On October 8, 2026, Riskified (NYSE: RSKD) launched Agent Identity Risk Intelligence — a system that identifies the AI personal assistant behind an order or customer-service request (Meta's Muse, Instinct, dots in ChatGPT), resolves it to the real consumer, and returns a real-time risk signal to the merchant. First platform: Shopify. Delivery: Riskified's existing APIs, the AI Agent Approve MCP server on AWS Marketplace, Decision Studio, and Zendesk. Limited beta December 2026; GA expected 2027.
The release's own framing is the honest one: "Authenticated is not the same as trusted."
Every agent payment now passes through three separate questions. Riskified names the first two and assigns itself the second:
The release is unusually candid: "An agent authorized by a stolen account is still an account takeover. An agent authorized by a refund-as-a-service ring, whose members hold real accounts and grant real permissions, is still fraud, now running at machine speed." The Artemis Refund Group — eleven co-conspirators sentenced by a U.S. federal court in April 2026 for running refund fraud as a subscription business against Amazon, Walmart, Target and Wayfair — is the proof. Real accounts, real permissions. The claims were the fraud.
Against the live SML decision gate (bands ≥0.80 auto / 0.50–0.79 confirm / <0.50 escalate), October 11, 2026:
The blunt heuristic treats a refund ring hiding behind a verified identity identically to a loyal shopper's routine return. And note the asymmetry: Riskified's Decision Studio would auto-approve "low-risk agent orders from verified identities" — under that policy both tonight's instructions auto-approve. Identity risk and instruction judgment are two different instruments; merchants need both wired into the same execution path.
Full receipts, the exact curl to score your own agent's instruction, and the dated table: https://scriptmasterlabs.com/riskified-agent-identity-risk-intelligence