Why major publishers are backing Amazon against Perplexity's AI spoofing

A coalition of the most recognizable names in American media today filed a formal legal brief siding with Amazon in its ongoing battle against Perplexity AI, arguing that the Ninth Circuit should uphold a preliminary injunction that prevents Perplexity's Comet AI agent from accessing Amazon's password-protected systems without authorization. The brief, submitted on April 29, 2026, by Digital Content Next (DCN) - the leading trade organization for digital content companies - carries significant weight because it arrives on behalf of publishers whose combined audience reaches 259 million unique visitors and covers 95 percent of the United States online population.

The submission is Case No. 26-1444, filed in the United States Court of Appeals for the Ninth Circuit, representing the appeal by Perplexity AI, Inc. against a district court ruling in favor of Amazon.com Services LLC. The underlying case, No. 3:25-cv-09514, sits before Judge Maxine M. Chesney in the Northern District of California. DCN is represented by Huth Reynolds LLP of Huntington, New York.

What DCN is and why it matters here

Founded in 2001, DCN represents digital content companies ranging from legacy broadcast brands to digital-native outlets. Its current membership reads like a directory of trusted American media: the Associated Press, BBC Studios, Bloomberg, Conde Nast, Dow Jones, the Financial Times, Fox News, The Guardian, Hearst newspapers, Hearst magazines, Hearst television, The Independent, NBCUniversal, News Corp, The New York Times, Paramount, NPR, PBS, Slate, Vox Media, Warner Bros. Discovery, The Washington Post, and WebMD, among others. These are organizations that, according to DCN's brief, invest immense resources in journalism - resources that depend entirely on advertising and subscription revenue to survive.

The fact that DCN is weighing in as an amicus curiae - a friend of the court with no direct financial stake in the outcome - signals how broadly the publisher community views this case as a test with structural consequences that extend well beyond Amazon's shopping platform.

The core dispute: Perplexity's Comet browser and the user-agent spoofing allegation

The dispute began in November 2024, when Amazon first raised concerns about Perplexity's "Buy with Pro" feature, which allowed subscribers to use Amazon Prime accounts through Perplexity-managed systems. Amazon filed its federal lawsuit on November 4, 2025, alleging that Perplexity's Comet browser was operating in a way that impersonated human users. Amazon alleged that Comet transmits the same user-agent string as Google Chrome, making automated AI activity appear indistinguishable from a human customer browsing the store. Amazon's forensic analysis - requiring significant time from software engineers and other skilled employees - eventually isolated Comet's browser fingerprint from ordinary customer traffic.

Amazon told Perplexity's CEO Aravind Srinivas on September 12 and September 29, 2025 that Comet's activities were unauthorized. According to the lawsuit, Srinivas did not deny the conduct. Perplexity made Comet available to the public for free on October 2, 2025 - expanding the scope of the challenged behavior. Amazon sent a formal cease-and-desist letter on October 31, 2025, and filed suit four days later. A district court issued a preliminary injunction in March 2026 blocking Comet's AI assistant from accessing Amazon's password-protected account sections. The court's ruling applied the Computer Fraud and Abuse Act (CFAA) and California's Comprehensive Computer Data Access and Fraud Act (CDAFA). Perplexity filed its appeal brief on April 1, 2026, arguing the district court misapplied a 1984 statute designed to punish computer hackers - not block AI shopping assistants operating on users' own devices.

Why the DCN brief goes further than Amazon's own arguments

DCN's brief does not focus narrowly on Amazon's advertising revenue or its shopping experience. It uses the case as a vehicle to argue something considerably broader: that unregulated AI agent access to protected publisher systems poses a structural threat to the entire business model that funds journalism in the United States. According to DCN's brief, "spoofing" by AI agents injures publishers through three distinct mechanisms - corrupting ad metrics, eroding subscription models, and extracting commercially valuable data used to train large-language models and operate AI-powered tools.

