The CAPTCHA that ate Christmas
Shoppers are sending AI agents to buy for them. Some of those agents are being turned away by bot checks built for scrapers. What happened, and what to check before Black Friday.
Your bot protection was built to stop scrapers. This holiday it may also stop customers, the ones who sent an AI agent to buy for them.
What happened
On Oct 6, TechCrunch reported a handful of complaints that Meta’s Muse agent could not complete purchases on Walmart’s website. Walmart told TechCrunch the blocks were not intentional. In fact, Walmart is a Muse partner.
The problem users appeared to hit was a button that has to be clicked to prove the visitor is human. If that step is interrupted, the check fails and the agent gets booted out.
Walmart is not alone. Early users complained of agent blocks at Yelp, eBay, Zillow, Pizza Hut, Adidas and several airlines. Some blocks are on purpose: Amazon began blocking Muse from its store. Others are side effects of anti-bot rules that never expected a shopper to arrive through an agent.
Why, maybe
Some suspect bot-protection services. Cloudflare now sorts AI traffic into three kinds that site owners control separately. From Sep 15, new domains on Cloudflare block two of them on pages that show ads.
| Kind of AI traffic | What it covers | New domains from Sep 15 |
|---|---|---|
| Search | Crawlers that index pages to answer questions later | Allowed |
| Agent | Bots acting in real time for a person, such as browser agents | Blocked on pages with ads |
| Training | Crawlers that take content to train a model | Blocked on pages with ads |
Whether this caused the shopping blocks is not confirmed. Asked by TechCrunch, Cloudflare said it had no specific data to share.
How much traffic is at stake
Salesforce predicts that 20% of all 2026 holiday ecommerce traffic will come from AI chat agents. That is a mix of bots answering shoppers live, agents doing tasks in the background, and competitor scrapers checking prices. Over the past year, 21% of shoppers used a third-party AI chat assistant, Salesforce says.
Not every bot is a scraper
A bot check sees automated traffic and says no. But a shopping agent with a shopper behind it is a customer, not a scraper. Meta, Walmart, Stripe and others have started work on an open standard so businesses can tell the two apart. Until it lands, the choice sits in your own bot rules.
Before Black Friday
Black Friday is Nov 27. Run these checks now, while there is time to change rules safely.
How Shopthru.ai helps
Getting through checkout is the last step. The first is being the store the agent picks. Shopthru.ai is an AI agents team that asks ChatGPT, Gemini, Google AI, Perplexity and Copilot what your shoppers ask, finds where you are missing or described wrongly, and drafts each fix into an approval inbox. It ships only on your yes, then checks again. Instagram and Amazon are next.