Visa links ChatGPT to payments for cross-merchant AI purchases

Visa announced an integration between its payment network and ChatGPT that lets AI agents select products across merchants and complete payments using single-use Visa tokens without a human completing checkout. The link connects a large language model’s decision process to Visa’s transaction rails so an agent can choose vendors, compare products and settle payments on behalf of a user.

A user pre-authorizes spending parameters inside their ChatGPT account. When the agent finds an item that fits those parameters, it generates a one-time Visa payment token through Visa’s API and sends it to the merchant’s backend. The payment settles like a digital wallet transaction.

The agent uses merchant APIs to scan catalogues, check stock and compare technical specifications, prices and aggregated ratings. Merchants that run headless commerce and accept API payloads can confirm availability and apply the token in milliseconds. Sites that rely on multi-page navigation or mandatory account sign-in can block agent checkouts.

The buyer in these transactions is the algorithm, which evaluates structured product data rather than page layout. Retailers must provide machine-readable product metadata and clear APIs for discovery. Product visibility will depend on feed quality and attribute formatting.

Personalization travels with the user’s LLM profile or device. The agent can store preferences such as sizes, budgets and brand choices and buy according to those constraints. Loyalty pricing and discounts must be encoded in the token flow or the user’s profile if they are to apply automatically.

Measurement shifts from page views and cart abandonment to telemetry that logs API queries from known LLM endpoints and compares product feed structures to explain agent decisions. Traditional A/B testing of site layout will not capture agent behavior.

Authentication is handled through programmatic tokenization. Visa’s network applies fraud detection to incoming token requests. Prompt injection attacks could steer an agent toward malicious vendors or inflated charges. If a delivered product does not meet the original parameters, the agent can initiate returns, request refunds and generate shipping labels; merchants need automated systems to process those requests.

The integration requires enterprises to update how they expose inventory, authenticate payments, measure demand and run customer service when purchases may be initiated and completed by autonomous agents.