The guide
1. What “AI shopping” means
Word to know: AI
AI stands for artificial intelligence. It means a computer program that can understand questions written in everyday words and answer back in everyday words.
An AI assistant is one of those programs. You type to it (or talk to it), like you would to a helpful clerk. Well-known ones include ChatGPT (made by OpenAI), Gemini (made by Google), and assistants made by Meta (the company behind Facebook).
Kind 1: AI helps you choose
You tell the assistant what you need. It does the looking for you. ChatGPT has a feature called shopping research. According to OpenAI, it asks follow-up questions, like your budget or favorite brands, then gives you a written “buyer's guide” with top picks, comparisons, and links to stores. [3] You still go to the store's website and buy it yourself.
Kind 2: AI helps you buy
Word to know: AI agent
An agent is an AI assistant that can take actions for you, not just give advice. Think of it like a personal shopper who can put items in your cart and check out.
ChatGPT has Instant Checkout for some items. You'll see a Buy button. OpenAI says you confirm your order, shipping, and payment before it goes through. Then the store emails you a confirmation. [4] [5]
New: Walmart
On October 21, 2026, Walmart announced new tools for shopping with AI agents at Walmart.com and Sam's Club. [1] [2]
- Agent Profiles — a separate profile in your Walmart account just for your AI helper. You'll be able to see its purchases separately, set a spending limit, or require your OK on every purchase. Walmart said these would launch “in the next month.”
- Walmart Agent Gateway — a behind-the-scenes connection for companies and developers. It is not something you need to sign up for.
- Rules for AI agents — what agents can and can't do when shopping for you.
2. Is it safe? An honest answer
It can be safe — if you keep your hands on the wheel.
The good news
- You approve by default. Walmart's new rules say customers must approve agent purchases by default. [1]
- The agent doesn't get your card. Walmart says agents don't receive your payment-card information and can't add or change payment methods. [1]
- Returns still work. Walmart says its normal returns process applies, even if an agent doesn't do what you meant. [1]
- Rule-breakers get blocked from Walmart's site, Walmart says. [1]
- Your chats stay private from stores. OpenAI says shopping research chats are not shared with retailers. [3]
- Your card number can stay hidden. PayPal says it uses “tokenization” for AI shopping. [6]
Word to know: Tokenization
Instead of sending your real card number, a service sends a one-time stand-in code. PayPal says this means your actual card or bank details are not shared directly with the AI tool or the store.
The honest cautions
- AI makes mistakes. OpenAI says shopping research “can still make mistakes.” Prices, stock, and discounts change often. [3]
- AI can make things up. PayPal warns AI can “hallucinate” — state something wrong with full confidence, like a wrong size or an old sale price. [6]
- Scammers love anything new. In 2023 the FTC warned about fake ads for AI tools that put harmful software on people's computers. [11]
- Older adults are a target. The FTC's latest report says people 60 and older reported about $3 billion in fraud losses in 2025. A few simple habits block most of these tricks. [12] [13]
“Be ye therefore wise as serpents, and harmless as doves.” — Matthew 10:16 (KJV)
Being careful isn't fear. It's wisdom.
3. Your 10-point safety checklist
You don't have to do them all on day one. But the first three are the big ones. Printable version.
- Always approve every purchase. If a service lets you choose, pick “ask me before every purchase.” Walmart's Agent Profiles will offer that choice. With ChatGPT's Instant Checkout, you tap Buy and confirm yourself. [1] [4]
- Set a spending limit — and start small. Walmart gives examples like $50, $100, or $200. Start at the lowest one. [1]
- Use a credit card, not a debit card. Under the Fair Credit Billing Act you can dispute billing errors, and the FTC says your responsibility for unauthorized credit card charges is limited to $50. With a debit card, protection depends on how fast you report, and the money is already gone from checking meanwhile. [8] [9]
- Think about one separate, low-limit card just for online and AI shopping. Call the number on the back of your card and ask what your bank offers.
- Keep your secrets secret. Never give an AI assistant your passwords, PINs, or one-time codes, or your full Social Security number. Share only what's needed, like your ZIP code instead of your full address. Honest companies won't call, email, or text asking for your Social Security, bank, or card numbers. [6] [7]
- Read the final checkout screen. Confirm the final price, taxes, fees, shipping, size, color, and return policy. [3] [6]
- Check your order emails and statements. With ChatGPT, past orders are under Settings → Orders. Glance over your card statement once a week. [4]
- Use only the real apps. Don't download apps from ads; type the website address yourself. Skip “Ad” or “Sponsored” results. In the app store, the real ChatGPT app is made by OpenAI. [11] [14]
- Turn on two-step sign-in (also called multi-factor authentication, or MFA). After your password, the account asks for a second proof, like a code sent to your phone. PayPal recommends it. [6]
- Slow down and talk to someone you trust. Honest businesses give you time to decide. If anything feels rushed or odd, stop and call a friend, family member, neighbor, or someone from church. [7]
4. Step by step: setting your limits
I only list exact steps where I could confirm them on the company's own pages as of October 27, 2026. Menus and buttons change.
A. Walmart Agent Profiles (coming soon)
- Start in the AI assistant's app. The first time you shop Walmart through it, Walmart creates an Agent Profile for that assistant.
- Connect through Walmart. Sign in to your Walmart account to approve and link the profile.
- Set your controls. Approve every purchase, or set a spending limit ($50, $100, or $200). You can see every agent's purchases and delete a profile any time.
Walmart says it may still ask for approval under your limit, and agents see the same prices you'd see on Walmart.com. [1] [2] Tip: make sure the web address really says walmart.com.
B. ChatGPT Instant Checkout
I could not find a spending-limit setting for ChatGPT. Your protection is that you confirm each order. [4]
- On items that offer it, tap Buy.
- Check the item, price, shipping, and payment carefully.
- Complete the order only if everything is right.
- Watch for the seller's confirmation email.
- To see past orders, open Settings, then Orders.
C. Your credit card (general steps)
Every bank is different. Call the number on the back of your card and ask about: purchase alerts, a lower credit limit, a second card just for online shopping, and locking or freezing the card.
D. PayPal
PayPal says it uses tokenization and that eligible purchases have buyer protection if an item doesn't arrive or isn't as described. I could not confirm exact steps for an AI spending limit in PayPal. [6]
5. Red flags of scams
The FTC lists four signs: they pretend to be someone you know, they say there's a problem or a prize, they pressure you to act now, and they want you to pay in a certain way. [7]
- A surprise message about a problem with your “AI shopping account” or order, with a link. Don't click. Go to the website yourself.
- “Act now!” Any rush, threat, or countdown clock.
- They want a gift card, wire transfer, cryptocurrency, or payment app. The FTC says only scammers ask you to pay with a gift card. [10]
- They ask for your password or one-time code. Real companies won't.
- “Keep this between us.”
- An ad for a “miracle” AI shopping app. Don't download from ads.
- An app that charges a weekly fee for something the real company offers free (“fleeceware”). [14]
- A strange website chat box asking for your card number to “unlock” a deal.
- A price that's too good to be true.
The golden rule: When in doubt, stop. Hang up. Close the app. Open the real website or call the number on the back of your card.