United Blocks Customer Bots, Citing FAA Rules and Rogue Purchases

United Airlines — the world's second-largest carrier, worth $59 billion — on Wednesday blocked unauthorized third-party AI agents and assistants from its digital platforms, citing data leakage, unintended purchases and the risk of violating FAA and DOT regulations.

The airline joins Walmart, Target and Amazon in the growing enterprise backlash against customer bots. United's restrictions apply "directly within our digital platforms and indirectly via travel agencies and aggregators," the company said in a statement, and include "updates to our booking, ticketing and distribution policies."

For product managers, the core issue is simple and structural: bots using a customer's credentials are indistinguishable from the customer. United warned that customers sharing account credentials with personal AI assistants "can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles."

There's a regulatory edge too. "These automated AI actions have the potential to violate FAA and DOT regulations," United said — for example, flight check-in requires human acknowledgment that bags contain no explosives or other banned substances. A bot can't legally make that attestation.

The airline left the door ajar, though: "As personal AI assistants evolve, United will continue to evaluate how these tools interact with our services, with a focus on protecting our customers."

What are other retailers doing?

Walmart took the opposite tack from United. Last month it announced Agent Profiles, a program scheduled to launch this month that gives AI agents dedicated, separable identities inside a customer account.

"Today, when a customer uses an AI agent, it signs in using a customer's account. This means that all purchases — whether made by the customer or the agent — appear together, without any differentiation," Walmart's announcement said. "Customers will be able to see the agent's purchases separately from the rest of their purchases."

Target chose a middle path: recent changes to its terms and conditions block all but a handful of approved agents — Target's own AI Shopping Assistant, OpenAI, Google and Microsoft — with the right to "add, remove, or otherwise modify the list of Approved Agents at any time and in its sole discretion." All other agentic tools are "unauthorized, expressly prohibited," whether they access the site via API calls, automated credential use or other means.

Does blocking kill the agents' value?

Analysts are split. Frank Dickson, principal analyst at Dickson Research, argues the bans relocate rather than destroy value.

"Blocking does not destroy the value of agents. It moves it. Every wall eventually gets a gate. The gate charges admission," Dickson said. "Expect agent access to come back through channels the enterprise controls, on the enterprise's terms. Whoever owns the agent owns the customer relationship. Airlines have spent years pulling customers back from third-party travel sites. They are not going to hand that relationship to someone else's chatbot."

He framed the bans as liability management, not technophobia. "Enterprises do not fear bots. They fear liability that nobody has assigned," Dickson said. "Once a rule says which steps a human must perform, which steps an agent may perform, and how each is recorded, a general counsel can sign off on the deployment. Ambiguity is what keeps bots stuck in pilot."

He also flagged the IT economics: "A sea of agents is a sea of requests. Somebody pays for every one... An airline cannot build a separate door for each of them. Bots that check prices over and over do not buy more seats."

Noah Kenney, principal consultant at Digital 520, said United has no real downside: "United is in a position where there is substantial risk, an uncertain commercial upside, and almost no competitive pressure to accept either."

What has to change?

Kenney's biggest concern is capability scope. "There is a fundamental difference between an agent that is instructed to access only one system and an agent that is technically incapable of accessing anything else," he said. "We shouldn't be giving agents broad capabilities and hoping they exercise restraint."

Justin Greis, CEO of consulting firm Acceligence, expects more restrictions while companies build controls — while warning that "widespread blocking would reduce agents' value by preventing them from completing tasks across services." He also called for customer education: "Actions they authorize through an agent can still create obligations for them, even when they never personally click 'buy,' 'send' or 'confirm.'"

The industry-wide bet now rests on standards. Observers say strictly enforced industry standards around agent identity and behavior — not unilateral bans — are what would persuade enterprises like United to reopen the gate.