Autonomous software agents were expected to handle shopping, travel, and financial planning. The reality, as shown by Meta’s Muse, is a scramble to identify the source of automated traffic. While the industry promotes agentic commerce, the infrastructure layer is currently managing unverified automated activity.
The arrival of Muse on September 8 triggered a surge in traffic across the digital economy. By October 5, 2026, Muse reached approximately 2.18 million daily active users in the U.S. According to Cequence Security, traffic matching Muse appeared at more than half of the customers they studied within two weeks. This activity spanned financial services, retail, travel, and software sectors. For merchants, this represents an influx of automated activity that bypasses traditional security protocols.
Muse operates by mimicking a standard Chrome browser rather than an AI agent. It routes through consumer VPNs to evade security checks, suppresses automation flags, and alters its browser fingerprint. Cequence identified the agent through behavioral analysis, noting that a specific browser version update spiked from 0% to 90% of Muse traffic in days. At the median customer, this traffic grew nearly sixfold in two weeks. The agent is designed to blend into existing traffic patterns.
The detection industry is working to classify this activity. Fingerprint has confirmed the presence of Muse, using its Bot Detection Smart Signal to classify the traffic as category ‘ai_agent’ from provider ‘Meta’. Fingerprint labels the identity as ‘unknown’ with ‘high’ confidence. Despite this detection, the agent provides no verifiable identity. Merchants must decide whether to permit this traffic or block it.
Some have chosen to block the agent. Amazon blocked Muse on September 20, citing concerns over unauthorized access and credential capture. This highlights a tension in the market: merchants cannot verify these agents, yet they risk losing revenue by blocking them. The lack of a standard for agent identity forces every merchant to make reactive security decisions.
This reactive posture contrasts with existing technical capabilities. A recent Chain of Trust demo proved that identity verification can function end-to-end using open standards. The gap between that demonstration and the current reality of Muse is significant. Technology exists to verify agents, but the current environment incentivizes agents to hide their nature to gain access to merchant platforms.
The integrity of the transaction layer is at stake. If agents cannot prove their identity, they cannot be held accountable for their actions. Merchants are forced to choose between blocking potential customers or opening their APIs to anonymous, automated traffic. This model is not sustainable for long-term commerce.
If the industry allows agents to operate anonymously, merchants will eventually face a point where the cost of verification exceeds the value of the traffic. The current surge of Muse traffic serves as a stress test for the ecosystem. Until the industry moves from behavioral guessing games to verifiable identity, the promise of agentic commerce will remain limited by the reality of digital insecurity.