What agentic commerce does to your discount codes

You're reading the Monday report in mid-October. Agentic commerce has a row under sales channels now: a few orders from AI channels, enough to open the details.

One Copilot order used your creator's code, but the creator's affiliate dashboard shows no sale. Another came through ChatGPT with your email welcome code, from someone who never subscribed. You ask where the codes came from. Nobody knows whether the agent found them, the shopper pasted them or a code site supplied them.

You need to account for both orders before you set the peak-season offers. This guide covers how AI agents find and use codes, where each channel takes them, what it costs, and what to set before peak.

How do AI shopping agents use discount codes?#

In two ways: protocol agents submit a code to your store and receive an applied or rejected response; browser agents type into the discount field like a shopper and can try several codes.

The Universal Commerce Protocol, UCP, co-developed by Google and Shopify, has a discount extension for carts and checkouts. Rejections carry machine-readable reasons such as discount_code_expired. Google's implementation guide requires merchants to advertise discount support in their UCP profile. Allbirds' Shopify store advertised that extension at /.well-known/ucp, as checked on 17 October 2026. [Universal Commerce Protocol, Aug 2026] (opens the source) [Google for Developers, Oct 2026] (opens the source)

OpenAI and Stripe made discount codes ACP's first extension. Its draft discount RFC describes applied and rejected lists and says rate limiting should be applied to prevent discount code enumeration attacks. The checkout schema supports discounts.codes from its 30 January 2026 version. Under both protocols, your store decides whether the code qualifies, using its own rules. [Agentic Commerce Protocol, Jan 2026] (opens the source) [Agentic Commerce Protocol, Jul 2026] (opens the source)

AI shopping agents can also operate a browser. Google says Chrome's auto browse can apply discount codes while shopping. It is a US preview for paying Google AI Pro and Ultra subscribers and pauses before purchases. [Google, Jan 2026] (opens the source) A creator's December 2025 Comet tour showed it entering codes and pressing Apply until one worked when asked; that is a hands-on account, not a measured success rate. [Beard.fm, Dec 2025] (opens the source)

Asmal Digital's March 2026 video, AI Agent Found Me Discount Codes Automatically, shows a general-purpose agent finding and testing codes at Namecheap, rather than a Shopify store.

hCaptcha reported agents attempting coupon brute-forcing in its October 2025 tests across browser agents. It sells bot detection, and these were abuse tests, not evidence that every shopping agent behaves that way. [hCaptcha, Oct 2025] (opens the source) The practical difference is patience: an agent can work through the list your shopper would abandon.

An assistant suggesting a code is also different from an agent testing it.

ChatGPT's suggested codes worked 41% of the time in that study. [SimplyCodes, Sep 2026] (opens the source)

Coupons.com's test of ChatGPT, Gemini and Claude across 101 US retailers, run in August and published in September 2026, found 24.5% of the AI-returned codes it could test worked. [Coupons.com, Sep 2026] (opens the source)

Both are studies by coupon sites that promote their own verified codes. For your private offers, the working codes are the exposure that matters: if an unintended buyer can redeem the welcome code, finding it was enough.

The opposite problem affects public offers. A protocol agent cannot see a code that exists only in your storefront banner or popup. Shopify's UCP conversation with Tobi Lütke and Ilya Grigorik explains that problem from about 37:34.

Vanessa Lee's Editions explainer describes stores declaring discount and loyalty support through UCP from about 19:25.

Where does the discount code get typed in each AI channel?#

It depends on the channel: ChatGPT sends Shopify buyers to your own checkout; Google AI Mode and Gemini, Copilot and Meta support codes and automatic discounts through Shopify direct checkout, where client-side tracking doesn't run. Amazon Buy for Me takes no promo codes.

OpenAI launched Instant Checkout in September 2025 and pulled back on 24 March 2026; its current Shopify route refers buyers to the store's checkout. [OpenAI, Sep 2025] (opens the source) [OpenAI, Mar 2026] (opens the source) OpenAI's help still mentions Instant Checkout for some eligible products and merchants. [OpenAI Help Center, Oct 2026] (opens the source) Wired reported in March 2026 that Walmart found in-chat purchases converted three times lower than sending shoppers to Walmart.com. [Wired, Mar 2026] (opens the source)

The direct-checkout distinction matters to your affiliate manager. A creator's code can reduce the order while the client-side tag that credits the creator never fires. Storefront post-purchase tools also lose the page where they would normally run.

