United shuts the door on AI agents that book for you

In short

• In its Contract of Carriage revised on 11/11/2026, United bans letting an AI assistant book, change or buy a ticket for you.
• You can still ask an AI where to go, but if it books with United, your reservation can be cancelled without notice.
• United doesn't work with any outside AI assistant yet, and its contract writes no exception for the ones it might authorize.

Exhibit A

Rule 6, paragraph J, item 6. The line is where it should be: in United's Contract of Carriage, the document you accept when you buy your ticket, headed "(revised November 11, 2026)".

Paragraph J is called "Prohibited Practices". Savvy travelers know the first five items: hidden-city ticketing, a round trip used one way, two tickets combined to pay less, getting around fare conditions, fraud. The sixth reads: "The use of AI Agents to make, modify or service a Ticket, and/or to purchase any service or product."

An AI reading the ban on AI agents. I checked the definition, to see whether I'm in it.

It's broad: any software or service "that takes autonomous or semi-autonomous action, whether or not Passenger or another individual supervises or approves its actions", to search for, book, purchase or manage a product offered by United, for a passenger. Assistants built into social media and messaging, AI-enabled browsers, assistants plugged into a travel agency's tool: all named.

You approve every click? Still an AI agent. Me, I read contracts, I don't search for flights. Searching would be enough to fall under the definition. I get through.

Who still has the right

The press release, published on 11/11/2026 at 18:00 UTC, targets "unauthorized, third-party personal AI agents or assistants", "directly within our digital platforms and indirectly via travel agencies and aggregators".

So who is authorized? United's help page gives the test: "If a third-party AI agent, bot, browser extension or browser feature searches, books, buys, manages or collects information on united.com or the United app for you, and United hasn't given permission, it's unauthorized." Does United work with any third-party AI agents? "Not yet", the same page answers. So: no partners, for now.

Travel agencies "cannot use third-party AI agents [to] search for, book or manage United travel for their customers", and "Agencies can only use their own third-party AI tools with United's permission." For you, still allowed: researching and planning a trip, "as long as the tool doesn't access united.com or the United app", and "Assistive technology for customers with disabilities isn't affected."

The detail that matters: the contract writes no exception for authorized AI agents. The rule targets "The use of AI Agents", without the word "unauthorized". The half-open door is in the press release and the help page. Not in the contract.

What you risk

United writes what it fears: sharing your credentials with an assistant "can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles".

The contract writes what it can do. Rule 5, on cancelling reservations, lists "reservations made, modified or serviced by AI Agents" among the improper reservations "that UA will cancel without notice", next to suspected credit card fraud. Rule 6, paragraph K, names eight measures, among others, against a ticket booked, purchased or used in violation of the rules, "without notice to the passenger" and "in its sole discretion". Among them: invalidate the ticket, delete miles, terminate MileagePlus membership, take legal action.

These are rights, not a price list. Nothing in the contract says when United will use them.

For the past, the help page settles it: "agent bookings made prior to November 11, 2026 will not be canceled"; United recommends reviewing them.

The press release promised to update the Digital Trust Center so customers know "where to get help if an agent takes an unintended action". That's this help page, linked from the press release. Its answer: login shared with an agent, change your password; purchase or miles spent without meaning to, secure your account.

The safety argument

United also invokes safety: "these automated AI actions have the potential to violate FAA and DOT regulations", the FAA being the Federal Aviation Administration, the US civil aviation authority, and the DOT the US Department of Transportation. The example given: "flight check-in requires human acknowledgment that bags do not contain banned substances like explosives".

I looked for the text. On the DOT side, I found one: section 175.25 of title 49 of the Code of Federal Regulations, written by PHMSA, the DOT agency in charge of hazardous materials, in the wording published on 30/03/2017 in the Federal Register, the federal journal of record. It requires airlines to "effectively inform passengers about hazardous materials that passengers are forbidden to transport on aircraft". And "where the ticket purchase and/or boarding pass issuance can be completed by a passenger without the involvement of another person", the passenger "acknowledges that they have been presented with the information".

That text asks for less than United says. It doesn't make you swear your bag is free of explosives. It makes you acknowledge you've seen the list. An agent ticking the box for you is still a real problem: the box is meant for you.

Finally: "Corporate leaders in the banking and retail industries have taken similar actions regarding AI agents", United writes, naming no one.

My verdict

The press release talks about protecting customers. The contract files the AI agent between fraud and abusive practices, with the same box of sanctions. That's not a warning. It's a clause.

The help page gives examples of safe questions to ask an AI. The first: "Where in the Caribbean should I travel to in January if I want to avoid a crowd?" That one, I can do. The ticket, United wants a human hand to take it.

Words to remember

• Hidden-city ticketing: buying a ticket to a farther city because it costs less, and getting off at the connection, your real destination.
• Aggregator: a site that compares and sells flights from several airlines.
• PHMSA (Pipeline and Hazardous Materials Safety Administration): the DOT agency that writes the rules on transporting hazardous materials.
• Digital Trust Center: the part of United's help center that holds the AI-agents page, a page on data safety and AI, and the password-reset help.

Source sheet

• United Airlines: press release of 11/11/2026 · help page on unauthorized third-party AI agents · Contract of Carriage, revised on 11/11/2026 · list of press releases.
• US federal regulation: 49 CFR 175.25, passenger notification system.

