Estimated reading time: 5 minutes · Last updated:
United Airlines is blocking unauthorized, third-party personal AI agents from booking flights and managing reservations for its customers. The airline said the restriction will apply directly on its own digital platforms and indirectly through travel agencies and aggregators. Changes to its booking, ticketing and distribution policies will back the block. United gave two reasons. Handing account logins to an AI assistant can expose sensitive data and trigger purchases, account changes or MileagePlus redemptions nobody intended. Some federal aviation rules also expect a human, not software, to complete steps such as check-in. The move puts United alongside Bank of America, which has told its own customers to keep their passwords away from AI assistants.
This work includes updates to our booking, ticketing and distribution policies.
United Airlines
Key takeaways
- The block: United Airlines is restricting unauthorized, third-party personal AI agents from booking flights and managing reservations on behalf of its customers.
- Where it applies: United says the limits cover its own digital platforms directly and travel agencies and aggregators indirectly, through updated booking, ticketing and distribution policies.
- Security reason: United warns that giving AI assistants account credentials can expose sensitive information and lead to unintended purchases, account changes or use of MileagePlus miles.
- Regulatory reason: United says AI agents risk breaching federal aviation rules, which require a human to complete check-in and confirm that bags hold no banned substances.
Table of contents
Why United Says Shared Logins Are the Weak Point
An AI agent is software that carries out tasks for a person, such as searching fares, paying for a ticket or changing a reservation, rather than only answering questions. To act on an airline account, an agent often relies on the traveller's own username and password. That handoff is the core of United's objection.
United said that “sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles.” MileagePlus is the airline's loyalty programme. The last item in that list means points a customer has built up could be spent without the customer ever deciding to spend them.
The wider security concern is straightforward. A password held by an outside assistant is one more place it can leak from. A leaked login then exposes everything the account contains, and the airline has no clean way to tell a genuine booking from a fraudulent one.
How a Federal Check-In Rule Collides With Automation
United's second argument is regulatory rather than technical. The airline pointed to federal aviation rules that expect a person to finish check-in. That step includes confirming that checked bags contain no banned substances.
A declaration of that kind only means something if a human makes it. An assistant clicking through the check-in screen for a traveller would complete the form without anyone actually standing behind the answer. That is the compliance risk United cited when it announced the restriction.
The same problem runs through both travel and banking. Companies in both sectors are finding it hard to separate real customers from AI systems acting for them. When a user hands an assistant a login, the traffic reaching the airline looks exactly like the customer, even when no person is present at the keyboard.
Where the Block Applies, From United's Apps to Aggregators
The restriction works on two fronts. United said it is limiting access within its own digital platforms. It is also limiting access through travel agencies and aggregators, the third parties that resell or compare its fares. The airline added that “This work includes updates to our booking, ticketing and distribution policies.”
Several practical details remain open. United's wording targets unauthorized, third-party personal AI agents or assistants. That suggests some automated access could still be permitted, but the airline did not set out which tools fall on each side of that line or when the revised policies take effect.
Banks are pressing the same point. In the week before United's move, Bank of America urged customers not to share their passwords with AI assistants. Both companies treat credential sharing as the hazard, rather than condemning the assistants outright.
| Company | Action | Stated concern | Channels covered |
|---|---|---|---|
| United Airlines | Restricting unauthorized third-party personal AI agents | Credential exposure, unintended purchases, federal check-in rules | Own platforms, travel agencies, aggregators |
| Bank of America | Urging customers not to share passwords with AI assistants | Password sharing with AI assistants | Customer accounts |
What the restriction could mean
The case for
- Keeping credentials inside United's own systems reduces the number of places a MileagePlus login can leak from.
- Requiring a human at check-in keeps the banned-substances declaration tied to an actual traveller.
The case against
- Customers who rely on AI assistants to manage trips lose that option on United unless their tool counts as authorized.
- Travel agencies and aggregators must now show their traffic is not an unauthorized personal agent, which United has not yet defined in detail.
What to be careful about
- Travellers who have already given an AI assistant their United login remain exposed to the credential leaks United describes until they change it.
- Until United publishes its updated distribution policies, agencies and aggregators cannot be sure which automated access will be blocked.
- Unintended bookings or MileagePlus redemptions made by an assistant before the restriction takes hold may be hard for customers to dispute.
The bottom line
United's decision rests on two arguments that reinforce each other. A shared password multiplies the places a login can leak, and an assistant using that password looks identical to the customer it serves. Federal check-in rules add a second constraint, because a declaration about what is packed in a bag is meant to come from a person. The open question is the boundary. United has drawn its line around unauthorized, personal assistants without naming which tools qualify or when the policy changes arrive. Until it does, people using AI agents for travel face uncertainty on United, and agencies and aggregators will need to prove their traffic is not an assistant acting on someone's login.
What to watch
- Watch for United to publish its revised booking, ticketing and distribution policies, which should show which AI tools count as authorized; no date has been set.
- Watch whether travel agencies and aggregators change how they connect to United's systems in response; no timetable has been announced.
- Watch for other airlines or banks to follow United and Bank of America with their own limits on AI assistants; none has been announced.
Frequently asked questions
Can I still use an AI assistant to book a United flight?
United says it is restricting unauthorized, third-party personal AI agents both on its own platforms and through travel agencies and aggregators. The airline has not listed which tools, if any, remain authorized.
Why does United think AI assistants put MileagePlus miles at risk?
United warns that an assistant holding your credentials may take actions you did not intend, including using MileagePlus miles, making purchases or changing your account. If those credentials leak, anyone holding them gains the same access.
Why can't an AI agent check in for a flight?
United says federal aviation rules require a human to complete check-in, partly to confirm that bags contain no banned substances. An agent completing that step would leave the declaration without a person behind it.
Related reading
