{"slug": "muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer", "title": "Muse’s 2 Million Users Are Shopping Under a Borrowed Identity. The Detection Layer Is Catching Up.", "summary": "Meta's Muse AI shopping agent reached approximately 2.18 million daily active users in the U.S. by October 5, 2026, after launching September 8, and traffic matching Muse appeared at more than half of the customers studied by Cequence Security within two weeks, according to Cequence Security. Cequence identified the agent through behavioral analysis, noting a specific browser version update spiked from 0% to 90% of Muse traffic in days and that traffic grew nearly sixfold in two weeks at the median customer, while Fingerprint classified the traffic as category 'ai_agent' from provider 'Meta' with 'unknown' identity and 'high' confidence. Amazon blocked Muse on September 20, citing concerns over unauthorized access and credential capture, leaving merchants to choose between blocking unverifiable automated traffic or opening their APIs to it.", "body_md": "Autonomous software agents were expected to handle shopping, travel, and financial planning. The reality, as shown by Meta’s Muse, is a scramble to identify the source of automated traffic. While the industry promotes [agentic commerce](https://forkast.news/glossary/agentic-commerce/), the infrastructure layer is currently managing unverified automated activity.\n\nThe arrival of Muse on September 8 triggered a surge in traffic across the digital economy. By October 5, 2026, Muse reached approximately 2.18 million daily active users in the U.S. According to [Cequence Security](https://www.cequence.ai/blog/cequence-agent-trust-metas-muse-is-a-bot-and-a-customer-now-what), traffic matching Muse appeared at more than half of the customers they studied within two weeks. This activity spanned financial services, retail, travel, and software sectors. For merchants, this represents an influx of automated activity that bypasses traditional security protocols.\n\nMuse operates by mimicking a standard Chrome browser rather than an AI agent. It routes through consumer VPNs to evade security checks, suppresses automation flags, and alters its browser fingerprint. Cequence identified the agent through behavioral analysis, noting that a specific browser version update spiked from 0% to 90% of Muse traffic in days. At the median customer, this traffic grew nearly sixfold in two weeks. The agent is designed to blend into existing traffic patterns.\n\nThe detection industry is working to classify this activity. [Fingerprint](https://fingerprint.com/blog/how-to-detect-meta-muse-ai-agent/) has confirmed the presence of Muse, using its Bot Detection Smart Signal to classify the traffic as category ‘ai_agent’ from provider ‘Meta’. Fingerprint labels the identity as ‘unknown’ with ‘high’ confidence. Despite this detection, the agent provides no verifiable identity. Merchants must decide whether to permit this traffic or block it.\n\nSome have chosen to block the agent. [Amazon blocked Muse on September 20](https://forkast.news/amazon-vs-metas-muse-an-identity-adjudication-with-nothing-verifiable-underneath/), citing concerns over unauthorized access and credential capture. This highlights a tension in the market: merchants cannot verify these agents, yet they risk losing revenue by blocking them. The lack of a standard for [agent identity](https://forkast.news/learn/what-is-agent-identity/) forces every merchant to make reactive security decisions.\n\nThis reactive posture contrasts with existing technical capabilities. A recent [Chain of Trust demo](https://forkast.news/chain-of-trust-govware-2026-demo-traverses-all-seven-layers-of-agent-commerce/) proved that identity verification can function end-to-end using open standards. The gap between that demonstration and the current reality of Muse is significant. Technology exists to verify agents, but the current environment incentivizes agents to hide their nature to gain access to merchant platforms.\n\nThe integrity of the transaction layer is at stake. If agents cannot prove their identity, they cannot be held accountable for their actions. Merchants are forced to choose between blocking potential customers or opening their APIs to anonymous, automated traffic. This model is not sustainable for long-term commerce.\n\nIf the industry allows agents to operate anonymously, merchants will eventually face a point where the cost of verification exceeds the value of the traffic. The current surge of Muse traffic serves as a stress test for the ecosystem. Until the industry moves from behavioral guessing games to verifiable identity, the promise of agentic commerce will remain limited by the reality of digital insecurity.", "url": "https://wpnews.pro/news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer", "canonical_source": "https://forkast.news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer-is-catching-up/", "published_at": "2026-10-16 09:28:35+00:00", "updated_at": "2026-10-16 09:37:54.921644+00:00", "lang": "en", "topics": ["ai-agents", "ai-crawlers", "ai-safety", "artificial-intelligence"], "entities": ["Meta", "Muse", "Cequence Security", "Fingerprint", "Amazon"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer", "markdown": "https://wpnews.pro/news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer.md", "text": "https://wpnews.pro/news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer.txt", "jsonld": "https://wpnews.pro/news/muses-2-million-users-are-shopping-under-a-borrowed-identity-the-detection-layer.jsonld"}}