United Airlines restricts AI agents’ access over security concerns

United Airlines amended its Contract of Carriage on November 11, 2026, adding Rule 6.J.6, which bars AI agents from completing any ticket-related transaction on United's app and website, including when a customer supervises the bot, and extends the restriction indirectly through travel agencies. United cited unauthorized purchases, misuse of loyalty miles, and the need for human oversight at check-in to avoid FAA and DOT violations on prohibited luggage items; CEO Scott Kirby also said the airline wants to avoid creating "another middleman" between it and customers. Reservations made by AI agents before November 11 will not be canceled, and travelers can still use AI tools to compare fares and research options.

United Airlines restricts AI agents’ access over security concerns Photo: Tima Miroshnichenko / Pexels The carrier's new contract rule bars AI bots from booking tickets, even when a customer is watching over their shoulder United Airlines said on Wednesday it will restrict AI agents from accessing its digital platforms. The airline pointed to data security and regulatory compliance as the reasons. The timing is notable. AI agents are getting good enough to plan and book entire trips on their own, and one of the biggest US carriers has decided it would rather they didn’t. What United is actually changing The move, announced November 11, 2026, comes as an amendment to United’s Contract of Carriage. That is the legal fine print every passenger agrees to when buying a ticket, and almost nobody reads. The new language lives in Rule 6.J.6 . It explicitly bars AI agents from completing any ticket-related transaction. The rule holds even when a customer is supervising the bot. You can sit there watching your AI assistant work, approving every step. United still wants a human finger on the purchase button. Research is a different matter. Travelers can still use AI tools to compare fares and look up options. The line United is drawing sits at the transaction itself: browsing is fine, buying is for people. The restrictions cover United’s app and website. They also reach indirectly through travel agencies, so routing an AI agent through a third-party booking channel isn’t meant to work as a back door. Travelers who already booked with an AI agent can relax. United said reservations made that way before November 11 will not be canceled. AI, tech, and the markets they move—in one daily briefing. Daily. Free. Join 34,000+ readers across crypto, finance, and policy. Why United says it’s doing this The airline laid out a few specific worries. The first involves unauthorized purchases, where an AI agent buys something the customer never actually intended to buy. The second involves loyalty miles. United is concerned AI interactions could lead to those balances being misused. The third concern is regulatory, and it is the most airline-specific. United emphasized the need for human oversight during check-in to avoid potential violations of FAA and DOT rules on prohibited items in luggage. Check-in includes acknowledgments about what passengers are and aren’t carrying. Those acknowledgments are meant to come from the passenger. A chatbot confirming that your bag contains no hazardous materials is not quite the same thing, at least in the eyes of a regulator. Interestingly, United hasn’t seen significant AI-driven booking activity yet. The airline is closing the door before much of anything has walked through it. The middleman problem Security is the stated reason, but CEO Scott Kirby offered a more commercial framing too. He stressed the importance of keeping a direct relationship with customers. Kirby said the airline wants to avoid creating “another middleman” between itself and the people who fly with it. Not the only company pulling up the drawbridge United is joining a growing list. Amazon https://cryptobriefing.com/markets/amazon/ , eBay and several major banks have also restricted AI agents over security concerns. What this means For travelers, the near-term impact is modest. You can still ask an AI to find the cheapest flight to Denver. You just have to click “purchase” yourself. United’s answer, at least for now, is to keep a human in the loop at every point that carries legal or financial weight. The policy also raises a practical enforcement question. Distinguishing a human clicking through a website from a well-built agent doing the same thing is not trivial, and the indirect restriction via travel agencies will depend on partners enforcing it. Disclosure: This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our Editorial Policy https://cryptobriefing.com/editorial-policy/ .