Markets 25 September 2026 8 min read

$68.6bn of Ads Behind a Login Screen (September 2026): Amazon Blocked Meta's Muse Agent — and Shopify and PayPal Plugged It In

Amazon blocked Meta's Muse agent citing its Conditions of Use; Shopify and PayPal opened checkout to it. $68.6bn of 2025 Amazon ad sales is the mechanism.

$68.6bn of Ads Behind a Login Screen (September 2026): Amazon Blocked Meta's Muse Agent — and Shopify and PayPal Plugged It In

Amazon has blocked Meta's Muse agent from shopping on Amazon.com, telling users that "continued access by an unauthorized AI agent violates Amazon's Conditions of Use." In the same week Shopify opened Shop Pay checkout to Muse across all of its stores and, on 24 September, PayPal did the same across its merchant network. The split is not about whether agents can shop — it is about who sells to the person when nobody is looking at the page, and Amazon's own filings show $68.6 billion of 2025 advertising sales resting on that question.

Key takeaways
  • Muse launched on 8 September 2026 as an agent that completes tasks — including purchases — and was the top free iPhone app in the US within a week.
  • Amazon's block rests on contract, not hacking law. Its message cites the Conditions of Use; the Ninth Circuit ruled on 4 August that under the anti-hacking statute it is the user who accesses Amazon, not the agent's maker.
  • The rails went the other way. Stripe Link at launch, Shopify's Shop Pay on 21 September, PayPal on 24 September.
  • Amazon sold $68.6bn of ads in 2025 and $19.8bn in Q2 2026 (+26%), per its SEC filings. Retail-media ads are priced on human browsing — the activity an agent replaces.
  • A marketplace and a checkout provider earn from different steps. One monetises the search; the other monetises the payment. An agent removes the first and keeps the second.
  • For the macro backdrop — rates, growth and risk across the eight majors — see the live meter.

What happened, in order

The sequence is short and every step is documented.

Meta launched Muse on 8 September 2026. It is available on iOS, Android, the web and WhatsApp, works through a secure virtual machine with its own browser, and asks the user to approve sensitive actions such as a purchase. Where a service has a public API, Muse uses it with the credentials the user supplies. Where there is none, it drives the website through that browser the way a person would.

By 20 September, Muse users trying to buy on Amazon were getting a warning that an unauthorized agent was breaching the Conditions of Use. Bloomberg reported the block on 21 September. Amazon's case, as it put it to reporters: Meta did not tell it Muse would access the store, the agent does not identify itself, and it appears to capture and store customer credentials. Amazon said third-party applications that buy on customers' behalf "should operate openly and respect service provider decisions." Meta's position, stated before the block, is that Muse "has no visibility into people's passwords or payment methods."

On 21 September Shopify chief executive Tobi Lütke posted that Shopify was partnering with Muse to enable agentic checkout with Shop Pay on all Shopify stores. On 24 September PayPal announced that its customers can use Muse to check out at PayPal merchants worldwide. Those join Stripe's Link, which Meta built in at launch and which reaches more than a million businesses.

Company Position on Muse Date What it earns from
Amazon Blocked; cites Conditions of Use By 20 Sep 2026 Product sales, seller fees, advertising on its pages
Shopify Shop Pay checkout on all stores 21 Sep 2026 Merchant subscriptions, payment processing
PayPal Checkout across its merchant network 24 Sep 2026 Payment processing
Stripe (Link) Integrated at launch 8 Sep 2026 Payment processing

Read down the last column and the split explains itself. The companies that said yes earn at checkout. The company that said no also earns before checkout — while the shopper is still looking.

The $68.6bn line an agent doesn't look at

Amazon reports advertising as its own revenue line. From its second-quarter 2026 earnings release, advertising services were $13.9bn, $15.7bn, $17.7bn and $21.3bn across the four quarters of 2025 — $68.6bn for the year — and $19.8bn in Q2 2026, up 26% year on year, the fastest growth rate in the six quarters shown. Amazon describes the line as sponsored ads, display and video sold "to sellers, vendors, publishers, authors, and others."

Scale it against the rest of the business. Q2 2026 net sales were $200.6bn, so advertising was roughly 10% of revenue. Online-store sales were $70.4bn, so for every dollar of first-party goods Amazon sold online, it sold about 28 cents of advertising.

