OpenAI on November 13, 2026 introduced ChatGPT Wallet, a payment layer that lets its dots agents complete purchases on a user's behalf without the agent or the merchant ever receiving the user's actual card details. OpenAI says the wallet was built in partnership with American Express, Mastercard and Visa, and calls it the first wallet that lets agents pay without access to real card numbers while requiring a security check for every purchase.
The flow is designed around explicit approval. Users add a card once. Before each purchase, the dot presents the items, the total and the selected card, and the user approves with a security check such as Face ID or a fingerprint scan. OpenAI says each approval creates a record of exactly what the user authorized the agent to buy. After approval, the payment network issues a payment token, a substitute card number with its own security code and expiration date, and the charge lands on the user's selected card. OpenAI says users keep their card's existing rewards and protections for eligible disputes.
Availability is deliberately narrow at launch. Wallet begins rolling out in dots to ChatGPT Pro subscribers in the US who are 18 or older and have eligible US-issued cards. OpenAI's help center says Wallet works only in conversations with a dot, not in regular Chat, Work or standalone Codex threads, and lists eligible American Express, Chase, Mastercard and Visa cards; Chase cards must be added by the primary cardholder. The Verge and The Next Web both report the same US Pro-only starting point.
For merchants, OpenAI's developer guide says businesses receive a network token rather than the full card number, can use the Payment Account Reference to associate that token with the underlying account, and should not reuse the credential for a separate purchase because the customer consents only to the specific transaction. The business continues to handle the order, fulfillment, customer support and fraud decisions.
Alongside the launch, OpenAI published a Commerce Partner Playbook aimed at sites that may unintentionally block agent purchases. It recommends that businesses claim their listing in ChatGPT and upload product feeds, configure CDNs and firewalls to recognize signed agent requests using Web Bot Auth, and work with payment and risk providers to cut unnecessary declines. OpenAI says it is working with fraud-prevention firms Forter, Riskified, Sardine and Signifyd and with payment providers Adyen, Checkout.com and Stripe so their systems can recognize legitimate agent purchases. Businesses can also build plugins or add WebMCP tools so agents can check availability and manage carts directly.
Executives from all three networks are quoted in OpenAI's announcement. American Express's Luke Gebb said ChatGPT Wallet is the company's first Agentic Commerce Experiences integration, and Mastercard's Sherri Haymond said an agent making a purchase "should strengthen, not bypass, the trust built into payments."
OpenAI says it eventually expects users to delegate purchases entirely by setting limits such as spending caps, purchase categories or time windows, and pre-approving purchases within them. That fully delegated mode is not part of today's launch: for now, every ChatGPT Wallet purchase still requires the user's biometric sign-off. DigiEditorial's account is based on OpenAI's announcement, help center and developer documentation, corroborated by reporting from The Verge and The Next Web.