Admin · The Payments Corner

Excerpt

Content

Second in my four-post series from the agentic commerce research. This is the part I found most interesting.

Fraud has a familiar shape: someone makes a charge you never approved. Decades of card infrastructure — detection models, chargeback rights, liability rules — exist to catch and unwind exactly that.

Agentic commerce introduces a whole category that doesn't fit the shape. I've been calling it authorized delegation, flawed execution: the agent had permission, and still got the purchase wrong. It bought the wrong item. It paid a worse price than it should have. It ordered ten when you meant one. It renewed a subscription you'd have cancelled. Nothing was stolen. No credential was compromised. No spending limit was breached. The delegation was completely real — the execution just wasn't what the human actually intended.

That's the problem. It's not fraud, and it's not a clean merchant dispute either. Our existing categories assume one of two things: an unauthorized actor, or a legitimate transaction that went bad on the merchant's side. An authorized agent making an honest error against a genuine instruction is neither of those. The permission was valid. The outcome was wrong. And there's no established rail to resolve that gap — no clear code for "the agent did what I told it, badly."

It matters because it won't be rare. Agents operate at machine speed and machine scale, and a small error rate across millions of delegated purchases isn't a rounding error — it's a support queue, a wave of dispute volume, and, underneath both, a trust problem. If people can't rely on delegation, they won't delegate.

The first real sign the industry sees this coming is already visible: American Express has committed to Agent Purchase Protection, a forward commitment aimed squarely at this failure mode. The full terms are still to come, but the direction is the tell — the category is real enough that someone is already building protection around it, before the volume has even arrived.

The question I keep landing on is who owns the resolution. When an authorized agent executes badly, whose problem is it — the cardholder's, the issuer's, the network's, or the agent developer's? Today there's no settled answer. And in payments, the settled answer tends to belong to whoever builds it first: the evidence trail, the consent record, the remedy. Whoever defines how this gets resolved defines the standard everyone else ends up adopting.

The full taxonomy — the other error types, and how they map to existing rails — is in the research, on The Payments Corner.

Audio script

Authorized delegation, flawed execution — that's the theme I want to hone in on again in this series, and it's the one the industry has no clean answer for, at least not yet.

The familiar fraud shape is an unauthorized charge. Decades of chargeback rights, liability rules, and detection models exist to unwind exactly that. Agentic commerce introduces something different: the agent had real permission, and still got the purchase wrong. It bought the wrong item, paid the wrong price, ordered ten when you meant one. Nothing was stolen. No credential was compromised. The delegation was completely legitimate — the execution just wasn't what the human intended.

That gap has no established rail. There's no dispute code for "the agent did what I told it, badly." And because agents operate at machine speed and machine scale, even a small error rate across millions of delegated purchases isn't a rounding error — it's a support queue, a trust problem, and a wave of dispute volume no one has budgeted for.

American Express has already committed to agent purchase protection — a forward signal that the category is real enough to warrant product design before the volume has even arrived. Whoever builds the resolution standard first — the consent record, the evidence trail, the remedy — defines what everyone else ends up adopting.

Metadata

Author

Name

Role

Audio briefing

1:29 (89s)

https://pub-821e1149918048b5b3422c8b2a307c6a.r2.dev/audio/authorized-delegation-flawed-execution-agentic-commerce-2-of-4-1783371989304.mp3

Save changes first if you just edited the script. Generation calls ElevenLabs and writes to R2 — takes ~10–30s for typical scripts.

Hero image

Only rendered when this insight is also the featured one.

Infographic

Caption

Position

Alt text (accessibility)

File (PNG, JPG, WebP, SVG · max 8 MB)

Edits aren't saved until you click Save.