Shopify's agentic storefronts sales data combines referral and direct-checkout sales. You therefore need to distinguish the checkout route before interpreting missing tracking. [Shopify Help Center, Oct 2026] (opens the source)

Can you keep a code out of agentic commerce channels?#

No. A Shopify code works on every sales channel you have set up, and you cannot restrict redemption by channel. There is no setting today that makes a code work on your website but refuse an AI channel. [Shopify Help Center, Oct 2026] (opens the source)

Discount Functions can reject entered codes with a custom message, but the October 2026 input schema has no sales-channel, order-source or agent field. Your developer cannot build a channel test from a field that isn't there. A Function owned by a code discount also cannot reject entered codes. [Shopify developer docs, Oct 2026] (opens the source)

Publishing an offer to a channel and restricting who can redeem its code are separate decisions. Your private code needs eligibility rules that still hold when someone else finds it.

What does it cost when an agent finds a code?#

The cost is the discount on each order where the buyer wouldn't otherwise have had a working code. An agent that tests codes can find the usable ones, making a leaked list more useful than the list alone.

Keep channel fees separate from discount spend. Shopify says ChatGPT selling has no associated fees, and Google's direct checkout adds none beyond payment processing. [Shopify Help Center, Oct 2026] (opens the source) [Shopify Help Center, Oct 2026] (opens the source) Microsoft says it takes no commission or affiliate fee today; Amazon says merchants currently pay nothing to participate and it gets no Buy for Me referral fee. [Microsoft Advertising, Oct 2026] (opens the source) [Amazon, Oct 2026] (opens the source)

Morgan Stanley's December 2025 base case puts agentic shopping at 1% of US ecommerce spend in 2026. It is a research estimate, not a count of orders. [Morgan Stanley, Dec 2025] (opens the source)

Bain's November 2025 analysis says AI supplies up to 25% of referral traffic for some retailers but under 1% of total traffic. Bain sells consulting services around this market. [Bain & Company, Nov 2025] (opens the source)

The sceptical reading deserves space. A peer-reviewed study of 973 websites found ChatGPT below 0.2% of traffic and converting below most traditional channels, using global data from August 2024 to July 2025. [Marketing Science (INFORMS), Maximilian Kaiser and Christian Schulze, Apr 2026] (opens the source) Shopify president Harley Finkelstein also qualified AI order growth as coming from a small base in the February 2026 call, available here as an unofficial transcript. [Platform Aeronaut Transcripts (unofficial), Feb 2026] (opens the source) Volume remains small in those sources; code exposure isn't confined to that volume, because the same leaked code works elsewhere too.

Why does this matter more this peak season?#

Shopify calls 2026 the first holiday season agentic shopping goes mainstream, its eligible channels are on by default, and finding deals tops shoppers' planned AI tasks. [Shopify, Oct 2026] (opens the source) [Shopify Help Center, Oct 2026] (opens the source)

The default setting, "Allow Shopify to manage for me", enables Shopify Catalog access, direct checkout where supported and auto-enrolment in new AI channels. Turning off that product access can take up to 7 days. That makes your settings review an October job, before Cyber Week. [Shopify Help Center, Oct 2026] (opens the source)

Google's Universal Cart, launched in the US on 15 October 2026 across Search and the Gemini app, adds another place where codes appear: the cart itself shows relevant promo codes. Google doesn't say where they come from. You can't assume your promotion feed is the only source. [Google, Oct 2026] (opens the source)

What can you set yourself before Black Friday?#

You can choose channel participation, publish intended offers, restrict private-code eligibility and check how orders get credited. Give each decision an owner before your freeze.

1. Review Sales channels › Agentic in Shopify admin. You or your ecommerce lead should decide per channel rather than leave "Allow Shopify to manage for me" enabled. The catch: Shopify Catalog access can take up to 7 days to switch off. Turning off direct checkout sends buyers to your online store, retaining its pixels but adding a step. Unlisted product status or seo.hidden also hides products from search engines. [Shopify Help Center, Oct 2026] (opens the source) If you want to leave Amazon Buy for Me, use the address in Amazon's merchant FAQ. [Amazon, Oct 2026] (opens the source)

2. Publish the offers you want agents to find. Shopify discounts reach Google as promotions when your feed owner publishes them to the Google & YouTube channel. Free shipping, buy-X-get-Y, customer-targeted and open-ended discounts without an end date aren't supported; automatic discounts are US only. The catch: Google's page doesn't specify AI Mode as a promotions destination, and Universal Cart doesn't identify its code sources. [Google Merchant Center Help, Oct 2026] (opens the source) [Google, Oct 2026] (opens the source)

3. Make private codes unique, single-use or customer-specific. Before peak, have your email and affiliate owners replace reusable private offers. The guides to unique vs shared discount codes and stopping discount code leaks cover that choice. The catch: a shared code already circulating stays out. You can retire it and replace it; you cannot recall the copies.

