The AI browser can click 'buy'
AI browsers can now navigate, fill forms, and check out on their own. The risk isn't a teen overspending on purpose — it's whose card the agent can reach.
A new kind of browser arrived this year: one you can hand a task to. “Find me the cheapest version of this and buy it,” and it navigates the site, fills the forms, and completes the checkout — signed in as whoever is logged in.
For a household with a teenager, that changes a quiet assumption. The risk here isn’t mainly a kid deliberately overspending. It’s that these agents act while holding whatever payment details the browser has saved, and they can be steered by the page they’re reading. Security researchers spent 2026 documenting “agent hijacking” — a hidden instruction planted on a web page that redirects an AI agent to do something its owner never asked, including reaching stored payment credentials. Akamai’s mid-year research put online commerce at the center of this new kind of fraud.
You don’t need to understand the attack to close the gap. You need to decide, on purpose, what an AI browser on your kid’s device can reach.
Find out which browser profile holds the card. Saved cards and addresses live in a specific browser profile or account. If your kid is signed into your profile — or a shared one — the agent inherits your card. Get them onto their own profile.
Turn off saved payment and autofill on that profile. If there’s no card stored, an agent can’t quietly spend one. This is the single highest-value setting.
Keep the store account separate from the browser. An Amazon or game-store account with one-click buying and a card on file is the same risk from a different direction. Your kid’s device shouldn’t be logged into yours.
Set the rule out loud. “An AI can help you find things. It doesn’t buy anything — that comes to me first.” A kid who knows the rule is far less likely to let an agent run unsupervised through a checkout.
This is a new surface, and the payment plumbing shipped well ahead of any parental controls for it. That’s normal — the controls will come — but in the meantime the protection is boring and effective: no card stored where an agent can reach it, and a household rule that purchases pass through a person. Decide it now, while it’s a five-minute settings check and not a charge you’re disputing later.