$68.6bn of Ads Behind a Login Screen (September 2026): Amazon Blocked Meta's Muse Agent — and Shopify and PayPal Plugged It In
Amazon blocked Meta's Muse agent citing its Conditions of Use; Shopify and PayPal opened checkout to it. $68.6bn of 2025 Amazon ad sales is the mechanism.
$68.6bn of Ads Behind a Login Screen (September 2026): Amazon Blocked Meta's Muse Agent — and Shopify and PayPal Plugged It In
Amazon has blocked Meta's Muse agent from shopping on Amazon.com, telling users that "continued access by an unauthorized AI agent violates Amazon's Conditions of Use." In the same week Shopify opened Shop Pay checkout to Muse across all of its stores and, on 24 September, PayPal did the same across its merchant network. The split is not about whether agents can shop — it is about who sells to the person when nobody is looking at the page, and Amazon's own filings show $68.6 billion of 2025 advertising sales resting on that question.
- Muse launched on 8 September 2026 as an agent that completes tasks — including purchases — and was the top free iPhone app in the US within a week.
- Amazon's block rests on contract, not hacking law. Its message cites the Conditions of Use; the Ninth Circuit ruled on 4 August that under the anti-hacking statute it is the user who accesses Amazon, not the agent's maker.
- The rails went the other way. Stripe Link at launch, Shopify's Shop Pay on 21 September, PayPal on 24 September.
- Amazon sold $68.6bn of ads in 2025 and $19.8bn in Q2 2026 (+26%), per its SEC filings. Retail-media ads are priced on human browsing — the activity an agent replaces.
- A marketplace and a checkout provider earn from different steps. One monetises the search; the other monetises the payment. An agent removes the first and keeps the second.
- For the macro backdrop — rates, growth and risk across the eight majors — see the live meter.
What happened, in order
The sequence is short and every step is documented.
Meta launched Muse on 8 September 2026. It is available on iOS, Android, the web and WhatsApp, works through a secure virtual machine with its own browser, and asks the user to approve sensitive actions such as a purchase. Where a service has a public API, Muse uses it with the credentials the user supplies. Where there is none, it drives the website through that browser the way a person would.
By 20 September, Muse users trying to buy on Amazon were getting a warning that an unauthorized agent was breaching the Conditions of Use. Bloomberg reported the block on 21 September. Amazon's case, as it put it to reporters: Meta did not tell it Muse would access the store, the agent does not identify itself, and it appears to capture and store customer credentials. Amazon said third-party applications that buy on customers' behalf "should operate openly and respect service provider decisions." Meta's position, stated before the block, is that Muse "has no visibility into people's passwords or payment methods."
On 21 September Shopify chief executive Tobi Lütke posted that Shopify was partnering with Muse to enable agentic checkout with Shop Pay on all Shopify stores. On 24 September PayPal announced that its customers can use Muse to check out at PayPal merchants worldwide. Those join Stripe's Link, which Meta built in at launch and which reaches more than a million businesses.
| Company | Position on Muse | Date | What it earns from |
|---|---|---|---|
| Amazon | Blocked; cites Conditions of Use | By 20 Sep 2026 | Product sales, seller fees, advertising on its pages |
| Shopify | Shop Pay checkout on all stores | 21 Sep 2026 | Merchant subscriptions, payment processing |
| PayPal | Checkout across its merchant network | 24 Sep 2026 | Payment processing |
| Stripe (Link) | Integrated at launch | 8 Sep 2026 | Payment processing |
Read down the last column and the split explains itself. The companies that said yes earn at checkout. The company that said no also earns before checkout — while the shopper is still looking.
The $68.6bn line an agent doesn't look at
Amazon reports advertising as its own revenue line. From its second-quarter 2026 earnings release, advertising services were $13.9bn, $15.7bn, $17.7bn and $21.3bn across the four quarters of 2025 — $68.6bn for the year — and $19.8bn in Q2 2026, up 26% year on year, the fastest growth rate in the six quarters shown. Amazon describes the line as sponsored ads, display and video sold "to sellers, vendors, publishers, authors, and others."
Scale it against the rest of the business. Q2 2026 net sales were $200.6bn, so advertising was roughly 10% of revenue. Online-store sales were $70.4bn, so for every dollar of first-party goods Amazon sold online, it sold about 28 cents of advertising.
