ChatGPT Wallet launches: agents pay, OpenAI takes no cut
OpenAI's second run at shopping inside ChatGPT is not a checkout button. It is a card wallet where the buyer is software, the human still signs every purchase, and — for now — OpenAI takes none of the money.
OpenAI launched ChatGPT Wallet on Friday for US ChatGPT Pro subscribers aged 18 and over: add a card once, then let a "dots" agent find, fill and pay for an order, with every purchase approved by Face ID or fingerprint, per OpenAI's announcement. Before each purchase the user sees the items, the total and the selected card, then approves. That approval creates a record of what the agent was authorised to buy. Payment runs through a token issued by the card network — a stand-in card number, security code and expiration scoped to that one transaction — so neither the merchant nor the agent ever sees the real card details. American Express, Mastercard and Visa are launch partners, and OpenAI says existing card rewards and protections for eligible disputes still apply.
The rollout is deliberately narrow: Pro tier only, United States only, adults only, US-issued cards only, delivered inside dots, the personal-agent product OpenAI showed off at its late-September developer conference. That is a pilot, not a launch, and the companies involved say so. "It just makes sense to watch it, start it in a contained environment, and then keep rolling from there," Amex executive vice president Luke Gebb told CNBC.
This is attempt two, and the admission matters. OpenAI shipped Instant Checkout in the autumn of 2025, then pivoted away from it by March, replacing it with a shopping experience built around discovery and comparison, as CNBC recounts. Discovery was never the hard part. The hard part is the last hundred metres: an agent that can compare twelve coffee machines but cannot hand over a card number has produced research, not a sale. Wallet is that missing step, and OpenAI's own purchase diagram now runs end to end — describe the want, search the open web and merchant product feeds, compare, then buy through the merchant's site in a browser or through a plugin that can manipulate a cart.
The number that decides whether this becomes a business is the take rate, and at launch it is zero. OpenAI is not taking a cut of transactions to start, Chaya Nayak, who leads product for monetization and payments, told CNBC: "Our goal here is to really focus on merchants and our network partners and start building out a really great foundation that's safe and easy to use." Compare that with Meta, where Mark Zuckerberg has said Muse will charge merchants a small fee per transaction and never run ads — a take rate we dug into when Meta outlined the plan to take a cut of what Muse buys. Two of the largest consumer platforms in the world are building the same rail and disagreeing about who pays for it. Zero is the price of merchant acceptance; it is not a promise about 2028.
The distribution behind it is why anyone should care. OpenAI says 1.2 billion people use ChatGPT each week, and CNBC puts paying subscribers at close to 100 million as of the end of the third quarter. Put a working payment rail in front of that audience and every merchant on the web acquires a reason to care about how its firewall treats an AI agent — which is the actual product OpenAI shipped on Friday.
Because the payment is the easy half. The merchant side is the wall. OpenAI published a Commerce Partner Playbook alongside the wallet telling businesses, in plain terms, to stop blocking agents: claim and verify your business in ChatGPT and upload a product feed with current prices and stock; configure your CDN or firewall to recognise signed requests using Web Bot Auth; and talk to your risk and payment providers so legitimate agent purchases stop getting declined, per the playbook. OpenAI names the vendors it is working with — Forter, Riskified, Sardine and Signifyd on fraud, Adyen, Checkout.com and Stripe on payments. It also notes that browser access requires no plugin and no feed, which is a polite way of saying the merchant's only lever is the firewall it was just asked to open.
Several large merchants have already chosen the other direction. United Airlines said on Wednesday it will block third-party agents from booking and managing reservations, citing credential sharing and the federal rule that a human has to attest at check-in. Amazon won a court order against Perplexity's shopping agent in March and still blocks agent purchases. Resy banned diners whose AI agents grabbed tables. OpenAI's answer is standardisation rather than confrontation: signed requests, structured cart actions, a token the existing checkout already accepts. It is the right answer, and it will take years.
The "first" claim deserves a raised eyebrow. OpenAI calls ChatGPT Wallet the first wallet that lets agents pay without access to card details and that requires a security check on every purchase. The mechanics — network token instead of the card number, biometric approval per transaction, rewards and chargeback rights preserved — are the Apple Pay playbook, shipped in 2014. Stripe has been handing agents single-use cards through Link, which is how several of OpenAI's rivals already let Claude Duet, Meta's Muse and xAI's Grok Bot buy things. What is new is not the cryptography. It is that a 1.2-billion-user surface now has a payment button, and that OpenAI wrote the merchant documentation to go with it.
The honest limit is autonomy. Approving every purchase with your face is not an agent that shops for you; it is an agent that fills the cart while you hold the card, which is a checkout shortcut with a conversational front end. OpenAI says the next step is delegating purchases outright, with spending limits, product categories and time windows set in advance — the same parameters Walmart proposed for its own agent gateway in October. Until that ships, the interesting question is not whether an agent can buy something. It is who carries the loss when it buys the wrong thing. "Existing protections for eligible disputes" is doing a lot of quiet work in that sentence, and the word to watch is "eligible".
What to watch: whether the zero take rate survives volume, or quietly becomes the merchant fee Meta has already announced; whether Wallet reaches Europe, where biometric approval lines up neatly with strong customer authentication and the blocker is licensing rather than code; and whether the first big merchants to accept agent-initiated checkout are direct-to-consumer brands with thin margins, who need the traffic, rather than the marketplaces that can afford to say no. The last one tells you whether this is a payment network or a referral engine with extra steps.
If your agent buys the wrong thing with your face on the approval, whose problem is it — yours, OpenAI's, or the merchant's? Write to us via our contact page.
