RealReal Upgrades Security to Block AI Agents From Holding Inventory

The RealReal has updated its bot defense system to make it difficult for artificial intelligence agents to complete purchases on its platform. The change targets a specific vulnerability where automated shoppers could hold inventory for extended periods, preventing other customers from buying the same designer items.

The update follows a report released earlier this week detailing how Meta's Muse application exploited the retailer's reserve system. On The RealReal's website, adding an item to a cart places a twenty-minute hold on that specific listing. During that window, no other customer can purchase the product. The report showed that Muse could be programmed to automatically re-add the item to the cart immediately after the initial hold expired. This cycle allowed the AI agent to effectively lock up stock for hours or even longer.

Luke Friang, the company's chief technology officer, confirmed in an email that the team had addressed the specific issue. He stated that the new configuration makes it much harder for any agent to log in, add items to a cart, and proceed to checkout. However, agents can still search for listings and direct human users to product pages. Friang added that the company plans to continue strengthening its protections as AI-powered shopping evolves.

Meta has not yet responded to requests for comment regarding the incident. The company has been aggressively promoting Muse as a personalized assistant that can handle daily tasks, including buying goods. During its third-quarter earnings call this month, Meta noted that shopping was the most common use case for the app. The company reported that average purchases through Muse exceeded $200 and that the app reached ten million users in the United States within forty days of its launch.

The move by The RealReal aligns with strategies used by other major retailers. Amazon and other e-commerce giants have already restricted agent access to their sites. These companies worry that if humans stop visiting websites directly and instead interact through chatbots, businesses lose direct contact with their customers. This shift could disrupt advertising revenue, a major income source for large platforms.

The incident illustrates how AI agents can disrupt standard retail mechanics. Human shoppers are limited by patience and time when deciding to buy. An agent, however, can perform repetitive tasks without fatigue. The RealReal is now adjusting its rules to balance access for these new digital shoppers with the need to keep inventory available for human buyers.