Daniel Ishag, Bakkt’s chief commercial officer, described a hypothetical in which an AI agent books a flight to North Korea instead of South Korea, highlighting the risks of letting software spend autonomously. BeInCrypto’s State of AI Agent Payments 2026 found 14 of 19 reviewed products and workflows could act within preapproved permissions, according to BeInCrypto, while two incidents examined in the report sent $281,200 to attackers before recoveries. Stripe’s Link terms make users responsible for connected-agent transactions, including unintended ones, except in cases of Stripe’s own technical failure or error.