Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Who’s Really Shopping? Retail Fraud in the Age of Agentic AI

Summary: Unit 42 researchers describe how indirect prompt injection against agents built on Google's Universal Commerce Protocol could corrupt the Cart Mandate, the digital contract defining a purchase, to append a hidden $100 gift card routed to an attacker's email. They also show a returns-fraud variant that instructs an agent to skip the order.return.verify step and call settlement.refund.instant() using tracking ID void-000, and cite U.S. Chamber of Commerce figures putting organized retail crime at $700,000 per $1 billion in sales, with 57% of retailers reporting an increase over the past year.

Bottom line: If an agent can autonomously trigger refunds, the researchers note organized crime groups could fire 10,000 void-000 returns in a single hour and drain a retailer's cash reserves before a human arrives at the office. The $100 gift card is the smaller problem: the customer blames the agent, but the retailer absorbs the chargeback and the reputational damage.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
AI Security
Related