Yesterday, OpenAI officially introduced ChatGPT Wallet, setting a new standard for secure agent payments.
ChatGPT Wallet
This is the first wallet that lets agents pay without access to users’ actual card details and requires a security check for every purchase, while also preserving existing card rewards and protections for eligible disputes.
ChatGPT Wallet is built in partnership with American Express, Mastercard, and Visa. To accept payment from ChatGPT Wallet, websites need to ensure agents are not inadvertently blocked, and payment and risk systems need to recognise legitimate purchases made by agents.
ChatGPT Wallet gives agents a secure way to pay on a user’s behalf. Users add a card once, then approve each purchase without re-entering their payment details. Before each purchase, the user reviews the items, total, and selected card, then approves it with a security check such as Face ID or a fingerprint scan. Each approval creates a clear record of the purchase the user authorised the agent to make.
After the user approves, the payment network provides a payment token (a substitute for the user’s actual card details) with a card number, security code, and expiration date. The payment is charged to their selected card without ChatGPT Wallet sharing their actual card details with the business or agent.
Users transact directly with businesses, which keep their customer relationships and control over pricing, fulfilment, returns, and customer service. Over time, OpenAI expect users to be able to delegate purchases entirely to their agent by setting clear parameters—such as spending limits, purchase categories, or time periods—and pre-approve those purchases with enhanced safeguards that build on today’s protections, including biometric checks and clear records of authorisation.
Alongside ChatGPT Wallet, the company is publishing a Commerce Partner Playbook with tools and practical guidance to help businesses support customers using agents through their existing websites and systems. Businesses can start with the areas most relevant to their customers:
- Help customers find accurate product information. Claim your business in ChatGPT and, once verified, update your business details and upload a product feed with current pricing and availability.
- Ensure ChatGPT agents can access your website. Configure your CDN or firewall to recognise signed requests using Web Bot Auth and confirm your general site security measures are not inadvertently blocking ChatGPT agents. Browser access does not require a plugin or product feed.
- Work with your payments and risk providers to support agent purchases. Wallet’s payment tokens work with existing checkout flows, but risk systems may still flag legitimate purchases made by agents, leading to declines or cancellations. You can work with your providers to understand how they recognise these transactions. We’re also working with fraud prevention partners including Forter, Riskified, Sardine and Signifyd and payment service providers including Adyen, Checkout.com, and Stripe to help their systems recognise legitimate purchases made by agents.
- Give agents more ways to work with your business. Build a plugin to let agents check availability, manage carts, or take other actions through your existing systems. Websites can also add WebMCP tools.
Availability
ChatGPT Wallet begins rolling out today in dots, enabling users to have their dot complete purchases on their behalf. It will initially be available to ChatGPT Pro subscribers aged 18 and older in the US with eligible US-issued cards.
The company will work with businesses, banks, and payment networks to learn from early use and expand availability, helping more customers and businesses benefit from agentic commerce.