This is not an argument that the ad business shrinks. It is an explanation of why a marketplace has a different incentive from a payment processor when an agent arrives. Amazon's own shopping agents — Alexa for Shopping, launched in May 2026, and Buy for Me, which buys from external brands' sites, identifies itself and lets brands opt out — keep the shopper inside Amazon's environment. A third-party agent moves the choosing somewhere else.
Why the block is written as a contract, not a hacking claim
Amazon has fought this before. It sued Perplexity over the shopping assistant in its Comet browser and, on 9 March 2026, won a preliminary injunction in federal district court. On 4 August 2026 the Ninth Circuit vacated it (No. 26-1444) — the first appellate ruling on how the Computer Fraud and Abuse Act applies to AI agents.
The panel's reasoning turned on who is doing the accessing. The user directs the agent through their own browser session; the agent is a tool, not a person; so for the purposes of the statute it is the user who accesses Amazon's computers. The ruling did not resolve contract or terms-of-service claims, and it pointed to terms of service and technical measures as the tools platforms may have to rely on instead.
That is the mechanism behind the wording of the message Muse users saw. The statutory door narrowed in August, so the September block leans on the contract each customer accepted plus the technical ability to refuse traffic. The practical consequence for anyone following the story is that the next escalation, if there is one, is more likely to be a contract fight or a commercial deal than a hacking case.
Where it reaches something you trade
This is not a currency story, and forcing it through the eight majors would obscure it. It reaches markets through index weight and through revenue mix.
Index concentration. Amazon and Meta sit among the largest weights in both the Nasdaq 100 (NAS100/NQ) and the S&P 500 (US500/ES). A question about how two of them monetise shopping traffic is therefore an index input, in the same way a single mega-cap earnings report is. That is also why a dispute between them can show up in the index even when neither company has reported anything.
Revenue mix, not revenue level. The distinction the market is drawing is between companies paid at the moment of choice (search, sponsored listings, display) and companies paid at the moment of payment (processors, checkout networks). Agents compress the first and route volume through the second. Shopify's and PayPal's decisions fit their own incentives; Amazon's fits its own. None of them needs to be "right" for the channel to exist.
Meta sits on both sides. Meta is itself an advertising business, and Amazon products have been buyable inside Facebook and Instagram since 2023. In April 2026 Meta also signed a multibillion-dollar agreement to run agentic AI workloads on Amazon's Graviton chips. The two companies are simultaneously partner, supplier and counterparty here, which is part of why Amazon says it is in direct conversation with Meta rather than announcing litigation. Amazon declined to comment on possible legal action.
For how a mega-cap's supplier relationships are now being written into its financial statements, see our note on Amazon paying suppliers in warrants; for how AI-policy headlines have moved the chip complex this month, see the AI slowdown pledge.
What is priced, and what would change the picture
Nothing about this dispute shows up in Amazon's reported numbers yet. Muse is 17 days old; Amazon's Q2 figures predate it entirely. What markets can react to is the direction of access, not measured revenue impact.
Four verifiable developments would move the question from narrative to data:
- A commercial agreement. Amazon itself drew the comparison with food-delivery apps and online travel agencies, which usually operate with the consent of the restaurants and airlines they sell. A paid or identified-agent arrangement between Amazon and Meta would convert a block into a toll.
- A contract suit. The Ninth Circuit left terms-of-service claims open. A filing on those grounds would test the route the August ruling pointed to.
- Disclosure. If either company quantifies agent-initiated orders, or Amazon comments on advertising impressions from non-human sessions in its next quarterly report, the $19.8bn line becomes directly measurable against the channel.
- More rails choosing sides. Stripe, Shopify and PayPal are all checkout layers. A second large marketplace following Amazon's line, or breaking from it, would show whether the split is about business model or about one company.
The bigger point
An agent is a new kind of customer: it has a budget and a brief but no attention to sell. Businesses paid for the payment welcome it because it brings them volume. A business paid partly for the attention has to decide whether to charge for access, build its own agent, or refuse. Amazon has, for now, chosen the last two at once. Watching which of those three the rest of retail picks is how to follow this story without needing a view on who wins it.
For the dollar backdrop behind US equity moves, see the US dollar page. To learn how Pip Theory builds its fundamental currency-strength scores, see the methodology overview.
Educational macro context only — not investment advice.

