OpenAI on November 13, 2026 introduced ChatGPT Wallet, a payment tool that lets its AI agents buy from websites on a person's behalf without ever handling that person's actual card details. Every purchase needs the user's approval through a security check such as Face ID or a fingerprint scan, after which the card network issues a stand-in set of card credentials for the payment. The wallet was built with American Express, Mastercard and Visa. It starts small: only ChatGPT Pro subscribers in the United States, aged 18 and older and holding eligible US-issued cards, can use it, and only through dots, OpenAI's always-on agents.

At the same time, the company published a Commerce Partner Playbook for businesses, and its message to retailers is blunt. "To accept payment from ChatGPT Wallet, websites need to ensure agents are not inadvertently blocked, and payment and risk systems need to recognize legitimate purchases made by agents," according to OpenAI. Much of the work of making agent purchases succeed therefore falls on merchants, their security providers and their fraud vendors.

This is OpenAI's second attempt at putting a payment step into ChatGPT. The first, Instant Checkout, launched on September 29, 2025 with Stripe and US Etsy sellers, and it was shut down in March 2026. The new design differs in one basic respect. Instead of asking merchants to plug their catalogs into a checkout that runs inside ChatGPT, it sends an agent to the merchant's own website carrying a credential that fits the card form already there.

In Short

OpenAI has launched ChatGPT Wallet, which lets its dots agents pay for things online with a stand-in card number after you approve each purchase with a check such as Face ID. Retailers and payment companies are affected because agent purchases only go through if websites let the agents in and fraud systems do not reject them, and OpenAI has published a playbook telling businesses how to prepare. For now the wallet is limited to adult ChatGPT Pro subscribers in the US with eligible US cards, so volumes will start small while the rules for agent payments are still being written.

What OpenAI introduced

The announcement, filed under OpenAI's Product category with the subtitle "Building trusted agentic payments with networks, banks, and businesses," makes a large claim for a narrow launch. "It's the first wallet that lets agents pay without access to users' actual card details and that requires a security check for every purchase, while also preserving existing card rewards and protections for eligible disputes," according to OpenAI.

That claim is OpenAI's own, and the post does not say what it was measured against. Individual pieces of the design have appeared elsewhere. In January, Visa described authenticated tokens bound to specific consumers, cards and devices so that card numbers are not shared, with biometric checks when a person is in the loop. Meta's Muse agent, which started buying things inside WhatsApp in September, checks out through Link by Stripe using a one-time card for each transaction and asks for approval before every purchase. OpenAI's "first" rests on the combination of features in its sentence, not on any one of them.

The rationale offered is reach. "1.2B people use ChatGPT each week, and many of them turn to it to research products, compare options, and decide what to buy," the post says. "With ChatGPT Wallet, we're now helping people complete purchases, and giving their agents a way to pay that businesses can accept with their existing systems."

Between that audience and the launch group lies a wide gap. Dots is a Pro feature; OpenAI's pricing page marks it as unavailable on the Free, Go and Plus plans. The narrow start is intentional, according to the company. "We're starting with limited availability to ChatGPT Pro users, so we can learn from real-world use and work with businesses, banks, and payment networks to improve compatibility and reliability," the post says.

Dots itself is about six weeks old. OpenAI introduced the agents on September 29, 2026. When the company listed them for enterprise buyers on AWS Marketplace, it described dots as agents that are always on, learn a user's preferences and follow through on ongoing responsibilities. Wallet gives those agents the ability to spend money, with the user's sign-off each time.

Item What OpenAI states
Product ChatGPT Wallet
Announced November 13, 2026
Where it runs Dots: a user's dot completes purchases on the user's behalf
Eligible users ChatGPT Pro subscribers
Age 18 and older
Country United States
Cards Eligible US-issued cards
Card network partners American Express, Mastercard, Visa
Approval Every purchase, through a security check such as Face ID or a fingerprint scan
Credential passed to the merchant Payment token from the network, with card number, security code and expiration date
Card rewards Kept
Dispute protections Kept for eligible disputes, for example a defective item
Merchant integration Existing checkout flows; browser access needs no plugin or product feed
Fees for users or merchants Not stated
Date for wider availability Not stated

How a purchase works

According to OpenAI, a ChatGPT Wallet purchase passes through seven stages.

  1. Card added once. The user adds a card to ChatGPT Wallet a single time. Later purchases do not require payment details to be entered again.
  2. The agent shops. The user's dot carries out the shopping task and prepares the purchase on the user's behalf.
  3. Review. Before each purchase, the user sees the items, the total and the card selected.
  4. Approval. The user approves with a security check, which OpenAI illustrates with Face ID or a fingerprint scan. "Each approval creates a clear record of the purchase the user authorized the agent to make," according to the post.
  5. Token issued. Once the user approves, the payment network provides a payment token, which OpenAI describes as a substitute for the user's actual card details. It carries a card number, a security code and an expiration date.
  6. Charge. The payment is charged to the card the user selected. ChatGPT Wallet does not share the actual card details with the business or with the agent.
  7. After the sale. The user transacts directly with the business, which keeps control of pricing, fulfillment, returns and customer service. The card's existing rewards apply, as do its protections for eligible disputes.