Why the ad line and the agent collideA sponsored listing is paid for because a person sees it at the moment they are choosing. The price a seller will pay depends on how often that placement changes a human decision. An agent told to "reorder the same detergent" or "find the cheapest 65-inch TV with good reviews" reads the page against its instructions. It may still pass through the sponsored slot — but whether that slot changes what gets bought is a very different question when the reader is software following a brief.

This is not an argument that the ad business shrinks. It is an explanation of why a marketplace has a different incentive from a payment processor when an agent arrives. Amazon's own shopping agents — Alexa for Shopping, launched in May 2026, and Buy for Me, which buys from external brands' sites, identifies itself and lets brands opt out — keep the shopper inside Amazon's environment. A third-party agent moves the choosing somewhere else.

Why the block is written as a contract, not a hacking claim

Amazon has fought this before. It sued Perplexity over the shopping assistant in its Comet browser and, on 9 March 2026, won a preliminary injunction in federal district court. On 4 August 2026 the Ninth Circuit vacated it (No. 26-1444) — the first appellate ruling on how the Computer Fraud and Abuse Act applies to AI agents.

The panel's reasoning turned on who is doing the accessing. The user directs the agent through their own browser session; the agent is a tool, not a person; so for the purposes of the statute it is the user who accesses Amazon's computers. The ruling did not resolve contract or terms-of-service claims, and it pointed to terms of service and technical measures as the tools platforms may have to rely on instead.

MarchDistrict court bars Comet from Amazon under anti-hacking law
→
4 AugustNinth Circuit: the user, not the agent maker, "accesses" the site
→
SeptemberAmazon's Muse warning cites the Conditions of Use customers agreed to

That is the mechanism behind the wording of the message Muse users saw. The statutory door narrowed in August, so the September block leans on the contract each customer accepted plus the technical ability to refuse traffic. The practical consequence for anyone following the story is that the next escalation, if there is one, is more likely to be a contract fight or a commercial deal than a hacking case.

Where it reaches something you trade

This is not a currency story, and forcing it through the eight majors would obscure it. It reaches markets through index weight and through revenue mix.

Index concentration. Amazon and Meta sit among the largest weights in both the Nasdaq 100 (NAS100/NQ) and the S&P 500 (US500/ES). A question about how two of them monetise shopping traffic is therefore an index input, in the same way a single mega-cap earnings report is. That is also why a dispute between them can show up in the index even when neither company has reported anything.

Revenue mix, not revenue level. The distinction the market is drawing is between companies paid at the moment of choice (search, sponsored listings, display) and companies paid at the moment of payment (processors, checkout networks). Agents compress the first and route volume through the second. Shopify's and PayPal's decisions fit their own incentives; Amazon's fits its own. None of them needs to be "right" for the channel to exist.

Meta sits on both sides. Meta is itself an advertising business, and Amazon products have been buyable inside Facebook and Instagram since 2023. In April 2026 Meta also signed a multibillion-dollar agreement to run agentic AI workloads on Amazon's Graviton chips. The two companies are simultaneously partner, supplier and counterparty here, which is part of why Amazon says it is in direct conversation with Meta rather than announcing litigation. Amazon declined to comment on possible legal action.

For how a mega-cap's supplier relationships are now being written into its financial statements, see our note on Amazon paying suppliers in warrants; for how AI-policy headlines have moved the chip complex this month, see the AI slowdown pledge.

What is priced, and what would change the picture

Nothing about this dispute shows up in Amazon's reported numbers yet. Muse is 17 days old; Amazon's Q2 figures predate it entirely. What markets can react to is the direction of access, not measured revenue impact.

Four verifiable developments would move the question from narrative to data:

  • A commercial agreement. Amazon itself drew the comparison with food-delivery apps and online travel agencies, which usually operate with the consent of the restaurants and airlines they sell. A paid or identified-agent arrangement between Amazon and Meta would convert a block into a toll.
  • A contract suit. The Ninth Circuit left terms-of-service claims open. A filing on those grounds would test the route the August ruling pointed to.
  • Disclosure. If either company quantifies agent-initiated orders, or Amazon comments on advertising impressions from non-human sessions in its next quarterly report, the $19.8bn line becomes directly measurable against the channel.
  • More rails choosing sides. Stripe, Shopify and PayPal are all checkout layers. A second large marketplace following Amazon's line, or breaking from it, would show whether the split is about business model or about one company.
Rates, growth and risk appetite set the backdrop for every index move. See how the five factors are scoring the eight majors today.Open the live meter →

The bigger point

An agent is a new kind of customer: it has a budget and a brief but no attention to sell. Businesses paid for the payment welcome it because it brings them volume. A business paid partly for the attention has to decide whether to charge for access, build its own agent, or refuse. Amazon has, for now, chosen the last two at once. Watching which of those three the rest of retail picks is how to follow this story without needing a view on who wins it.

