United Airlines Bans AI Agents From Booking Flights, Citing Security and Regulatory Risks

Quick Facts

• United Airlines revised its Contract of Carriage on Nov. 11, 2026, adding Rule 6.J.6 to ban AI agents from making, modifying, or servicing reservations.
• Violations can result in canceled bookings, invalidated tickets, banned passengers, deleted miles, and revoked MileagePlus status.
• Delta, American, and Southwest allow AI-assisted bookings under varying conditions, leaving United as the first major U.S. carrier to impose a written ban.

United Airlines became the first U.S. carrier to formally ban AI agents from booking flights when it updated its Contract of Carriage on Nov. 11, 2026, adding a new rule that blocks autonomous and semi-autonomous software from making, modifying, or servicing tickets or purchasing any related product or service.

The updated policy covers agents operating across united.com, the United app, and through travel agencies and aggregators. The prohibition applies whether or not a passenger is watching and approving each step.

What the Policy Covers

Rule 1 of the revised contract defines AI agents broadly, including AI assistants built into consumer platforms, AI browsers, and third-party tools accessed through travel agency systems. Named targets include Meta's Muse agent and OpenAI's Dots. AI tools can still search fares and check availability, but cannot complete a purchase.

Rule 5.H gives United the right to cancel reservations made by AI agents without notice. Rule 6.K spells out the penalties: invalidated tickets, passenger bans, deleted miles, revoked Elite status, and terminated MileagePlus membership.

What Prompted the Move

United cited two concerns: cybersecurity and federal regulation. The airline said sharing account credentials with third-party AI assistants exposes sensitive information and can lead to unintended purchases or account changes. CEO Scott Kirby put it plainly: 'I don't want to create another middleman.'

Regulatory compliance is a second driver. The Department of Transportation requires that only a human can acknowledge during check-in that their bag contains no explosives. An AI agent cannot legally make that declaration. United says autonomous software cannot satisfy that requirement.

Analyst Henry Harteveldt of Atmosphere Research Group said United is unwilling to welcome 'yet another, and potentially even more powerful, intermediary' into its sales chain. He also noted that AI-driven flight searches carry a direct cost: 'Flight searches cost airlines money, and undoubtedly United wants to avoid the expense associated with the surge of AI bot flight searches.'

Enforcement Has Limits

The policy has a practical gap. If an AI agent books a United flight through a third-party platform like Expedia, United's systems see only an Expedia transaction. The airline has no visibility into whether a human or a bot executed that booking. The contract language addresses agents that reach United through intermediaries, but the booking systems cannot detect the difference.

How Rivals Compare

Major competitors are taking a different approach. Delta allows AI assistants to complete bookings if they authenticate using a customer's SkyMiles number and password, placing responsibility on the customer to oversee the transaction. American Airlines said some AI agents, including Muse, can already buy tickets through certain partners, and that customers can direct an agent to book directly on American's site.

Southwest launched a ChatGPT plugin in October, letting travelers search for flights through the AI platform before completing the purchase on Southwest's site. Southwest called it the first phase of its AI-powered booking plans.

Broader Corporate Trend

United's move fits a pattern forming across large U.S. companies. JPMorgan Chase and Amazon have both moved to block AI agents from accessing their platforms over similar security and privacy concerns. Bank of America last week warned customers not to share passwords with AI assistants.

On Nov. 10, the day before United's announcement, OpenAI acquired AI travel startup Odessia, with founder Francis Davidson joining the company to work on the future of travel. The timing signals that the collision between AI agents and airline booking systems is accelerating, not receding. United has drawn a clear line. The rest of the industry is still deciding where to stand.