ChatGPT Wallet launches in US, but approval is no guarantee of an order

ChatGPT Wallet began a limited rollout on November 13, 2026, letting OpenAI’s task-performing agent, dots, move beyond researching products to completing purchases. But the cardholder must review and authorize each purchase the agent submits, and the business can still block or reject it. This is checkout assistance, not an open-ended license for an AI to shop.⁠1⁠4

That distinction makes the launch both useful and less sweeping than the idea of an autonomous shopper. OpenAI is giving an agent a way to pay through existing checkout systems while leaving the spending decision with the customer—and acceptance with the merchant. Whether those pieces work together reliably is the practical test.

The starting requirements are restrictive: a ChatGPT Pro subscription, age 18 or older, location in the United States and an eligible US-issued card. Wallet initially works through dots. Even someone meeting those conditions may have to wait: OpenAI’s help page explicitly says access is rolling out gradually and eligible US Pro users might not yet have it.⁠4⁠2

American Express, Mastercard and Visa are the payment-network partners named in the announcement. That does not mean every card bearing one of those brands qualifies. A complete eligible-card or issuer roster has not been established in the launch materials reviewed for this report, nor has a comprehensive list of accepting merchants. A subscriber cannot safely translate a network logo into a promise that their particular card and preferred store will work.⁠4⁠2⁠7

The specifications, security description and weekly ChatGPT audience figure come from OpenAI, not an independent audit. The evidence available for this launch also does not establish separate Wallet-specific confirmation from the payment networks defining card eligibility, acceptance or dispute rights. Those limits matter when assessing a product whose success depends on several companies’ systems, not just OpenAI’s software.⁠4⁠13

Once access arrives, the user adds an eligible card once rather than re-entering payment details for each order. Before the agent pays, the customer reviews the items, total and selected card, then authorizes the purchase through a security check. OpenAI gives Face ID and a fingerprint scan as examples. Each approval creates a record of the purchase the user authorized. Saving a card is not standing permission for the agent to spend freely.⁠4

After approval, the payment network supplies a token: substitute payment credentials with their own card number, security code and expiration date. The charge goes to the underlying card the customer selected. OpenAI says the agent and seller receive those substitute credentials rather than the customer’s actual card details through this arrangement. The agent still needs credentials to pay; they are simply not the original ones.⁠4

That is a meaningful separation, but not a universal safety guarantee. The launch account does not establish precisely how long a token lasts, whether every token is single-use, or what technical restrictions bind it to a merchant, amount or transaction. Those properties cannot be assumed from the word “token.” Keeping original card details away from the agent and seller also does not establish that an order will be correct or that fraud is impossible.⁠4

The immediate benefit is narrower and easier to understand: the user can authorize a specific purchase without handing the original card credentials to the agent and store. Whether the item, price and seller are acceptable remains a decision worth making at the review screen.

Wallet is designed to work with businesses’ existing checkout flows, without requiring every merchant to install a Wallet-specific checkout. But a usable payment form is not the same as a usable store. Website defenses may prevent an agent from reaching checkout, while payment-risk systems may flag a legitimate agent purchase and produce a decline or cancellation. The business retains its fraud decisions.⁠4⁠7

OpenAI’s Commerce Partner Playbook addresses that friction. It recommends current product prices and availability, verified business information and product feeds where useful. It also advises businesses to configure content-delivery networks or firewalls to recognize signed agent requests through Web Bot Auth, rather than accidentally block them. Browser access itself does not require a plugin or product feed; plugins and WebMCP tools are additional ways to help agents check availability or manage carts. These are compatibility options, not evidence that stores have implemented them.⁠4

On the payment side, OpenAI names fraud-prevention companies Forter, Riskified, Sardine and Signifyd, alongside payment-service providers Adyen, Checkout.com and Stripe. The stated goal is to help systems recognize legitimate agent purchases and reduce unnecessary declines. Their involvement does not establish acceptance across all their merchants or remove a bank’s transaction checks.⁠4

Nor does the agent become the seller. Customers still transact directly with the business, which controls pricing and handles fulfillment, returns and customer service. OpenAI says existing card rewards and protections for eligible disputes remain, giving a defective item as an example. “Eligible” is doing important work: this is not a blanket reimbursement promise, and the launch account does not settle the applicable exclusions, liability rules, procedures or deadlines for a particular cardholder’s dispute.⁠4

OpenAI’s longer-term ambition is a different product experience: users would set spending limits, permitted purchase categories or time periods and let an agent buy within those rules, supported by additional safeguards. The company has not announced a date for fully delegated purchasing or broader access across countries and subscription tiers.⁠4

For now, the meaningful change is not that ChatGPT can decide to spend your money. It is that an eligible user can let dots finish checkout after approving the purchase. That removes some manual work. It does not remove the card, website, fraud-screening and merchant checks between a shopping decision and a completed order.