On November 11, 2026, United Airlines updated its official Contract of Carriage. Tucked inside the list of violations that justify immediate ticket cancellation was an unprecedented ban: any reservation booked, modified, or maintained by an AI agent can now be voided directly by the airline—without advance notice to the passenger.
Many travelers assumed the greatest roadblock to automated ticket booking would be solving CAPTCHAs or bypassing web rate limits. United, however, skipped the technical arms race entirely and moved its defense to the terms of the carriage contract. Even if an AI agent successfully books an itinerary and charges a credit card, the traveler could find their ticket invalidated at the boarding gate. The friction between autonomous transaction software and traditional corporate contract rules has opened its sharpest divide yet.
Revising Rule 6: United Classifies AI-Assisted Bookings as Unauthorized
United has raised the red flag. Under Rule 6 of its Contract of Carriage, the carrier enumerates the specific scenarios where it reserves the right to cancel bookings. Historically, this list targeted phantom reservations, hidden-city ticketing, abusive fare practices, and credit card fraud. In the November 11 revision, a strict new provision appeared: itineraries generated, altered, or maintained by an AI agent are now formally classified as prohibited transactions. In accompanying customer guidance, United reiterated that using automated agents to purchase or manage airline products is strictly banned.
The penalties for non-compliance are severe. The policy authorizes United to invalidate tickets immediately and cancel all remaining downstream flight segments. The airline holds the right to confiscate unused coupons and permanently refuse carriage until the passenger pays any resulting fare differential. For now, the policy applies prospectively: bookings completed before November 11 will not be retroactively wiped, though United advises travelers to double-check their reservation status.
From an engineering standpoint, this marks a fundamental shift in how airlines counter automated bot traffic. Traditional anti-scraping and anti-bot systems rely on perimeter controls, API rate limits, and challenge prompts. Once an automated script circumvents frontend defenses and executes payment, airlines are largely powerless at the API layer. By cementing the prohibition directly into the Contract of Carriage, United pushes its defense back to pre-boarding legal enforcement. A booking flagged for automated agent involvement can simply result in denied boarding, saving the airline the ongoing costs of cat-and-mouse infrastructure games.
Defining Three Categories: AI Browsers Swept into the Crosshairs
The scope of the policy is remarkably broad. In the updated contract, United introduced its first official legal definition of an “AI Agent.” Any software capable of autonomously searching, booking, issuing, or managing airline inventory falls squarely within the restriction. Crucially, the rule applies even if the passenger personally authorized, reviewed, and supervised the transaction. This wide net sweeps up virtually every modern automation tool on the market.
United outlined three specific categories of automated tools subject to enforcement. The first covers consumer assistants embedded within social platforms, search engines, and messaging applications. The second targets standalone autonomous web agents, including the latest wave of AI-powered browsers. The third encompasses third-party scraping and booking automation plugged into travel agencies or ticket aggregators. In its Digital Trust Center, United emphasized that it currently partners with zero third-party AI booking agents.
Photo: CBS News coverage of the policy change, Getty Images archival photo. Source: CBS News / Getty Images
Singling out AI browsers cuts directly to the technical nature of client-side autonomous agents. Unlike centralized backend crawlers, these tools operate directly inside a user’s local browser session, leveraging authenticated cookies and active logins. From the perspective of airline web server logs, clicks and page navigations generated by an on-device AI are nearly indistinguishable from human browsing. Because network firewalls cannot reliably separate real passengers from local automated scripts, United turned to legal policy to declare the behavior an explicit breach of contract.
Every Query Carries a Cost: Defending Against Super-Intermediaries
The query bills are climbing. Aviation industry analyst Henry Harteveldt noted that United’s policy shift is driven in large part by concrete financial calculations. Consumers often assume that querying airline flight schedules is free, just like running a standard web search. In reality, every route and availability search processed through global distribution systems (GDS) and internal inventory engines incurs real compute, licensing, and transaction costs. A massive surge in flight queries translates directly into skyrocketing infrastructure overhead.
