Editorial illustration for Cloudflare Joins Visa and Mastercard to Develop AI Shopping Security System
AI Shopping Security: Cloudflare Joins Card Giants
Cloudflare teams with Visa, Mastercard, AmEx to create AI shopping authentication
Everyone knows online fraud is a mess. Now the AI shopping bots are coming, and they promise to make it worse. Cloudflare just partnered with Visa, Mastercard, and American Express to try and stop the chaos before it starts.
The goal is a new authentication standard called Web Bot Auth. It’s a technical fix for a simple, expensive problem: how does a merchant know the AI buying shoes is acting for a real person, and not a thief?
Existing security wasn't built for this. Fraud already costs billions. Generative AI tools give scammers a potent new weapon, automating attacks at scale. The payment networks see the next wave of transactions coming, and they don't want it to be a crime spree.
This isn't theoretical. They are building the rules now.
Cloudflare announced collaborations with major payment companies to build an authentication system for AI-driven shopping. The company confirmed on October 15 that it is working with Visa, Mastercard and American Express to deploy Web Bot Auth. This protocol will enable AI agents to securely interact with millions of merchants worldwide.
The initiative aims to define how AI agents will verify identity, process payments, and act on behalf of consumers. The Trusted Agent Protocol, developed by Cloudflare and Visa, will be integrated into Visa’s agentic payment platform, Visa Intelligent Commerce. Mastercard plans to incorporate Web Bot Auth into Mastercard Agent Pay, while American Express will use it within its agentic commerce programme.
These protocols will allow merchants to confirm whether an AI agent is legitimate and determine its intent in transactions. Jorn Lambert, chief product officer at Mastercard, noted that agents could improve shopping experiences, but only if trusted. He said, “We are simplifying agent verification for merchants and ensuring a unified approach to agentic commerce that is scalable, secure, and widely adopted.” Luke Gebb, EVP and head of Amex Digital Labs at American Express, added that trust and accountability remain central to their approach.
The infrastructure is being wired directly into each company's payment platform. Visa gets the Trusted Agent Protocol. Mastercard and AmEx will bake the standard into their own systems.
They are trying to get ahead of a fragmented market. A single, boring technical standard is the point. Without it, every merchant would face a nightmare of incompatible bot verifications.
Of course it hinges on trust. The whole project assumes consumers will hand over significant purchase authority to an AI agent. That’s a big ask.
The technical protocols for verifying intent are one thing. Consumer comfort is another, far less predictable layer.
Cloudflare and the card networks are building the plumbing for a world where software shops for you. Whether anyone actually wants to live in that world is a different question entirely.
Related Reading
Business & Startups Nordic pilot adds Gemini for Education, NotebookLM to boost AI literacy
Business & Startups Kling launches Video O1, all-in-one model with MVL bridge using transformer
Business & Startups DeepSeek Seeks More Capital Weeks After USD 7B Funding Round
From Archives Salesforce expands AWS tie-up, aims for $60 B revenue by 2030, backs agentic enterprises
From Archives Matters.AI Secures ₹55 Cr to Build Self-Learning ‘AI Security Engineer’
Common Questions Answered
What is Web Bot Auth and how will it improve online shopping security?
Web Bot Auth is a new authentication protocol developed by Cloudflare in collaboration with major payment networks like Visa and Mastercard. The system aims to create a secure framework for AI agents to interact with merchants, verifying identity and processing payments with enhanced digital security measures.
How are payment networks like Visa and Mastercard involved in the new AI shopping security system?
Visa, Mastercard, and American Express are actively participating in developing the Trusted Agent Protocol with Cloudflare to define how AI agents will authenticate and execute financial transactions. Their involvement signals a strategic approach to managing the emerging challenges of AI-driven commerce and digital transactions.
What is the primary goal of the Cloudflare and payment network collaboration?
The primary goal is to create a robust authentication system that enables AI agents to securely interact with millions of merchants worldwide. By developing Web Bot Auth, the collaboration seeks to establish standardized protocols for AI-powered shopping that can verify identity, process payments, and mitigate digital fraud risks.
Further Reading
- Cloudflare teams up with Visa, Mastercard and AmEx to lay payment rails for AI agents - The Block
- Visa and Mastercard both launch new agentic AI payments tools - Digital Commerce 360
- Cloudflare, Visa, Mastercard, Amex launch Web Bot Auth for secure agentic commerce - Analytics India Magazine
- Cloudflare Collaborates with Leading Payments Companies to Secure and Enable Agentic Commerce - Cloudflare Press Release
- Cloudflare, Visa, Mastercard, and American Express Unite to Enable Secure Transactions for AI Agents - Tech Africa News
