United Airlines said on Wednesday, Nov. 11, 2026, that it is restricting personal AI agents from its platforms1.
An AI agent is a program that acts for you. It can search for a flight and buy the ticket. United says the limits also reach travel agencies and aggregators. Aggregators are sites that list many airlines' fares in one place.
The release gives two reasons: the safety of your account and a federal rule. Banks and retailers are its examples. The rule's start date stays open. Here is what United wrote, what the release leaves out, and what you can do now.
What United Says It Is Doing
United Airlines says it is limiting access "directly within our digital platforms and indirectly via travel agencies and aggregators"1. The goal is "to prohibit use by unauthorized, third-party personal AI agents or assistants." Everything turns on "unauthorized," and the release leaves that word undefined.
Policy changes come with it. "This work includes updates to our booking, ticketing and distribution policies," United Airlines says1. The release stops at naming those three areas.
A help page is coming too. United Airlines says it will explain what the limits mean, how to protect your account, and where to get help "if an agent takes an unintended action"1. Ai Lately's attempt to load that page timed out on Nov. 11, so this story leaves its contents out.
Why United Says It Is Doing It
The United Airlines release opens with a plain line: "Protecting our customers' data and accounts is a priority for United."1 Two reasons follow.
Your login is the first reason. Credentials are your username and password. United Airlines says "sharing account credentials with personal, third-party, AI assistants can expose sensitive information"1.
United Airlines adds that "actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles"1. MileagePlus miles are points you earn for flying.
A federal rule is the second reason. United Airlines says "these automated AI actions have the potential to violate FAA and DOT regulations"1. In plain words, United says an automated program may break a rule that needs a person to confirm each bag is safe. United's example is check-in: "flight check-in requires human acknowledgment that bags do not contain banned substances like explosives."
One test puts a rough number on the risk. Visa ran 22 AI models from 12 labs through 15 shopping tasks5. The models passed 57.2 percent of runs, and the other 42.8 percent fell short. Visa says it will extend testing to checkout, payment and order placement.
Visa also counted purchases. "About 1-in-2 (54%) of failed runs still ended in the AI making a purchase," Visa wrote5. Ai Lately covered the results in Spies, Slides and Shopping Bots That Still Buy Wrong.
In Visa's AI shopping test, 42.8 percent of runs fell short
Share of test runs by result, Visa's first round, Nov. 5, 2026
Each column is a share of all test runs; the magenta column is the runs that fell short.
Visa's first round covered choosing what to buy; testing of checkout, payment and order placement comes later.
Source: Visa [5]. Chart by Ryan Elliott Dennis.
The numbers behind this chart
| Item | Value |
|---|---|
| Runs passed | 57.2% |
| Fell short | 42.8% |
Who Moved First
United Airlines points to banks and stores as firms that acted already. "Corporate leaders in the banking and retail industries have taken similar actions regarding AI agents and we encourage others to consider measures that preserve the data and security of their customers and strengthen safety," the release says1. In plain words, United asks other firms to follow.
JPMorgan Chase is the bank example. Its chief executive, Jamie Dimon, spoke on the bank's Oct. 13, 2026, earnings call. "You don't want rogue agents, and it could be thousands of them," Dimon said4.
A bank spokeswoman told CNBC that the bank blocks outside agents from acting for retail customers4. Ai Lately covered that move in Blocks, Bans and a Borrowed Rule.
Retail supplies the Amazon example: it cut Meta's Muse agent off from buying on Amazon.com on Sept. 20, 20263. Ai Lately covered that fight in Amazon Bars Meta's Muse From Shopping.
United's release came 29 days after Dimon's remarks and 52 days after Amazon's move. Three firms in three industries acted in under two months.
United's release came 52 days after Amazon cut off Muse
Dates when three firms acted on outside AI agents, Sept. 20 to Nov. 11, 2026
Each dot is one dated move, spaced by real time; the magenta dot is United's release and the gray dots are the earlier moves.
Each date is the day the firm announced or reported its move, per the cited page.
