Who’s Really Shopping? Retail Fraud in the Age of Agentic AI

Summary: Retailers face new threats from agentic AI, as threat actors may exploit it for fraudulent activities such as gift card theft and cash reserve depletion.

From targeting the 'digital contract' with gift card theft to potentially liquidating a retailer's cash reserve, this blog delves into the potential for AI-enabled fraud that retailers could now face. We also explain how organizations can better defend themselves and their customers from such AI-enabled fraud. During the NRF Big Show in January 2026, discussions centered around AI security with CISOs at major retail organizations, highlighting concerns about threat actors using AI to conduct fraudulent activities.

Key facts

  • AI-enabled fraud poses new threats to retailers, including gift card theft and cash reserve depletion.
  • The Universal Commerce Protocol (UCP) is an open-source standard designed for secure agentic commerce.
  • One in four data breaches could result from AI agent exploitation by 2028.
  • Organized retail crime costs retailers on average $700,000 per billion in sales annually.
  • Retailers must enhance security measures to combat potential fraudulent activities through agentic AI.

Why it matters

This article matters because it raises awareness of the evolving threats posed by agentic AI in the retail sector and emphasizes the need for robust security measures. As agentic commerce becomes more prevalent, understanding these risks is crucial for both retailers and cyber defenders.