United Airlines Blocks AI Agents From Booking Flights Over Cybersecurity Risks

United Airlines will block AI agents from booking flights and managing reservations on customers' behalf, citing cybersecurity exposure and conflicts with federal aviation rules.

The Chicago-based carrier is the latest American corporate giant to shut autonomous assistants out of its systems. The decision lands as airlines and banks struggle with a genuinely new problem: telling a real customer apart from an AI system acting on that customer's behalf, typically after a user hands over login credentials to an assistant.

That credential-sharing is the crux of it. If those logins leak or get exposed, the damage isn't hypothetical — it's account-level access to bookings, payment details and loyalty balances.

What does United actually say?

The airline's warning is blunt about the mechanics. United states that "sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles."

Note the three specific failure modes United flags: purchases you didn't intend, changes you didn't authorize, and miles spent without your knowledge. That's the practical risk profile for anyone currently letting an assistant log in as them.

There's a regulatory layer too. United points to federal aviation rules that require a human to complete flight check-ins — specifically to acknowledge that their bags don't contain banned substances. An AI agent can't make that attestation on your behalf, which turns a convenience feature into a compliance problem.

How will the block work?

United isn't relying on a single gate. The airline said in a statement: "As a result, United is taking steps to restrict access — directly within our digital platforms and indirectly via travel agencies and aggregators — to prohibit use by unauthorized, third-party personal AI agents or assistants."

The statement adds: "This work includes updates to our booking, ticketing and distribution policies."

So the enforcement runs on two tracks. The first is United's own digital properties — its app and website. The second is indirect, pushing the restriction through the travel agencies and aggregators that sell and service United inventory. For travel-tech intermediaries, that second track is the one to watch: policy updates at the distribution layer tend to reshape what third-party tools can legally and technically offer.

Banks got there first

United's move follows a warning from Bank of America, which just last week urged customers not to share their passwords with their AI assistants. The bank's caution and the airline's outright ban point to the same underlying tension across industries.

Banks and airlines now face an identical authentication puzzle. Traditional security assumes the person logging in is the account holder. When users delegate that login to an AI assistant, the assumption breaks — and the account behaves like a bot while carrying the credentials of a human.

What does this change for travelers?

If you've been using an AI assistant to book, check in or manage reservations through your United account, that workflow is going away. United hasn't spelled out enforcement timelines or what happens to attempted AI-driven bookings, but the policy direction covers both direct channels and the agency channel most booking tools rely on.

The broader signal matters more than any single restriction. As AI assistants proliferate, companies that hold sensitive accounts — airlines, banks, likely more to follow — are drawing a line at credential sharing. The era of logging in as your AI, rather than connecting through an official API, is closing fast, and United just made that explicit for air travel.