ChatGPT Wallet lets agents pay without seeing your card number

OpenAI has introduced ChatGPT Wallet, a new payment method designed to keep users' card details private during transactions. The system, developed in collaboration with major financial networks American Express, Mastercard, and Visa, uses a stand-in card number to complete purchases, ensuring that neither the ChatGPT agents nor the merchants access the actual card information.

The ChatGPT Wallet operates within a framework called 'dots,' where a user's dot manages the transaction on their behalf. Users need to add their card details once, and for each purchase, they can review the transaction details and approve it using biometric verification methods like Face ID or fingerprint scans. This process generates a token, a substitute card number with its own security features, which is used for the transaction. The actual charge is then applied to the user's real card, maintaining all standard rewards and protections.

However, the introduction of this system poses challenges for merchants. OpenAI noted that some websites might inadvertently block agent purchases, mistaking them for fraudulent activity. This could lead to legitimate transactions being declined or canceled. Retailers who have previously configured their systems to prevent automated checkouts must now differentiate between beneficial bots and malicious ones. To aid in this transition, OpenAI released a Commerce Partner Playbook, advising merchants to configure their content delivery networks and firewalls to recognize Web Bot Auth, a method for verifying bot requests.

OpenAI is working closely with fraud prevention and payment processing companies, including Forter, Riskified, Sardine, and Signifyd, as well as Adyen, Checkout.com, and Stripe, to ensure the smooth integration of these tokens into existing checkout processes. Despite this, there remains a possibility that risk management systems may still erroneously reject these transactions. OpenAI's efforts aim to create a seamless experience while maintaining high security standards for online purchases.