time and in its sole discretion."

Does blocking kill the value of agents?

Analysts disagree on whether these bans will meaningfully dilute what autonomous agents can do — buying products, booking tickets, running concierge tasks.

Frank Dickson, principal analyst at Dickson Research, doesn't think so. "Blocking does not destroy the value of agents. It moves it. Every wall eventually gets a gate. The gate charges admission," he said. He noted United's own wording bans only unauthorized agents, which leaves room for sanctioned ones. "Whoever owns the agent owns the customer relationship," he said. "Airlines have spent years pulling customers back from third-party travel sites. They are not going to hand that relationship to someone else's chatbot."

Dickson argued the real issue is liability, not fear. "Enterprises do not fear bots. They fear liability that nobody has assigned," he said. "Once a rule says which steps a human must perform, which steps an agent may perform, and how each is recorded, a general counsel can sign off on the deployment. Ambiguity is what keeps bots stuck in pilot." He also flagged the operational math: a sea of agents is a sea of requests, and "somebody pays for every one."

Noah Kenney, principal consultant at Digital 520, sees no downside for United. "There is substantial risk, an uncertain commercial upside, and almost no competitive pressure to accept either," he said, letting the airline wait until legal consequences of bot behavior become predictable.

What should marketers watch next?

Kenney's bigger concern is scope. "One of the biggest mistakes I see in enterprise AI deployments is giving agents access to far more information and systems than their responsibilities actually require," he said. "We shouldn't be giving agents broad capabilities and hoping they exercise restraint."

Justin Greis, CEO of consulting firm Acceligence, expects more companies to restrict bots while they build controls — though "widespread blocking would reduce agents' value by preventing them from completing tasks across services." He also wants customer education: actions authorized through an agent still create obligations, "even when they never personally click 'buy,' 'send' or 'confirm.'"

The practical takeaway for marketing leaders: assume more doors close before they reopen, and plan for a future where agent access returns on the enterprise's terms, through gates it controls.