United Airlines Bans “AI Agents,” Claims It’s To “Protect Customers”

United Airlines has just banned travelers from using “AI Agents” to book or service tickets (thanks to TravelinWilly for flagging this). That’s an interesting stance for United, easily the country’s most tech savvy airline, to take. So what’s actually going on here?

United updates contract of carriage to ban use of AI bots

United Airlines has today updated its contract of carriage, which are the terms that passengers have to agree to when they book a ticket. In the section about prohibited practices at the airline, the carrier added the following:

The use of AI Agents to make, modify or service a Ticket, and/or to purchase any service or product.

The “AI Agents” term is defined by United as follows:

AI Agent means any software or service, including but not limited to an AI assistant, AI agent or AI-enabled browser that takes autonomous or semi-autonomous action, whether or not Passenger or another individual supervises or approves its actions, to discover, search for, book, purchase, ticket, service or manage any product or service offered by or through United, including flights, seats, upgrades, ancillary products and partner products, on behalf of or at the instruction of Passenger or other individual. AI Agents include but are not limited to: (i) AI assistants built into social media, messaging, search or other consumer platforms; (ii) AI-enabled browsers and standalone AI agents; and (iii) any third-party AI assistant that accesses United through a tool, application or connection provided by a travel agency or other intermediary.

United even put out a press release about this change, claiming that it’s making the change to “protect” customers. Here’s part of the explanation:

Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles. Plus, these automated AI actions have the potential to violate FAA and DOT regulations – as an example, flight check-in requires human acknowledgment that bags do not contain banned substances like explosives.

United claims it’s taking steps to restrict this kind of access, both directly within its digital platforms, and indirectly via travel agencies and aggregators, to prohibit use by unauthorized, third party personal AI agents or assistants.

Rows of leather first class seats in the cabin of a United Airlines Boeing 737 MAX
United Airlines is banning use of “AI Agents”

What’s United’s real motive with this AI bot ban?

It goes without saying that use of AI is becoming exponentially more popular in recent times, and is a force to be reckoned with. It’s anyone’s guess just how far it goes, in terms of how much the average person uses it in their everyday life.

There are certainly aspects of AI that are incredibly annoying, whether you look at it as an individual or a business. Admittedly I’m biased, but I’m so tired of feeling like half of what I’m reading online (whether on social media or websites) is written by a computer and not a human. It even extends to things like TripAdvisor reviews.

It’s also frustrating how many people write 30 paragraph emails nowadays, which are clearly 90% AI. I don’t really understand how that makes anyone’s life better. As far as I’m concerned, just give me the bullet points you fed your AI buddy, and we’ll all be better off for it. Anyway, rant over, back to United…

I suspect United’s real motive here is that it doesn’t want AI automatically being able to track and reprice flights (and then issue vouchers for passengers), or being able to too closely compare overall value on different airlines. For that matter, it probably just doesn’t want a third party getting that much data on the airline, not to mention that all of this can take a considerable toll on servers, if this scales.

But here’s what I find most interesting — the way this rule is written strikes me as being incredibly broad, no? Not to repeat the quote again, but this is the part I’m referencing, in particular:

AI Agent means any software or service, including but not limited to an AI assistant, AI agent or AI-enabled browser that takes autonomous or semi-autonomous action, whether or not Passenger or another individual supervises or approves its actions, to discover, search for, book, purchase, ticket, service or manage any product or service offered by or through United, including flights, seats, upgrades, ancillary products and partner products, on behalf of or at the instruction of Passenger or other individual.

Any software that automatically “discovers” or searches for any product or service offered by United would include all award search tools (along with all kinds of other businesses), no? Is that actually the intent here, or does United just plan to selectively enforce rules? We did see Air Canada engage in a battle over this a few years back, so is United planning something similar?

United Polaris business class seats in the cabin of a Boeing 767
Is United trying to block *all* automated tools?

Bottom line

United Airlines has today updated its rules to ban “AI Agents,” and the airline even put out a press release about it. The company claims it’s making this change to protect customers and their accounts, as AI bots could have unintended consequences.

