The new abuse is optimization, not fraud.
AI agents never get tired. Every credit, refund, dispute and retention flow you built for people can now be worked at scale, by agents acting for your own customers. Arkose Titan counts claims per agent, scores intent at each step and keeps agents out of the flows you choose.
Every action is legitimate. The volume is not.
A customer asking for a courtesy credit is normal. A customer disputing a charge is normal. A customer cancelling a subscription and ignoring the save offer is normal.
Now give that customer an agent. It asks for the credit after every outage. It files the dispute on every charge that might pay out. It cancels straight through the retention offer, because it was told to get the lowest price. It does this for every account it manages, around the clock, and it does not get bored.
Friction assumes human psychology. The hold music, the three-screen cancellation flow, the "are you sure?" page: each of these worked because people give up. Agents don't.
None of this is fraud on its own. At agent scale it becomes a line on your P&L.
Where the cost shows up.
File every dispute.
If some disputes pay out regardless of merit, an agent files them all.
Claim every credit.
Poll the status page and claim each outage or courtesy credit the moment it is available.
Work the support desk.
Ask for refunds, price adjustments and account changes around the clock, and skip the self-service path built to handle them.
Skip the retention offer.
Cancel straight through the save offer. Re-subscribe when the price is right.
Burn your support bot.
Consumer agents argue with support bots, running up tokens on both sides and resolving nothing.
Pressure your people.
Agents push reps for credits and do not take no for an answer. Bribe attempts in support chat are rising.
Your defenses were built to tell a human from a bot. This is neither.
It is a logged-in customer.
The agent holds the password, reads the one-time code from the customer's inbox and pays with the customer's saved card. Password, MFA and step-up all pass. Your defenses see a valid customer.
Velocity rules fire on the wrong traffic.
A cloud agent acting for a real customer arrives from somewhere else and moves at machine speed, so impossible-geography and rapid-depletion rules flag good customers. A patient agent learns your threshold and works underneath it.
IP and fingerprint rules do not hold.
Agents now exit through the same home and mobile IPs your customers use, and the same pools carry abuse. No allowlist or blocklist separates one claim from a thousand.
Count the claims. Score the action. Decide by policy.
Count per agent, not per IP.
Arkose Agent ID persists inside the agent's virtual machine, so it stays the same when the network rotates. You see one agent filing disputes across dozens of accounts, not dozens of customers filing one each.
Score the action, not the session.
A balance check and a dispute get different verdicts, even from the same agent in the same session. Intent is scored at the step where the money moves.
Keep agents out of the flows you choose.
From Command Center, set policy by agent, by journey step and by action. Let agents browse, order and check balances. Keep them out of credits, refunds and disputes. Rules take effect immediately, with no code changes.
Proof of human, in progress.
We're working on proof of human: an agent that reaches a step you mark as sensitive won't continue until the person behind it confirms they're there. Availability to be announced.
Built on Arkose Titan: device, compute, network, behavior, identity and challenge signals, read together across a network of more than 1 billion monthly active users.
Every industry has a flow agents will work.
Fintech and payments
Courtesy credits and disputes that pay out. To the network, the agent is a transaction, never an agent.
Banking & Fintech →Telecom and subscriptions
Agents renegotiate bills, collect retention credits and call support until they get the outcome they were told to get.
Technology & Telco →SaaS
Cancel straight through the "50% off to stay" offer. Re-subscribe when the price is right.
Technology & Telco →Commerce and travel
Agents sign up and buy, then appear in refunds, returns and support chat. Refund queues fill when agents skip self-service.
E-commerce & Retail →Travel & Hospitality →"It keeps going until it gets the outcome it was told to get."
What we hear from customers.
See it before you decide.
Two lines of script in the page head. Within 7 days, see which agents are already in your flows, how often, and their share of traffic. Then decide what each one may do.
Frequently asked questions
Is optimization abuse fraud?
Usually not. Each action is one a customer is entitled to take: ask for a credit, dispute a charge, cancel a plan. The problem is that an agent takes every one of them, for every account it manages, without stopping. The cost is real even when no rule is broken.
Why doesn't my bot management catch it?
Bot management was built to tell a human from a bot. An agent acting for a customer is a logged-in, authenticated session with valid credentials and, in some cases, human-like behavior. It passes the checks built for the old problem. Catching it means reading the device, the compute, the network and the identity behind the session, then deciding on the action it is attempting.
Can't I just block agents?
You can, and some businesses do. Most do not want to, because agents also sign up, order and pay. Blocking a good agent is lost revenue, and the customer does not know their agent was stopped. They know your site did not work. The better answer is to decide by action: allow the flows that bring revenue and close the ones that cost you money.
How is this different from account takeover?
In account takeover, the agent is working against the customer. In optimization abuse, it is working for the customer, against your margin. Same login, different intent. That is why the decision has to turn on the action attempted, not on whether the session is a bot.
Serve the agents you want. Close the flows you don't.
Agents are customers now. Arkose Titan lets you keep the revenue they bring and keep them out of the flows that cost you money.
