It’s coming for us all

Vibe Coding the Apocalypse

> Software Engineering in the Age of AI.

AI Agents

Jun 23, 2026

Visa Just Gave ChatGPT a Wallet: Inside the OpenAI–Visa Agentic Commerce Deal

Visa and OpenAI have partnered to let AI agents inside ChatGPT complete real purchases on a user's behalf across any merchant that accepts Visa — a structural fix for the failure mode that killed OpenAI's earlier Instant Checkout, and a bet on payment rails as the neutral layer beneath an emerging protocol war.

What Was Announced

On June 10, 2026, at the Visa Payments Forum in San Francisco, Visa and OpenAI unveiled a strategic partnership that lets AI agents inside ChatGPT and other OpenAI products complete real purchases on a user's behalf — moving agents from recommending products to actually buying them [1][2].

The division of labor is clean. OpenAI supplies the agent interface and decision-making layer; Visa supplies the payment rails — authorization, tokenization, agent identification, and fraud monitoring [2]. Users link a Visa card to ChatGPT, set guardrails such as spending limits and approval thresholds, and the agent can find and buy a product at, in principle, any merchant that accepts Visa [1]. The canonical example, offered by Visa Chief Product and Strategy Officer Jack Forestell, is mundane on purpose: a customer asks for wireless headphones under $150, and the chatbot finds a qualifying pair and buys them [1].

Forestell framed the stakes ambitiously, predicting AI "will transform commerce more profoundly than the internet or mobile technology ever did" [4]. Financial terms of the deal — and the fees merchants or customers would pay — were not disclosed [1].

How It Works Under the Hood

The partnership runs on Visa Intelligent Commerce (VIC), the portfolio that exposes Visa's network through agent-aware APIs [5]. Several components matter. Real card numbers are replaced with secure network tokens bound to a specific agent and use case. Agents prove their identity to merchants via Visa's Trusted Agent Protocol. And spend controls are enforced at the agent layer, not the user's card itself [5].

One explainer describes a three-phase flow: the agent proves its identity to the merchant, requests authorization through a tokenized agent credential under scoped spend controls, and then settles over Visa's fiat rails or a multi-chain stablecoin program — with each phase able to "fail closed" independently [5]. Visa cites the scale being opened up: roughly 4.8 billion payment credentials, 150–175 million-plus merchant locations, and around 300 billion annual transactions [6].

A caveat worth flagging: Visa's own product page notes that Intelligent Commerce is "currently in the process of deployment" and represents the "potential features" of a fully-deployed product [8]. This is partly a statement of intent.

Why It Matters

The most telling thing about this deal is what came before it. OpenAI's previous e-commerce effort, Instant Checkout — built on the Agentic Commerce Protocol it co-developed with Stripe and launched September 29, 2025 with Etsy — was retired in early March 2026 [10][11]. The reasons were structural. Only about a dozen Shopify merchants ever went live despite millions being notionally eligible, and a 4% merchant transaction fee on top of Stripe's roughly 2.9% plus $0.30 proved too expensive — about $7.20 in combined fees on a $100 order [5][10][1].

The Visa approach inverts that model. Rather than OpenAI acting as a constrained checkout layer over a small enrolled merchant set, it leverages Visa's existing acceptance footprint — potentially any merchant that already takes Visa [1]. That sidesteps the cold-start problem that strangled Instant Checkout.

It also signals the broader shift from agents that advise to agents that transact. One analysis estimates ChatGPT fields roughly 2.5 billion prompts a day, with around 2.1% — some 53 million daily queries — touching purchasable products: a vast latent transaction surface [16].

Crucially, Visa is positioning itself as the neutral layer beneath a brewing protocol war. Its Intelligent Commerce Connect is described as "network, protocol, and token vault-agnostic," reportedly supporting four competing standards at once — Visa's own Trusted Agent Protocol, Stripe/Tempo's Machine Payments Protocol, OpenAI's Agentic Commerce Protocol, and Google's agent payments protocol [7][8]. Whichever protocol wins, the money still flows through Visa.

What It Changes for Practitioners

For builders, this delivers a standardized payment primitive. Developers can access secure payment initiation, tokenization, spend controls, and authentication through a single integration, with REST endpoints to enroll a card, initiate or cancel a purchase intent, retrieve payment credentials, and confirm transaction events [9].

For merchants, the reality is a multi-ecosystem one. Brands now navigate at least three camps: OpenAI/Stripe's protocol, Google's, and Amazon's proprietary agents like Rufus and Alexa+, which have joined neither [10]. And guardrails — spending limits, approval thresholds, permission layers — are now a first-class design requirement, "keeping the buyer in command even when an agent is executing the work" [2].

The Open Questions

Not everyone reads Instant Checkout's death as proof the idea fails. Forbes' Jason Goldberg argues it "tells us almost nothing about whether consumers want AI agents to help them buy things," reflecting instead a distracted company building commerce "on the side" [11]. Checkout.com calls the shift "more structural than directional" [12]. But a first-hand test of buying a candle through an agent found it "fine… not meaningfully better" than existing options [13].

Fraud and liability remain genuinely contested. Trax Technologies warns that when an agent transacts and the shopper "never visits a merchant's website," liability is unclear and merchants may bear the cost [17]. Visa's own threat-landscape post concedes fraudsters are "optimizing for agentic search," building fake merchants to deceive shopping agents [18]. Justt.ai reports a panel consensus that fraud rises with agentic commerce [19]. The rails are ready; the rulebook isn't.

Sources

Permalink →