The advertising argument is perhaps the most technically concrete. Advertisers pay for their ads to be seen by humans. Publishers sell ad space based on their measured human audience. But if AI agents access publisher content while disguised as human subscribers, publishers cannot accurately measure how many real humans are actually reading their pages. According to DCN's brief, this is not hypothetical. Digital publisher Salon lost the ad business of a mid-size buyer who was concerned about the alarming rise of general invalid traffic (GIVT) - non-human visits from bots, scrapers, and crawlers.

The scale of the problem is significant. According to a study commissioned by the Association of National Advertisers (ANA), the invalid traffic rate across all media channels stands at 8.5 percent, translating to $63 billion lost annually - a figure expected to grow significantly in 2026 as AI agent deployment increases. DoubleVerify data found that GIVT increased by 86 percent year-over-year in the second half of 2024. For the first time, monthly GIVT volumes surpassed two billion requests. Sixteen percent of GIVT from known-bot impressions in 2024 was associated specifically with AI scrapers.

The Comet AI spoofing mechanism in technical terms

What makes Perplexity's Comet browser distinctive - and legally problematic in Amazon's view - is the specific technical implementation of its AI agent behavior. According to Amazon's complaint, Comet does not use a unique browser identifier. Instead, it transmits the same user-agent string used by Google Chrome. This means that when Comet's AI assistant carries out automated activity inside Amazon's platform, network traffic logs show what appears to be a human customer using a standard Chrome browser. Amazon updated its Business Solutions Agreement effective March 4, 2026, introducing a formal Agent Policy that requires AI agents to identify themselves as automated systems and comply with new access rules.

DCN's brief draws a contrast with Amazon's own "Buy for Me" AI agent, which clearly identifies itself as an AI agent, does not use user login credentials, does not circumvent authentication requirements, and honors websites' crawling instructions. According to DCN, this contrast shows that AI agent transparency is technically feasible - Perplexity simply chose not to implement it.

Perplexity admits in its own brief that Comet takes "snapshots" of webpages and transmits them to Perplexity's servers, which eliminates a publisher's ability to durably remove or correct proprietary content. The DCN brief draws on this admission to argue that the harm is not theoretical: Perplexity can capture, store, and redistribute publisher content independently of whether the publisher subsequently updates or retracts it.

The subscription threat and the advertising competition angle

Beyond the ad metrics distortion, DCN argues that Perplexity's Comet presents a direct threat to subscription revenue. An AI agent operating on a single subscriber's login credentials can, in theory, extract all content to which that subscriber has access. It can then summarize, repackage, strip attribution, and distribute that content for its parent company's profit. According to the brief, this scenario creates a risk that subscribers cancel paid subscriptions - or never subscribe - because the content becomes accessible through Perplexity's AI interface without a separate subscription.

The subscription concern intersects with a commercial reality DCN identifies in its brief: Perplexity is itself an aspiring advertising publisher. According to a TechCrunch report cited in the brief, Perplexity's CEO stated in April 2025 that its browser would track everything users do online to build "hyper personalized" ad profiles. Perplexity launched its Comet browser in July 2025 for $200-per-month Max subscribers. The browser integrates Perplexity's AI search engine as its default and includes an AI assistant capable of automated browsing tasks. In that model, Perplexity's Comet AI agent could deliver publisher content inside Perplexity's own browser environment, strip the publisher's advertising, and replace it with Perplexity's own ads - using content obtained from the very publisher it is now competing against.

A Snap deal worth $400 million, signed in November 2025, to put Perplexity's AI search directly inside Snapchat, signals the scale of commercial ambitions at play. The content Perplexity procures from publishers through its Comet AI agent might otherwise cost it millions of dollars in licensing fees. AI content licensing deals for model training, retrieval-augmented generation (RAG), and other AI development purposes command significant market value. News Corp and Meta signed a content licensing deal in March 2026 reportedly worth up to $50 million per year. The New York Times and Amazon announced an AI licensing deal in May 2025. The Washington Post joined OpenAI's content partnerships in April 2025. DCN argues that Perplexity's appeal, if successful, would undermine this emerging licensing market by incentivizing AI firms to simply take content rather than pay for it.