For the dollar backdrop behind US equity moves, see the US dollar page. To learn how Pip Theory builds its fundamental currency-strength scores, see the methodology overview.

Educational macro context only — not investment advice.

Advertisement

Frequently asked

Why did Amazon block Meta's Muse AI agent?
Amazon's stated reasons are consent, disclosure and security. By 20 September 2026, Muse users trying to shop on Amazon.com were shown a message saying that continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which its customers have agreed. Amazon said Meta did not notify it that Muse would access its store, that the agent does not identify itself when it browses, and that it appears to capture and store customer credentials; Amazon also said the agent can reach account pages and order history when prompted. Meta has previously said Muse has no visibility into people's passwords or payment methods and that shared credentials go into secure storage the agent can use without seeing them. Beneath the stated reasons sits a commercial one that Amazon has not cited but that its own filings quantify: Amazon sold $68.6 billion of advertising in 2025, and most of it is shown to people browsing its pages. An agent that browses on a person's behalf changes who sees those pages.
Is it legal for an AI agent to shop on Amazon without permission?
Under federal anti-hacking law, the most recent appellate answer leans towards the user. On 4 August 2026, in Amazon.com Services v. Perplexity AI (No. 26-1444), the Ninth Circuit vacated a preliminary injunction a district court had granted Amazon on 9 March against Perplexity's Comet browser assistant. The panel held that for the purposes of the Computer Fraud and Abuse Act it is the user, not the AI company, who accesses Amazon's computers, describing the assistant as a tool rather than a person. The opinion did not decide contract or terms-of-service questions, and it noted that platforms may need to rely on terms of service and technical measures instead. That is why the wording of Amazon's Muse message matters: it cites the Conditions of Use customers agreed to, which is a contract argument, not a hacking one.
What is Meta's Muse and when did it launch?
Muse is a personal AI agent that Meta launched on 8 September 2026. Unlike a chatbot that only answers questions, it carries out multi-step tasks across email, calendars, payments, dining and shopping, running in a secure virtual machine with its own browser. It is available on iOS, Android, the web and WhatsApp, is free with paid tiers, and asks the user to confirm sensitive actions such as purchases; a separate monitoring agent must approve anything Muse sends to the internet. Where a service offers a public API, Muse connects through it using credentials the user supplies. Where there is no API, it uses the service through a browser — and that browser route is exactly where the Amazon dispute sits. Within a week of launch Muse ranked first among free apps in Apple's US App Store.
Which retailers and payment companies are working with Muse?
Three large rails have opened to it within a fortnight of launch. At launch Meta integrated Stripe's Link, which lets the agent check out at more than a million businesses that accept Link and can generate a single-use virtual card for merchants outside that network. On 21 September, Shopify chief executive Tobi Lütke posted that Shopify is partnering with Muse to enable agentic checkout with Shop Pay on all Shopify stores; no financial terms, revenue split or rollout timetable were disclosed. On 24 September PayPal announced a partnership letting its customers use Muse to shop and check out at PayPal merchants worldwide. Amazon is the largest marketplace to have taken the opposite position.
How does the Amazon–Muse dispute affect the stock market?
Mainly through index concentration and through which revenue line an agent touches, not through any one headline. Amazon and Meta are both among the largest weights in the Nasdaq 100 and S&P 500, so a question about how either company monetises traffic is an index-level input. For Amazon the relevant line is advertising services: $19.8 billion in the second quarter of 2026, up 26% year on year, against $70.4 billion of online-store sales. Advertising is roughly 10% of Amazon's net sales but is sold on human attention, which is the part an agent displaces. The things that would change the picture are verifiable: a commercial agreement between Amazon and Meta of the kind travel sites strike with airlines, a lawsuit on the contract claims the Ninth Circuit left open, or disclosure of agent-driven order volume in either company's next quarterly report. None of this is a view on either share price.
PT
Pip Theory desk

We build the tools we write about. Educational macro context only — never investment advice.

About the desk