Stage five explains how OpenAI can promise compatibility without new merchant integrations. A credential made of a card number, a security code and an expiry date can be typed into an ordinary card form, which is why the company can say that "Wallet's payment tokens work with existing checkout flows." At the level of the form, the merchant receives something that looks like a standard card payment. The post does not say whether the credential is a network token in the technical sense the card schemes use, a single-use virtual card number or something else, nor whether one token can be used more than once.

Responsibilities are divided in a single paragraph. "Banks and networks bring their expertise to evaluating transactions," OpenAI wrote. "Users transact directly with businesses, which keep their customer relationships and control over pricing, fulfillment, returns, and customer service." On that description, the business remains the party the shopper buys from, and OpenAI supplies the agent and the wallet.

Full delegation is described as a later step. OpenAI expects that users will eventually be able to hand purchases entirely to their agent by setting "clear parameters," with spending limits, purchase categories and time periods given as examples, and to pre-approve those purchases "with enhanced safeguards that build on today's protections, including biometric checks and clear records of authorization." No date is given. Walmart already offers something close: its Agent Profiles, announced on October 21, let a customer either approve every purchase an agent makes or let agents buy within a spending limit, with $50, $100 or $200 given as examples.

What businesses are asked to do

"Agentic commerce is still in its early days," the post says. "Some sites may unintentionally block purchases through ChatGPT Wallet or other agentic payment products, and we are focused on helping businesses make that transition."

The Commerce Partner Playbook covers making product information available, ensuring agent access, and working with payment and risk providers "to reduce unnecessary declines." According to the announcement, businesses can start with whichever of four areas matter most to their customers.

  1. Product information. A business can claim its listing in ChatGPT and, "once verified," update its details and upload a product feed "with current pricing and availability." That process runs through Business Hub, which OpenAI opened to businesses on November 10.
  2. Agent access. Businesses are told to configure their CDN or firewall "to recognize signed requests using Web Bot Auth" and to confirm that general site security measures "are not inadvertently blocking ChatGPT agents." The guidance adds: "Browser access does not require a plugin or product feed."
  3. Payments and risk. "Wallet's payment tokens work with existing checkout flows, but risk systems may still flag legitimate purchases made by agents, leading to declines or cancellations," according to OpenAI, which suggests businesses ask their providers how those providers recognize such transactions. OpenAI says it is working with fraud prevention partners Forter, Riskified, Sardine and Signifyd, and with payment service providers Adyen, Checkout.com and Stripe, "to help their systems recognize legitimate purchases made by agents."
  4. Deeper integration. A business can build a plugin "to let agents check availability, manage carts, or take other actions" through its existing systems. "Websites can also add WebMCP tools," the post says.

OpenAI's developer site organizes the same material into six guides: submitting product feeds, helping ensure cloud browser access, accepting payments, building a plugin, integrating Sign in with ChatGPT, and claiming a business. The playbook overview describes two routes an agent can take once a customer picks an option. Browser use follows the merchant's existing site flow; a plugin takes more integration work but gives the merchant more control over validation and execution. Sign in with ChatGPT is not mentioned in the announcement.

Partner type Companies named by OpenAI Role described in the announcement
Card networks American Express, Mastercard, Visa Built ChatGPT Wallet with OpenAI; networks provide the payment token
Fraud prevention Forter, Riskified, Sardine, Signifyd Working with OpenAI so their systems recognize legitimate agent purchases
Payment service providers Adyen, Checkout.com, Stripe Working with OpenAI so their systems recognize legitimate agent purchases

Why access is the first hurdle

The access requirement is not a formality. When Blend ran an AI shopping agent against 200 UK and US retailers, bot protection refused the agent at 29 of them on both attempts, a rate of 14.5%, PPC Land reported on November 5. Among large retailers the refusal rate was 20%.

Signed requests are meant to separate a known agent from an anonymous script. OpenAI's agent was already ahead of most of the field on that measure. Arkose Labs found in October that ChatGPT agent signed 78.4% of its sessions with Web Bot Auth, against 2.3% across all legitimate agent sessions it observed. The card networks have backed the same standard: in October 2025, Cloudflare said Visa and Mastercard would build on Web Bot Auth for Visa's Trusted Agent Protocol and Mastercard's Agent Pay, with American Express also planning to use it.