Computer fraud law applied to AI agents

A central technical and legal question in this appeal is whether the CFAA - the Computer Fraud and Abuse Act, a 1984 statute - applies to AI agents operating locally on a user's device at that user's instruction. Perplexity argues in its opening brief that the CFAA does not reach this conduct, because the user consented to Comet operating on their behalf and because the statute was not designed to regulate AI assistants.

DCN's brief counters this argument by pointing to Ninth Circuit precedent. In Facebook, Inc. v. Power Ventures, Inc., 844 F.3d 1058 (9th Cir. 2016), the court held that user consent cannot override a platform's express revocation of permission. Once Amazon sent Perplexity a cease-and-desist letter revoking any permission Perplexity might have claimed, continued access became "without authorization" under the CFAA - regardless of whether individual users wanted Comet to operate on their behalf. DCN draws a direct parallel: "this case is a replica of that second fact pattern."

DCN also addresses Perplexity's "penetrate-and-patch" security posture, a term applied to systems that fail to fix vulnerabilities until after they become public knowledge. The brief cites Amazon's argument that this approach is discredited in the security engineering field - particularly relevant given that Brave's security researchers publicly disclosed prompt injection vulnerabilities in Comet in October 2025, and enterprise analysis found the browser up to 85 percent more vulnerable to phishing and web attacks than Chrome.

What this means for the advertising industry

For marketing professionals, the case poses a structural question about audience measurement that goes beyond the specific parties. If AI agents can access publisher content while impersonating human users, the audience data that underpins digital advertising markets becomes unreliable. Advertisers pay on the assumption that human eyes are seeing their campaigns. Publishers price their inventory based on verified human audience figures. The disruption of that chain does not just harm individual publishers - it introduces systemic noise into the entire measurement infrastructure on which programmatic advertising depends.

PPC Land has covered the bot traffic crisis extensively, documenting how major verification platforms including DoubleVerify, Integral Ad Science, and Human Security have at times failed to distinguish declared bots from human visitors. The introduction of AI agents that actively disguise their identities - rather than merely failing to announce them - represents a qualitatively different challenge for verification technology. Detection systems that flag behavioral anomalies or known-bot fingerprints cannot easily identify an agent that transmits a standard Chrome user-agent string and behaves in patterns similar to human browsing.

DCN's brief also warns about what it describes as an "arms race" scenario. If the Ninth Circuit rules in Perplexity's favor, publishers and platforms would need to continuously invest in more sophisticated detection countermeasures to identify increasingly capable AI agents. That investment draws resources away from journalism and content creation. Investigative journalism in particular is labor-intensive: DCN's brief notes that the Panama Papers and Paradise Papers investigation, led by the International Consortium of Investigative Journalists, mobilized 300 reporters worldwide and cost $2 million - not including collaborating reporters' salaries. Foreign bureau costs, even twenty years ago, averaged between $200,000 and $300,000 per year.

The Ninth Circuit's decision, when it arrives, will be closely watched by every company building AI agents designed to interact with commercial websites. Perplexity faces additional legal pressure from Reddit, which filed a separate federal lawsuit in October 2025 alleging the company circumvented technological controls to scrape platform content. A class action complaint filed March 31, 2026, in the Northern District of California also accused Perplexity of embedding advertising trackers that forwarded users' private conversations to Google and Meta. Multiple simultaneous legal fronts are now open.

