Visa's safeguards for agent-driven shopping, as AP described them in June, read like a decent control plane: spending caps, approved merchants, required approval steps, fraud monitoring, a human watching closely at first. Each of those draws a line the agent can't cross. What none of them does is tell you whether the thing that happened inside the lines was any good.
The case that nags at me is the one Goodwin's lawyers use. An agent books a flight inside every constraint it was given — right route, under budget, approved seller — with a one-hour connection that requires clearing customs and rechecking bags. Card valid, instruction satisfied, merchant processed cleanly. Ticket's useless.
Then try disputing it. Visa's rules added agentic-transaction requirements in April, and they hold the cardholder responsible as though they'd bought it themselves. Denials of card-absent purchases still route through the dispute condition they always have. Nothing in the published evidence categories asks was this what you meant? Nobody ever needed it to. Somebody typed the card number.
Which is every control system I've ever run. It answers the questions someone thought to ask in advance, and the failures that cost real money turn up somewhere else.
Presumed authorized: Under the federal electronic-payments rule (Regulation E), handing credentials to an agent generally presumes consent — even if the agent exceeds what you intended.
The relabeling incentive: Credit-card buyers can dispute goods "not as agreed." Dislike what the agent picked, and that's the nearest box to check.
Mandate breadth matters: "Buy this item from this seller under $200 by Friday" leaves a very different paper trail than "find me something good."
The black-box problem: If nobody can explain why the agent chose what it chose, payment providers have little to argue with.
Uneven landing: Large merchants can push this risk onto the agent platform by contract. Small ones usually can't.
Not just Visa: Mastercard's May 2026 public chargeback guide shows no agent-specific reason code either.
Already live: Visa reported agent purchases at European merchants in July, with 30-plus issuers involved.