Sources: United Airlines [1]; PPC Land [3]; CNBC [4]. Chart by Ryan Elliott Dennis.
The numbers behind this chart
| Date | Event |
|---|---|
| Sept. 20, 2026 | Amazon cuts off Muse. Amazon says it blocked Meta's Muse agent from buying on Amazon.com [3] |
| Oct. 13, 2026 | Dimon on outside agents. JPMorgan's chief executive says outside agents stay out of accounts, on the earnings call [4] |
| Nov. 11, 2026 | United restricts agents. United's release limits personal AI agents on its platforms and through agencies [1] |
Two Readings of the Rule
United Airlines reads the move as a safety step. Its closing line says: "As personal AI assistants evolve, United will continue to evaluate how these tools interact with our services, with a focus on protecting our customers."1
Henry Harteveldt, an airline analyst at Atmosphere Research Group, reads the move another way. CBS News MoneyWatch quotes him saying United "is saying they don't want to add yet another, and potentially even more powerful, intermediary"2. An intermediary is a middleman between the airline and the buyer.
The release mentions only security, accounts and federal rules. Middlemen and prices are topics only Harteveldt raises. What United blocks in practice will show which reading fits.
What the Release Leaves Open
Six questions stay open after the release1.
- A start date for the rule.
- What "unauthorized" means.
- Affected travel agencies and aggregators, and how United will enforce the rule.
- Approved partners: whether they can connect, and what United's own AI tools do.
- MileagePlus terms, and who pays for a bad booking an agent makes.
- Named AI products, if United means any.
Harteveldt expects that "United fares will continue to be bookable through flight aggregators such as Kayak, Hopper and Google Flights"2. United Airlines says it will limit access "indirectly via travel agencies and aggregators"1. The release leaves open how both can hold, and only United can say.
What to do
Keep your United and MileagePlus passwords out of any AI helper, because United names shared logins as the risk1. Check United's Digital Trust Center page for the rules once it loads.
If you buy work travel, ask your travel agency or booking tool in writing whether it uses AI agents on United fares. Ask how it will follow United's new booking, ticketing and distribution rules.
By the numbers
- Nov. 11, 2026: United issues its statement1.
- 52 days: Amazon's move on Muse to United's release3.
- 42.8 percent: Visa's test runs that fell short5.
- 54 of every 100 short runs: still ended in a purchase5.
- 3: aggregators Harteveldt expects to keep selling United fares, Kayak, Hopper and Google Flights2.
What to watch
Watch for United's Digital Trust Center page to load with the exact rules. Look for a start date and a plain meaning for "unauthorized." Check whether United opens an approval path for outside AI partners.
Check how Kayak, Hopper and Google Flights handle AI agents that ask for United fares. Read other airlines' own newsrooms to see whether rivals post matching limits.
Sources
- United Airlines, "United Restricts Access for Third-Party AI Agents," United Airlines, Nov. 11, 2026, https://united.mediaroom.com/news-releases?item=125496
- Megan Cerullo, "United Airlines bans AI agents from booking flights on behalf of travelers," CBS News MoneyWatch, Nov. 11, 2026, https://www.cbsnews.com/news/united-airlines-bans-ai-agents-booking-flights/
- Luis Rijo, "Amazon blocks Meta's Muse AI agent from shopping on its site," PPC Land, Oct. 8, 2026, https://ppc.land/amazon-blocks-metas-muse-ai-agent-from-shopping-on-its-site/
- Hugh Son, "JPMorgan Chase blocks outside AI agents like Muse, Instinct from directly accessing accounts," CNBC, Oct. 13, 2026, https://www.cnbc.com/2026/10/13/jpmorgan-ai-agents-account-access.html
- Visa, "Visa Releases First-of-Its-Kind Industry Benchmark for AI Shopping; Almost Half of Test Runs Fail," Visa, Nov. 5, 2026, https://investor.visa.com/news/news-details/2026/Visa-Releases-First-of-Its-Kind-Industry-Benchmark-for-AI-Shopping-Almost-Half-of-Test-Runs-Fail/default.aspx