A human traveler typically compares a handful of itineraries before selecting a flight. An autonomous agent looking for optimal pricing, however, fires off hundreds of high-frequency concurrent queries. If millions of consumer AI assistants track fares around the clock, airline servers face sustained, compute-intensive query floods. The airline bears exponential search costs without seeing a proportional increase in actual ticket sales—a commercial dynamic carriers are desperate to avoid.
Beyond server bills, airlines are acutely protective of direct customer relationships. Traditional flight aggregators take a commission, but they ultimately redirect shoppers back to airline check-out funnels. Autonomous agents, by contrast, seek to ingest frequent flyer credentials, store payment profiles, and handle the entire lifecycle behind closed doors. If airlines are reduced to commoditized transport pipes, lucrative ancillary revenues—such as paid seat selection, cabin upgrades, and co-branded credit card promotions—could evaporate.
Airlines do not share a single playbook for dealing with the AI wave. While United is slamming the door shut, Southwest Airlines is experimenting with an opposing strategy. Southwest recently opened flight inventory integrations to ChatGPT, betting that conversational discovery could drive incremental ticket volume. The divergent strategies highlight the aviation industry’s delicate balancing act: embracing novel distribution channels versus protecting proprietary customer funnels.
Automated Check-In Crosses Federal Lines: Liability Cannot Be Delegated
Accountability requires a human in the loop. In public guidance, United cited account security as a primary concern. Handing frequent flyer credentials to third-party automation exposes sensitive personal data and stored miles to external software. If an agent misinterprets flight dates, miscalculates time zones, or erroneously burns miles on a non-refundable itinerary, frustrated passengers flood airline call centers, driving up customer support expenses.
Photo: The Verge coverage illustration, United Airlines archival photo. Source: The Verge
Stringent aviation safety mandates create an even steeper regulatory barrier. Under US federal aviation regulations, passengers must personally complete mandatory hazardous materials declarations during check-in, certifying that their baggage contains no prohibited or explosive items. Fully automated check-in services bypass this personal declaration, directly undermining the legal integrity of mandated aviation security procedures.
Passenger reactions to the new rule remain sharply divided. Proponents argue that contemporary LLM agents are prone to hallucinations and that granting them unchecked credit card authorization is a financial hazard. Critics counter that United is using safety concerns as a pretext to keep travelers locked inside clunky proprietary apps. Behind the friction lies an inevitable clash between consumer efficiency and institutional regulatory compliance.
When Technical Blocks Fall Short, Contracts Become the Ultimate Firewall
Defenses built purely in software are reaching their limits. In modern web environments, completely shutting out autonomous agents through code is an uphill battle. Modern client-side tools mimic human mouse trajectories and keystrokes, and even solve complex visual challenges. Overly aggressive bot blocking risks collateral damage, locking out legitimate human passengers trying to buy tickets. Pouring millions into perpetual anti-bot arms races frequently leads to diminishing returns.
United’s answer is replacing fragile code gates with enforceable legal contracts. The airline no longer needs to prove in real time whether a specific click originated from human fingertips or an agent script. By enshrining the right of cancellation into its terms of carriage, it can enforce penalties at check-in or the boarding gate. The looming penalty—a voided, non-refundable ticket and stranded travel plans—is potent enough to deter most consumers from relying on unauthorized AI tools.
As AI agents venture into real-world consumer transactions, the hardest obstacles rarely stem from software code. Developers have achieved breakthroughs in multi-step planning and model reasoning, but they are now running headfirst into entrenched commercial and legal structures. Modern enterprise frameworks demand clear accountability, compliance verification, and fraud liability—questions far more complex than making an API call succeed. Until these legal boundaries are settled, contracts will remain the ultimate arbiter of commerce. For AI agents to truly run our daily errands, they must first learn to navigate the rulebooks of law and business.
References:
- United Airlines Digital Trust Center: Third-Party AI Booking Statement.
- United Airlines Contract of Carriage: Revised November 11, 2026.
- CBS News Report: United Airlines bans AI agents from booking flights.
- The Verge Report: United Airlines says AI bots cannot book your flights.
- Bloomberg Law Report: United Airlines Bans AI Tools From Booking Flights for Passengers.
- Atmosphere Research Group: Commercial Aviation Market Analysis.
