February 24, 2026

Amazon Buy for Me: When a Giant Lists Your Products Without Your Permission

Amazon’s AI agent shops your store on your customers’ behalf. You didn’t agree to it. Now there are rules - but only for everyone else.

We covered Amazon briefly in our map of who’s building AI shopping. But Buy for Me deserves its own post, because what Amazon is doing is fundamentally different from what OpenAI, Google, or Perplexity are building. Those platforms are creating new channels for merchants to opt into. Amazon is creating an agent that shops your store whether you like it or not.

On March 4, 2026, Amazon’s new AI Agent Policy takes effect. The timing is worth examining.

What Buy for Me actually does

Buy for Me launched in April 2025 as a feature inside the Amazon Shopping app. When a customer searches for a product that Amazon doesn’t carry, the app shows listings from third-party retailer websites. If the customer hits “Buy for Me,” an AI agent navigates to the retailer’s site, fills in the customer’s shipping and payment details, and completes checkout - all without the customer ever leaving Amazon.

The agent runs on Amazon Nova and Anthropic’s Claude models. It reads product pages, interprets checkout flows, and acts as a proxy buyer. The customer sees the transaction as an Amazon experience. The merchant sees an order come in from someone they’ve never interacted with, placed by a bot they never authorized.

The merchant doesn’t get the customer relationship. Amazon does.

The backlash

Brands discovered their products listed on Amazon’s app without any notification or consent process.

Modern Retail reported that merchants were blindsided. One brand founder described it as being turned into “drop shippers against their will.” Amazon was presenting their products, their branding, their pricing - inside Amazon’s interface, under Amazon’s trust umbrella - without ever asking.

Small businesses pushed back hard. The complaints center on a few concrete problems:

No opt-in. Merchants were enrolled by default. Amazon’s position is that if your website is publicly accessible, its agent can shop there.
No relationship. The customer thinks they’re buying from Amazon. The merchant gets an order with no context on how the buyer found them.
No control over presentation. Amazon’s agent decides how to display the product. The merchant can’t influence listing quality, images, or descriptions inside Amazon’s interface.
Returns and support ambiguity. When something goes wrong with the order, who handles it? The customer contacted Amazon. The merchant fulfilled the order. The lines blur fast.

This isn’t theoretical. Merchants reported receiving actual orders placed by Amazon’s AI agent, with no prior agreement and no mechanism to manage the experience.

Amazon’s new AI Agent Policy - effective March 4

As of March 4, 2026, Amazon’s new AI Agent Policy formalizes rules for AI agents interacting with Amazon’s platform. The policy requires that AI agents:

Identify themselves when accessing Amazon
Follow Amazon’s terms of service
Not scrape or automate actions that Amazon hasn’t authorized

Read that carefully. These rules govern agents that interact with Amazon’s platform. They protect Amazon’s catalog, Amazon’s data, Amazon’s checkout flow. They don’t address what Amazon’s own agents do on other people’s websites.

The timing is notable: Amazon sets rules for how others must behave on its turf, on the same day that Buy for Me continues operating on everyone else’s turf without reciprocal constraints.

The asymmetry problem

This is the part that matters most for merchants.

Amazon actively blocks external AI agents from crawling its catalog. OpenAI’s crawlers, Perplexity’s shopping agent, Google’s AI Mode - none of them can access Amazon product data at scale. Amazon’s robots.txt and technical measures make sure of that.

But Amazon’s Buy for Me agent crawls everyone else freely. It reads product pages, processes checkout forms, and completes purchases on third-party sites with no formal agreement from those sites.

The result is a one-way street:

Other AI platforms cannot discover products on Amazon
Amazon’s AI can discover and purchase products from any public website
Merchants on Amazon’s marketplace must now comply with Amazon’s AI Agent Policy
Merchants outside Amazon have no equivalent protection against Amazon’s agent

This isn’t a niche complaint. It’s a structural issue in how agentic commerce is developing. The open protocols - the Agentic Commerce Protocol (ACP), co-developed by OpenAI and Stripe, Google’s UCP - are built on consent. Merchants choose to participate. Update: For a full comparison, see UCP vs ACP: the two protocols that will decide your visibility. Amazon’s model inverts that: merchants must choose to leave.

Rufus: Amazon’s other AI commerce play

While Buy for Me handles off-Amazon purchases, Rufus is Amazon’s AI shopping assistant for its own marketplace. According to Retail Tech Innovation Hub, 250 million shoppers have used Rufus, and it generated over $10 billion in incremental annual sales for Amazon.

But the numbers hide a problem. According to the same analysis, 83% of Rufus recommendations steer toward Amazon’s own brands or higher-margin products, and only 32% of responses were rated accurate.

For third-party sellers on Amazon’s marketplace, Rufus is a double-edged tool. It drives massive volume, but the AI assistant has its own agenda, and that agenda often isn’t aligned with the merchant’s interests.