Who pays for all this? Cloudflare argued on November 5 that in nearly every problem AI agents create, the website bears the primary cost, naming OpenAI's dots and Meta's Muse as examples of personal agents. OpenAI's playbook does not dispute that division. It asks businesses to change CDN rules, firewall settings and risk configurations so that an OpenAI product can complete sales on their sites.

WebMCP, the last item on the list, is younger still. Google's Chrome team presented it in February as a way for websites to expose structured tools directly to AI agents instead of having agents read pixels and page elements, and it moved into a public origin trial in Chrome 149 in May. OpenAI now lists it as an option for sites that want its agents to work more reliably.

The decline problem

The third area of the playbook is where costs are most likely to surface. OpenAI's own wording concedes that a correctly tokenized, user-approved purchase can still be "flagged" and end in "declines or cancellations." For a merchant, that is a lost sale; for the user, it is a failed task that the agent was supposed to complete.

Distinguishing good automation from bad has proved hard. HUMAN Security reported in April that agentic traffic grew 7,851% in 2025 and that, on its measures, legitimate and malicious automation looked almost identical. Questions of agent identity are now the subject of standards work: the FIDO Alliance formed working groups on agent authentication and agent-initiated payments on April 28, with Google's AP2 and Mastercard's Verifiable Intent as initial contributions.

The announcement does not explain how a risk system is supposed to tell a ChatGPT Wallet purchase apart from a fraudulent one. No transaction flag, indicator or data field is named. The four fraud vendors and three payment providers are described as working with OpenAI, without detail on what they will see.

The networks behind the wallet

The post quotes American Express; Mastercard and Visa are named as partners.

"Working with OpenAI, we're bringing the trust, security and control of American Express payments into new AI-powered shopping experiences," said Luke Gebb, Executive Vice President and Head of Global Innovation at American Express. "ChatGPT Wallet marks our first American Express Agentic Commerce Experiences integration, enabling eligible Card Members to use their Amex Card while reviewing and approving each purchase. We're excited to learn together from this early phase and build toward bringing these experiences to more Card Members over time."

Each network has spent the year building its own agent programs. Mastercard set out Agent Pay, which uses network tokens and cryptographic tokens to register agents, on January 11, 2026. On March 5, Mastercard and Google introduced Verifiable Intent, a framework for proving what a user authorized an agent to buy. Visa's January design issues a cryptogram only after a purchase is matched to the consumer's original prompt.

The OpenAI post does not say which of these, if any, ChatGPT Wallet uses. Its description of the token, a card number with a security code and an expiry date provided by "the payment network" after approval, is consistent with network tokenization in general but names no specific program. Discover, the fourth major US card network, does not appear in the announcement.

OpenAI's second try at checkout

Instant Checkout was built on the Agentic Commerce Protocol, which OpenAI developed with Stripe. It started with US Etsy sellers, with plans to add more than one million Shopify merchants, and merchants paid a charge on completed purchases at a rate OpenAI did not publish. Within six months the model ran into trouble. In March 2026, Walmart's Daniel Danker said conversion for products sold inside ChatGPT was three times lower than for click-outs to Walmart's website. OpenAI shut down Instant Checkout that month, and by June ChatGPT Ads Manager had taken on product feeds.

Instant Checkout ChatGPT Wallet
Announced September 29, 2025 November 13, 2026
Where the purchase is completed Inside ChatGPT On the merchant's existing website, or through a plugin
Technical basis Agentic Commerce Protocol, built with Stripe Card-network payment tokens; Web Bot Auth for site access; optional plugins and WebMCP tools
First merchants US Etsy sellers No merchant list; browser access needs no plugin or product feed
Merchant fee Charge on completed purchases, rate not published Not stated
Status Shut down in March 2026 Rolling out to US ChatGPT Pro subscribers from November 13, 2026

Sources: PPC Land coverage of Instant Checkout; OpenAI's November 13, 2026 announcement for ChatGPT Wallet.

The two designs answer the Walmart problem in opposite ways. Instant Checkout moved the transaction into ChatGPT, away from the retailer's site. Wallet leaves the transaction on the retailer's site and moves the shopper's agent there instead. Product feeds are back in the commerce picture too: three days before Wallet, Businesses in ChatGPT added self-service feed uploads through Business Hub, alongside Business Agents that advertisers can use as the destination for ChatGPT Ads.

A crowded field, and wary shoppers

OpenAI is not alone. Microsoft announced checkout inside Copilot on January 8, 2026, with PayPal, Shopify and Stripe. Three days later Google released the Universal Commerce Protocol, and in October its Universal Cart began rolling out across US Search and the Gemini app. Meta's Muse buys inside WhatsApp, although Amazon said on September 20 that it had cut Muse off from buying on Amazon.com.