Timeline

November 2024 - Amazon first contacts Perplexity regarding its "Buy with Pro" feature, which allowed subscribers to make purchases through Amazon using Perplexity-managed Amazon Prime accounts
July 2, 2025 - Perplexity launches its $200/month Max subscription tier
July 9, 2025 - Perplexity announces Comet browser for Max subscribers; browser built on Chromium architecture and transmits Google Chrome user-agent string
September 12 and 29, 2025 - Amazon contacts Perplexity CEO Aravind Srinivas over Comet's unauthorized access; Srinivas does not deny the conduct
October 1, 2025 - Perplexity announces Comet Plus with publisher partnerships, offering a $5 standalone subscription with access to premium content
October 2, 2025 - Perplexity makes Comet broadly available to the public at no cost, expanding the scope of the challenged access
October 22, 2025 - Reddit files a federal lawsuit against Perplexity and three data scraping companies, alleging circumvention of anti-scraping controls
October 31, 2025 - Amazon sends formal cease-and-desist letter to Perplexity revoking any permission to access the Amazon Store
November 4, 2025 - Amazon files federal lawsuit against Perplexity in the Northern District of California; Perplexity publicly calls it "bullying"
November 5, 2025 - Snap and Perplexity sign a $400 million deal to put Perplexity AI search directly inside Snapchat
January 9, 2025 (reported) - DoubleVerify data shows GIVT increased 86 percent year-over-year in second half of 2024; monthly volumes surpass two billion requests for the first time
January 21, 2026 - ANA report finds $63 billion lost annually to invalid traffic across all media channels
February 17, 2026 - Amazon posts updated Business Solutions Agreement to Seller Central, introducing formal Agent Policy effective March 4, 2026
March 9, 2026 - District court issues preliminary injunction blocking Comet from accessing Amazon's password-protected systems
March 31, 2026 - Class action complaint Doe v. Perplexity AI, Inc., Meta Platforms, Inc., and Google, LLC filed in the Northern District of California
April 1, 2026 - Perplexity files 96-page opening appeal brief in the Ninth Circuit (Case No. 26-1444), challenging the preliminary injunction
April 29, 2026 - Digital Content Next files amicus curiae brief in the Ninth Circuit in support of Amazon, signed by counsel at Huth Reynolds LLP

Summary

Who: Digital Content Next (DCN), a trade organization founded in 2001 representing digital content companies with a combined unduplicated audience of 259 million unique visitors, filed an amicus curiae brief in the case Amazon.com Services LLC v. Perplexity AI, Inc. DCN members include the Associated Press, BBC Studios, Bloomberg, Conde Nast, Dow Jones, the Financial Times, Fox News, The Guardian, Hearst, The Independent, NBCUniversal, News Corp, The New York Times, NPR, Paramount, Vox Media, The Washington Post, and others.

What: DCN filed a 29-page amicus brief in the United States Court of Appeals for the Ninth Circuit (Case No. 26-1444) supporting Amazon's position that Perplexity's Comet AI agent violated the Computer Fraud and Abuse Act and California's CDAFA by accessing Amazon's password-protected systems without authorization, impersonating human users through user-agent string spoofing. DCN argues that affirming the district court's preliminary injunction will protect publisher investment in journalism by preserving the advertising and subscription revenue models on which publishers depend.

When: The brief was filed on April 29, 2026. The underlying lawsuit was filed on November 4, 2025. The preliminary injunction was issued on March 9, 2026. Perplexity's appeal brief was filed on April 1, 2026.

Where: The appeal is before the United States Court of Appeals for the Ninth Circuit. The original case was filed in the United States District Court for the Northern District of California before Judge Maxine M. Chesney.

Why: DCN argues that AI agents operating with disguised identities threaten three pillars of publisher revenue: advertising (by corrupting human audience measurement), subscriptions (by enabling mass content extraction through a single login), and AI content licensing (by incentivizing AI firms to take content rather than negotiate licenses). The brief frames the case as pivotal for the future of journalism, citing a $63 billion annual industry loss to invalid traffic, an 86 percent year-over-year rise in general invalid traffic, and a growing market for AI content licensing deals that Perplexity's appeal threatens to undermine.