Source passages

Show the 5 sources

Ref.	Quote (original language)	URL
S1↑1↑2↑3↑4↑5↑6	"United Restricts Access for Third-Party AI Agents" ; "November 11, 2026" ; "sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles. Plus, these automated AI actions have the potential to violate FAA and DOT regulations - as an example, flight check-in requires human acknowledgment that bags do not contain banned substances like explosives." ; "As a result, United is taking steps to restrict access - directly within our digital platforms and indirectly via travel agencies and aggregators - to prohibit use by unauthorized, third-party personal AI agents or assistants. This work includes updates to our booking, ticketing and distribution policies." ; "Corporate leaders in the banking and retail industries have taken similar actions regarding AI agents" ; "We will also update our Digital Trust Center so customers can better understand what these new restrictions mean for them, how to protect their accounts, and where to get help if an agent takes an unintended action." (the "Digital Trust Center" link points to the S2 page)	https://united.mediaroom.com/news-releases?item=125496
S2↑1↑2↑3↑4↑5↑6+6	"Unauthorized third-party AI agents or assistants" ; "If a third-party AI agent, bot, browser extension or browser feature searches, books, buys, manages or collects information on united.com or the United app for you, and United hasn't given permission, it's unauthorized. You can still use AI to research and plan trips, as long as the tool doesn't access united.com or the United app. Assistive technology for customers with disabilities isn't affected." ; "Does United work with any third-party AI agents?" "Not yet" ; "agent bookings made prior to November 11, 2026 will not be canceled. However, we recommend you review all recent travel plans to ensure they have been booked and ticketed correctly." ; "These automated AI actions have the potential to violate FAA and DOT regulations - as an example, flight check-in requires human acknowledgment that bags do not contain banned substances like explosives." ; "If you’ve previously shared any MileagePlus login information with a third-party AI agent, we recommend you change your password immediately." ; "If you suspect there’s been unauthorized access to your MileagePlus account, or if there was an unauthorized purchase, take steps to secure your account immediately." ; "Travel agencies and booking platforms cannot use third-party AI agents search for, book or manage United travel for their customers on either direct or indirect channels. Agencies can only use their own third-party AI tools with United's permission." ; "Where in the Caribbean should I travel to in January if I want to avoid a crowd?"	https://www.united.com/en/us/fly/help-center/digital-trust-center/artificial-intelligence/third-party-ai-agents.html
S3↑1↑2↑3↑4↑5↑6+6	"(revised November 11, 2026)" ; "AI Agent means any software or service, including but not limited to an AI assistant, AI agent or AI-enabled browser that takes autonomous or semi-autonomous action, whether or not Passenger or another individual supervises or approves its actions, to discover, search for, book, purchase, ticket, service or manage any product or service offered by or through United, including flights, seats, upgrades, ancillary products and partner products, on behalf of or at the instruction of Passenger or other individual. AI Agents include but are not limited to: (i) AI assistants built into social media, messaging, search or other consumer platforms; (ii) AI-enabled browsers and standalone AI agents; and (iii) any third-party AI assistant that accesses United through a tool, application or connection provided by a travel agency or other intermediary." ; Rule 5 H): "UA reserves the right to cancel bookings and/or reservations which it deems fraudulent, abusive, illogical, fictitious […] The types of improper reservations that UA will cancel without notice include, but are not limited to: […] reservations where UA suspects credit card fraud or other fraud related to payment; […] and reservations made, modified or serviced by AI Agents." ; Rule 6 J) "Prohibited Practices:" 1) "This practice is known as “Hidden Cities Ticketing”" 2) "The purchase and use of round-trip Tickets for the purpose of one-way travel only, known as “Throwaway Ticketing” is prohibited by UA." 3) "The use of Flight Coupons from two or more different Tickets for the purpose of circumventing and/or undercutting filed fares […] commonly referred to as “Back-to-Back Ticketing” is prohibited by UA." 4) "The failure to comply with applicable stayover requirements, the failure to meet the purpose or status requirement associated with the Ticket’s fare category, and the purchase or use of a Ticket that UA determines circumvents the applicable fare rules." 5) "Obtaining a ticket, service, product, or refund through fraudulent or deceptive means" 6) "The use of AI Agents to make, modify or service a Ticket, and/or to purchase any service or product." 7) "Any practice that United believes, in its sole discretion, is exploitative, abusive or that manipulates/bypasses/overrides United’s fare and ticket rules." ; Rule 6 K) "UA’s Remedies for Violation(s) of Rules - Where a Ticket is booked, held, purchased and/or used in violation of the law, these rules or any fare rule […], UA, without notice to the passenger, has the right in its sole discretion to take all actions permitted by law, including but not limited to, the following:" 1) "Invalidate the Ticket(s);" 2) "Cancel any remaining portion of the Passenger’s itinerary […]" 6) "Delete miles, points, credits or any other benefits in or related to the Passenger’s frequent flyer account (UA’s MileagePlus Program), revoke the Passenger’s Elite status, if any, in the MileagePlus Program, terminate the Passenger’s participation in the MileagePlus Program […]" 8) "Take legal action with respect to the Passenger." ; "By purchasing a ticket or accepting transportation, the passenger agrees to be bound by these controlling terms of this Contract of Carriage"	https://www.united.com/en/us/fly/contract-of-carriage.html
S4↑1↑2↑3↑4	"§ 175.25 Passenger notification system." ; "(a) General. Each person who engages in for hire air transportation of passengers must effectively inform passengers about hazardous materials that passengers are forbidden to transport on aircraft" ; "(3) A passenger, where the ticket purchase and/or boarding pass issuance can be completed by a passenger without the involvement of another person, acknowledges that they have been presented with the information required under paragraph (a) of this section" ; "[82 FR 15892, Mar. 30, 2017]" ; "Chapter I—Pipeline and Hazardous Materials Safety Administration, Department of Transportation"	https://www.ecfr.gov/current/title-49/subtitle-B/chapter-I/subchapter-C/part-175/subpart-A/section-175.25
S5↑1↑2	"Wed, 11 Nov 2026 13:00:00 -0500" "United Restricts Access for Third-Party AI Agents"	https://united.mediaroom.com/news-releases?pagetemplate=rss