ChatGPT Wallet Lets AI Agents Shop for You Without Your Card

OpenAI's AI agents can now pay for things on your behalf. The company launched ChatGPT Wallet on Nov. 13, 2026, a payment feature that lets its "dots" agents complete purchases without ever seeing your real card number, with a Face ID or fingerprint check required for every single order.

The rollout starts small: only ChatGPT Pro subscribers in the US who are 18 or older, with eligible US-issued cards, get access for now. But with 1.2 billion people using ChatGPT each week, according to OpenAI, this is the clearest sign yet that the chatbot wants to move from recommending products to actually buying them.

What is ChatGPT Wallet and how does it work?

ChatGPT Wallet is OpenAI's first step into agentic commerce, the industry term for AI agents that shop and check out for a person instead of just answering questions. It was built with American Express, Mastercard and Visa, and it works only inside conversations with a dot, the always-on agents OpenAI introduced at its developer conference in late September.

The flow has four steps:

• You add a card once.
• You ask your dot to find something to buy.
• Before checkout, you review the items, the total and the selected card.
• You approve with a biometric check such as Face ID or a fingerprint scan, which also creates a record of exactly what you authorized.

After approval, the card network issues a payment token, a stand-in for your real card with its own card number, security code and expiration date. CNBC reports the token is scoped to that specific transaction. The merchant gets paid, but neither the store nor the agent sees your actual card details. You keep your card's rewards and its protections for eligible disputes, such as a defective item.

Who can use ChatGPT Wallet right now?

Requirement	Details
Plan	ChatGPT Pro, inside a dot conversation (not Chat, Work or standalone Codex threads)
Location and age	18 or older, living in the US, with a US billing address
Cards	Eligible US-issued American Express, Chase, Mastercard and Visa cards
Chase rule	Primary cardholder only, not authorized users
Device	Supports biometric approval such as Face ID or Touch ID

Those details come from OpenAI's Help Center page, which also notes that your bank may ask you to verify the card during setup.

Does OpenAI take a cut of purchases?

Not yet. OpenAI told CNBC it is not taking a share of transactions at launch. "Our goal here is to really focus on merchants and our network partners and start building out a really great foundation that's safe and easy to use," said Chaya Nayak, who leads product for monetization and payments at OpenAI. Shoppers still buy directly from the business, which keeps control of pricing, shipping, returns and customer service.

Amex called Wallet its first Agentic Commerce Experiences integration, and its innovation chief Luke Gebb told CNBC the limited rollout is the "right approach to make sure things are working." Mastercard's Sherri Haymond put the stakes plainly: "An agent making a purchase should strengthen, not bypass, the trust built into payments."

What do merchants need to change?

The catch is that many sites are not ready for robot shoppers. OpenAI published a Commerce Partner Playbook alongside the launch, and its advice shows where purchases could fail:

• Let agents in: configure your CDN or firewall to recognize Web Bot Auth, a standard for cryptographically signed bot requests, so ChatGPT agents are not blocked as bad bots.
• Fix product data: claim your business in ChatGPT and upload a product feed with current prices and stock.
• Talk to your fraud tools: tokens work with existing checkouts, but risk systems may still decline legitimate agent orders. OpenAI says it is working with Forter, Riskified, Sardine and Signifyd, plus Adyen, Checkout.com and Stripe.
• Go further: build a plugin or add WebMCP tools so agents can check availability and manage carts.

Not every company wants in. United Airlines said this week it will block AI agents from booking tickets, and Amazon already stops agents from buying on its store.

Our take: is this the shopping feature OpenAI needed?

The security design is the strongest part. Tokenized cards and per-purchase biometrics answer the obvious fear of handing a bot your credit card, and keeping card-network dispute rights in place matters more than any demo. The weak spot is reach. OpenAI already tried this once with Instant Checkout, launched last fall and quickly dropped, before a revamped shopping experience arrived in March. Wallet only works if big merchants stop treating agents as attackers, and the two biggest examples this week, United and Amazon, are going the other way.

OpenAI says the next step is letting users pre-approve purchases within limits such as spending caps, categories or time windows. That is where convenience really starts, and where fraud controls will be tested hardest.

Relative test: if you are a Pro user, try it on a small, low-risk order first and check the authorization record afterward. If you run an online store, the quickest win is checking whether your bot protection is already blocking signed ChatGPT agents. For more on OpenAI's workplace push, see our look at ChatGPT Work.