Many people are understandably skeptical of that explanation, as I imagine the airline also wants to ban these kinds of things to help people reprice tickets, get better fares, etc. For that matter, based on how broadly the definition is written, it seems that even things like award search engines would be banned.

What do you make of United’s AI ban?

Conversations (34)
The comments on this page have not been provided, reviewed, approved or otherwise endorsed by any advertiser, and it is not an advertiser's responsibility to ensure posts and/or questions are answered.
Comment as a member

Membership is free and takes no more information than commenting as a guest. Earn status points for good contributions, and see fewer ads as your status grows.

Type your response here.

If you'd like to participate in the discussion, please adhere to our commenting guidelines. Anyone can comment, and your email address will not be published. Register to save your unique username and earn special OMAAT reputation perks!

  1. Loading comments…
Recent Comments
The latest from the OMAAT community.

The comments on this page have not been provided, reviewed, approved or otherwise endorsed by any advertiser, and it is not an advertiser's responsibility to ensure posts and/or questions are answered.

Andrew Diamond

On one hand, it's easy to look at United's motive here. They don't want to lose revenue, and AI / MCP capabilities can easily get around some of the scraping restrictions that they've built over the last decade. But a level deeper, we're also seeing the same thing in finance. And retail. Heck, AI is even eating Google's core business. There's probably a good degree of fear from every industry that something big is coming and rather than learn to adapt, take risks and aim to thrive, they do what America does best: ban it and tell you it's for security.

0
‼ 0
Terry Member

The future is here. I had 1 of my AI agents (Insight) monitoring hotel reservations. It found cheaper rates on the same dates for 2 existing reservations & asked if I would like it to book the new reservation & cancel the old. I agreed. A hotel in London is > $200 cheaper. One in Perth $10 cheaper (ha ha). But since there was little time cost to me to let it rebook the Perth reservation, I said go ahead. But I gave permission first & reviewed the new reservations & cancellations afterward.

0
‼ 0
Bob Guest

Personally, I am glad they imposed this ban. Whatever their reason is I don't care. As a iT security guy, allowing an agent to interface with booking opens up soooooo many security breach potentials and nearly impossible to explain it to a exec or govt official in a way they would understand. To the point the regulators would just dismiss what they don't understand as fear mongering. Companies just cannot randomly deloy AI features. To date none of them including big tech are treating ai security with any seriousness. The only security right now is good enough for optics and counting on the public not understanding how this stuff works. All the scamming attempts we get now will be magnify by 1000x and the speed of the scale will increase dramatically. Binance getting hacked and losing $6B should be a big big warning given that they have much more security than an airline. I am tell you unequivocally airline data security is laughable. United airline for example, their IT don't even know what 2 FA actually is. Their website have some lame security and they call it 2FA not even realizing what they implemented actually made their security worse. These ceos think AI is magic. They're going to get a very hard lesson on AI and AI security. The one blessing I have is that because I churn credit cards so often I'm not concern about cc data breaches or stolen card #. But everything else, we're in for some pain.

0
‼ 0
jetset Diamond

I think this is likely a combination of pricing data protection (there are sites today that have a lot of access but there are limits to how it can be leveraged individually, whereas you could have your own agent do data scrapes specific to flights you want to book), and getting ahead of the potential for thousands of individual agents scraping airline websites and either causing stability issues or running up their hosting costs. They also want to protect their own ability to create their own agents that have unique access to their data (and potentially charging for that). Amazon has done the same thing - and went as far as to limit the descriptions and details they provide in order emails now so Google can't scrape the data from Gmail accounts.

0
‼ 0
Watson Diamond

It's pretty clear that when an AI agent books a ticket for the user, United is not liable for mistake. What's more interesting, though, is if there's a third party service like cheapflights.ai or something that the user can pay to book them a good flight. If the website screws up, is the user or cheapflights.ai liable? More abstractly, in an agentic SaaS scenario, does the agent owner or the agent operator bear liability?

0
‼ 0

Save posts to read later

Saving posts is a member feature. Become an OMAAT member to build a reading list you can come back to from any device.

Become a member
Meet Ben Schlappig, OMAAT Founder
5,883,136 Miles Traveled

43,914,800 Words Written

47,187 Posts Published