Shoppers remain cautious. A Salesforce survey published on November 12 found that three in four holiday shoppers were not interested in having a personal AI agent make purchases for them; among people who used personal agents, 36% had set up a separate credit card just for the agent and 9% gave it unrestricted access to their financial details. In the UK, an ACI Worldwide and YouGov poll found that 60% of adults would stop using an AI shopping agent after one mistake. ChatGPT Wallet's per-purchase approval, retained card rewards and dispute rights speak to the same worries. Whether they are enough is something the Pro-only launch is meant to test.

Why it matters for marketers

The sale lands on the merchant's site. A Wallet purchase is completed through the business's own checkout, and OpenAI states that businesses keep the customer relationship, pricing, fulfillment, returns and service. That is a different arrangement from Instant Checkout, where the transaction happened inside ChatGPT.

The visitor, though, is software. Microsoft Clarity found that checkout appears in 25% of AI agent sessions against 15% for human sessions, a sign that agents tend to arrive with a purchase already in mind. Sites that block or challenge automation by default risk turning those sessions away, and sites that let them through will see conversions that originate in a ChatGPT conversation they cannot observe.

OpenAI's commerce pieces now connect. Product feeds and business claims run through Business Hub; Business Agents can be promoted with ChatGPT Ads; and ChatGPT Wallet lets agents complete purchases on merchants' sites. For retailers deciding whether to change CDN rules or fraud settings, the immediate audience is small. The 1.2 billion weekly users OpenAI cites are not the people who can use Wallet at launch; Pro subscribers in one country are.

What the announcement does not say

The post gives no fees for users or merchants and no Pro subscription price. It does not list eligible card issuers, say whether the token is single-use, or name a network program such as Agent Pay or Verifiable Intent. It does not explain how risk systems will identify Wallet purchases, who bears the cost when an agent buys the wrong item or a legitimate purchase is declined, or when delegated purchases and availability outside the US will arrive.

Key facts

  • Product: ChatGPT Wallet
  • Source: "Introducing ChatGPT Wallet," OpenAI, published November 13, 2026, Product category; subtitle "Building trusted agentic payments with networks, banks, and businesses"; author OpenAI; audio version 5:00
  • Rollout: began November 13, 2026, inside dots
  • Eligibility: ChatGPT Pro subscribers aged 18 and older in the US with eligible US-issued cards
  • Card network partners: American Express, Mastercard, Visa
  • Fraud prevention partners: Forter, Riskified, Sardine, Signifyd
  • Payment service providers: Adyen, Checkout.com, Stripe
  • Approval: security check on every purchase, with Face ID or a fingerprint scan given as examples
  • Credential: payment token provided by the network after approval, with card number, security code and expiration date
  • Business guidance: Commerce Partner Playbook, https://developers.openai.com/commerce
  • Site access standard named: Web Bot Auth; optional plugins and WebMCP tools
  • American Express statement: Luke Gebb, Executive Vice President and Head of Global Innovation; described as the first American Express Agentic Commerce Experiences integration
  • Related OpenAI pages: dots, https://openai.com/index/introducing-dots/; Businesses in ChatGPT, https://openai.com/index/introducing-businesses-chatgpt/ (November 10, 2026)
  • ChatGPT weekly users cited: 1.2 billion

Timeline

Summary

Who: OpenAI, with American Express, Mastercard and Visa as card network partners, Forter, Riskified, Sardine and Signifyd as fraud prevention partners, and Adyen, Checkout.com and Stripe as payment service providers. Luke Gebb of American Express is quoted. The product affects ChatGPT Pro subscribers, online merchants and their payment and security vendors.

What: ChatGPT Wallet lets OpenAI's dots agents pay for purchases with a card-network payment token, a card number, security code and expiry date that stand in for the user's real card details, after the user approves each purchase with a security check such as Face ID or a fingerprint scan. Alongside it, OpenAI published a Commerce Partner Playbook asking businesses to allow signed agent traffic through Web Bot Auth, keep product feeds current, work with risk providers to avoid declines, and optionally add plugins or WebMCP tools.

When: Announced November 13, 2026, with the rollout beginning the same day. Fuller delegation with spending limits is described as a future step, with no date.

Where: The United States only, for ChatGPT Pro subscribers aged 18 and older with eligible US-issued cards, inside dots. Purchases are completed on merchants' own websites through their existing checkout flows.

Why: OpenAI says 1.2 billion people use ChatGPT each week and many research purchases there; Wallet is meant to let them complete those purchases through agents in a way businesses can accept. It follows the March 2026 shutdown of Instant Checkout, which kept the transaction inside ChatGPT, and places the sale back on the retailer's site, which in turn leaves merchants to make sure their defenses do not block the agents.