United Airlines Restricts AI Agent Access to Booking Systems
United Airlines announced it will restrict access for AI agents attempting to book flights and manage reservations on behalf of users, citing cybersecurity risks and concerns about undermining federal regulations.
The airline joins a growing list of American corporate giants blocking customers from using AI agents and autonomous assistants to access their systems. The move reflects a broader challenge facing airlines and banks in 2026: distinguishing between genuine customers and AI systems operating on their behalf—particularly when users share their login credentials with AI assistants. Sharing passwords with apps and assistants can create security vulnerabilities if those credentials are leaked or exposed.
Credential Sharing and Unintended Consequences
United warns that "sharing account credentials with personal, third-party AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles."
The airline also flagged the risk of violating federal aviation rules—including requirements that a human complete flight check-ins to confirm their bags contain no banned substances.
Scope of the Restrictions
"As a result, United is taking steps to restrict access—directly within our digital platforms and indirectly via travel agencies and aggregators—to prohibit use by unauthorized, third-party personal AI agents or assistants," the airline said in a statement. "This work includes updates to our booking, ticketing and distribution policies."
Broader Industry Pushback
United's decision follows similar warnings from the banking sector. Bank of America recently urged customers not to share their passwords with AI assistants, signaling a wider corporate effort to manage the security and liability risks posed by autonomous AI tools accessing consumer accounts.
via TechCrunch