The CEO’s counter-narrative

Amazon CEO Andy Jassy has a different take on where agentic commerce is heading. During Amazon’s Q4 2025 earnings call in February 2026, as reported by Retail Brew, Jassy argued that customers will ultimately prefer retailers’ own AI shopping agents over third-party platforms like ChatGPT or Perplexity.

His logic: retailers have the deepest product knowledge, the best inventory data, and the strongest customer relationships. A third-party AI is always one step removed.

It’s a convenient argument for Amazon, which is both a retailer with its own AI (Rufus) and a platform whose agent (Buy for Me) shops other retailers. Jassy’s framing positions Amazon as the natural winner in both scenarios - either customers use Amazon’s agent directly, or they use retailers’ agents, which Amazon’s Buy for Me can then interact with on their behalf.

Amazon’s approach vs. open protocols

	Amazon (Buy for Me)	ACP (OpenAI/Stripe)	Google UCP
Consent model	Opt-out (default enrolled)	Opt-in (merchant enables)	Opt-in (via Merchant Center)
Merchant control	None over listing presentation	Full control over feed data	Full control via product feeds
Customer relationship	Amazon keeps it	Merchant keeps it	Merchant keeps it
Data access	Amazon scrapes public pages	Merchant provides structured feed	Merchant provides structured feed
Fee structure	No fee (Amazon profits from retention)	4% (collected by OpenAI)	TBA
Reciprocity	Blocks external agents from its catalog	Open protocol	Open protocol
Agent identification	Not disclosed to merchant sites	Identified via protocol	Identified via protocol
European availability	US only	US only (expanding)	US only (expanding)

The contrast is stark. ACP and UCP are built on the idea that merchants choose to participate and control how their products are presented. Buy for Me treats the open web as inventory Amazon can surface at will.

What merchants should do

If you want to opt out of Buy for Me:

Amazon hasn’t published a simple opt-out button. The available options:

robots.txt - You can block Amazon’s crawlers, but Amazon hasn’t published a specific user-agent string for Buy for Me. Blocking all Amazon bots might also affect your Amazon affiliate links or other Amazon integrations.
Contact Amazon directly - Some merchants have reported success requesting removal through Amazon Seller Support, even if they’re not Amazon sellers.
Monitor your orders - Watch for orders placed with unusual patterns (automated checkout behavior, Amazon-associated payment methods). These may be Buy for Me transactions.

If you sell on Amazon’s marketplace:

Review the new AI Agent Policy. It affects how third-party tools and services interact with your Amazon listings. If you use repricing tools, inventory management software, or other automated services, verify they comply with the March 4 requirements.

The broader question:

Buy for Me exposes a gap in how agentic commerce handles consent. The open protocols (ACP, UCP) solved this with explicit opt-in. But there’s nothing stopping any company from building an agent that shops the open web. Amazon did it first at scale. They won’t be the last.

Merchants need to think about this beyond Amazon. The question isn’t just “should I opt out of Buy for Me?” It’s “what is my policy on AI agents purchasing from my store?”

The European angle

Buy for Me is US-only today. But the precedent it sets matters everywhere.

European merchants should be watching this closely for a few reasons:

GDPR implications. An AI agent filling in customer payment and shipping details on a third-party site raises data processing questions that European regulators will have opinions about. Who is the data controller? Who is the processor? The current model likely doesn’t survive contact with EU data protection authorities unchanged.
Consumer protection. EU consumer rights directives give buyers clear rights around distance selling. When an AI agent intermediates the purchase, the chain of responsibility gets complicated. European courts will eventually need to sort this out.
Platform regulation. The Digital Markets Act already constrains how gatekeepers can leverage their market position. An Amazon agent that shops competitors’ websites while blocking competitors’ agents from Amazon’s catalog is exactly the kind of asymmetry the DMA was designed to address.

Amazon will eventually bring Buy for Me to Europe - or a European competitor will build something similar. The merchants who understand the consent and data implications now will be better prepared than those who discover it when an AI agent starts placing orders on their checkout page.

The bigger picture

Every other major player in agentic commerce - OpenAI, Google, Perplexity, Microsoft - built systems where merchants opt in. They created protocols, published documentation, and gave merchants control over their participation.

Amazon did the opposite. It built an agent that treats the open web as its shopping mall, defaulted everyone in, and then published rules protecting its own catalog from the same treatment.

This isn’t necessarily illegal. A publicly accessible website can be visited by anyone, including bots. But it changes the relationship between platforms and merchants in a way that the rest of the industry chose not to pursue.

For merchants, the practical takeaway is simple: agentic commerce is not just about optimizing your product data for AI discovery. It’s also about deciding who gets to shop your store on your customers’ behalf - and enforcing that decision.

You can check how your Shopify products appear to AI agents today.