How to prepare your online store for AI shoppers

Why AI shoppers matter for your store now

AI agents have moved from recommending products to buying them. On September 28, 2026, Shopify opened checkout, including Shop Pay, to browser-based AI agents on all eligible merchant stores, and Meta's Muse and Instinct's personal agent already let shoppers buy from Shopify stores with Shop Pay. Google launched the Universal Commerce Protocol in January 2026, and its checkout features are rolling out with brands including Shopify merchants such as Fenty and Steve Madden. Not every retailer is opening the door: Amazon has blocked AI shopping agents it did not authorize, including Meta's Muse, and eBay bans buy-for-me agents without its permission.

The lesson from the last year: the agent you optimize for will change. OpenAI moved away from Instant Checkout inside ChatGPT in March 2026 to focus on discovery, with purchases completed on the merchant's own checkout. Build on the protocol layer your platform supports, not on one chatbot.

Fraud moved with it. Visa's Spring 2026 Threats Report counted nearly $1 billion in scam activity in six months as criminals shifted to AI-enabled social engineering, and its Fall 2025 report found a 477% rise in underground forum mentions of AI agents.

The 8-step checklist

Eight steps get a store ready for AI shoppers. The first three make your store easy for agents to buy from; the last five decide who you sell to and how you prove it later.

1. Make your catalog readable by machines. Agents buy from structured data, not photos. Give every variant a GTIN or SKU, size and fit data, materials, colorway names, care details and live stock. A fashion catalog where size charts live in images is invisible to an agent.
2. Turn on agentic channels. On Shopify, Agentic Storefronts manage AI channels from the admin and handle the protocol work. Off Shopify, connect through Google Merchant Center for UCP checkout (open to select merchants for now), Shopify's Agentic Plan, or a UCP and ACP plugin for your platform.
3. Confirm your payments accept agents. Shop Pay on Shopify, Google Pay through UCP, Stripe or PayPal through ACP, and network agent tokens from Visa and Mastercard. See the best AI payment APIs.
4. Write your agent policy. Decide what agents may buy, the maximum order value without a human check, whether limited releases are open to agents, and how returns on agent orders work.
5. Recognize agent traffic. Registered agents identify themselves with signed requests and declared profiles, though not every real agent signs yet. Impersonators copy the name and skip the signature. See how to verify an AI agent.
6. Verify the person on the orders that matter. First orders, high-value orders, limited drops and age-restricted products. A one-time ID and face check, reused on later orders, keeps good customers moving.
7. Keep evidence for disputes. Store the agent's mandate, where it sends one, and a verification receipt with every order you gate. Disputes on agent orders still count against your chargeback ratio.
8. Update your terms. Say how you treat purchases made by an authorized agent, as Target's terms now do. If you run AI agents of your own, such as a shopping assistant, the UK CMA's March 2026 guidance on complying with consumer law when using AI agents makes clear that you are responsible for what they do.

What fashion and luxury brands should do differently

High order values, limited releases and a strong resale market make fashion and luxury a prime target for agent abuse. Four patterns to plan for:

• Limited drops bought out by bot and agent farms that hold dozens of accounts.
• First-order and welcome-offer abuse by synthetic buyers built with AI.
• Returns fraud backed by AI-generated photos of damage that never happened.
• Cloned storefronts using your brand, built to catch shoppers and their agents.

Where deepidv fits

Your platform handles the agent. Your processor handles the money. deepidv handles the person: ID and face verification, a 1:N face match that ties one person to one account, phone and carrier checks, age checks without an ID upload, and a signed receipt for every check. Add it to Shopify with the deepidv app, or call the API from any stack.