4. Know what a discount Function can and can't do. Your developer can use code rejection with a custom message, subject to the Function's ownership and whether the code is rejectable. It cannot read a channel or agent field. [Shopify developer docs, Oct 2026] (opens the source) Check your Shopify discount combinations too. The catch: your rule applies across shoppers and channels; the Function doesn't supply an AI-only condition.

5. Measure code use on AI-channel orders in Shopify, not GA. You and finance should use order attribution and the sales reports under Sales channels › Agentic to compare the share of AI-channel orders using a code with your store average. Shopify provides channel or referrer attribution in admin. [Shopify Help Center, Oct 2026] (opens the source) The catch: those reports combine referral and direct-checkout sales, and direct checkout has no client-side pixels. They cannot tell you who found the code. [Shopify Help Center, Oct 2026] (opens the source) [Shopify Help Center, Oct 2026] (opens the source)

6. Ask your affiliate platform how it credits direct-checkout orders. Your affiliate manager needs an answer before promising creators their normal reporting. Codes still apply, but click-based credit may not survive. ACP's checkout spec has carried an optional, cookie-independent affiliate attribution field since its December 2025 version, though its RFC is still labelled a proposal and nothing says your platform receives it. [Agentic Commerce Protocol, Dec 2025] (opens the source) Use creator codes and affiliate links to frame the discussion. The catch: until your platform confirms another mechanism, code-based credit is the only surviving signal you can plan around in direct checkout.

7. Freeze code changes before peak. You and whoever owns the freeze should agree the live codes, replacements and decision owner using the code freeze guide. The catch: a freeze stops new leaks you create. It doesn't recall codes already out, so eligibility has to be right beforehand.

How Benson handles AI agents and your codes#

Benson provides storefront agent detection and analytics free on every plan, then code controls on Stop and above. It shows you which storefront sessions come from recognised AI agents and automated browsers, and what they did with codes; observe mode changes nothing on your store.

On Stop and above, agent policy sets per-visit code limits for AI agents and automation. A shopper with one code is left alone. Where supported, Benson rejects codes from automation by rule at Shopify checkout, for sessions that start on your storefront. The AI shopping page describes those controls.

The offer feed, also on Stop and above, gives agents public offers from live campaigns only. Private codes never appear in it. Your public offer can be readable without making your private code available through the same feed.

Attribution integrity on Stop and above records the affiliate id, click id or UTM your shopper arrived with. It shows when an extension or AI agent overwrites it late in the funnel, with an estimate of the commission moved. Benson's checkout code policies can run against a holdout, a comparison group that keeps the previous experience, so you measure the result on your store. The leaked codes playbook covers the sequence.

Film 07 / 09Leaked codes triageWatch0:59

No storefront system sees every agent, and some automation, including fetch-only agents, can slip past. Orders completed entirely inside an AI channel's direct checkout never touch your storefront, so storefront controls don't apply there. Your code eligibility still needs the restrictions in step 3.

To start, add Benson from the Shopify App Store and leave it in observe mode through a normal week to see how many of your sessions are agents before you decide what to limit.

Sources#

• Universal Commerce Protocol: Discount extension, version 2026-08-25 (Aug 2026)
• Google for Developers: UCP: Promo codes (Oct 2026)
• Agentic Commerce Protocol: RFC: Discount Extension (Jan 2026)
• Agentic Commerce Protocol: Spec repository (Jul 2026)
• Google: The new era of browsing: Putting Gemini to work in Chrome (Jan 2026)
• Beard.fm: Overview: A Tour of the Perplexity Comet AI Browser (Dec 2025)
• hCaptcha: Report: Browser Agent Safety is an Afterthought for Vendors (Oct 2025)
• SimplyCodes: We Tested 35,398 AI Promo Codes (Sep 2026)
• Coupons.com: Why AI can't find good discount codes (Sep 2026)
• Shopify Help Center: Selling on ChatGPT (Oct 2026)
• OpenAI: Powering product discovery in ChatGPT (Mar 2026)
• Shopify Help Center: Selling on Google AI Mode and Gemini (Oct 2026)
• Shopify Help Center: Selling on Microsoft Copilot (Oct 2026)
• Shopify Help Center: Selling on Meta (Oct 2026)
• Amazon: Buy for Me, customer FAQ (Oct 2026)
• Amazon: Shop Direct / Buy for Me merchant FAQ (Oct 2026)
• OpenAI: Buy it in ChatGPT: Instant Checkout and the Agentic Commerce Protocol (Sep 2025)
• OpenAI Help Center: Shopping with ChatGPT search (Oct 2026)
• Wired: Why Walmart and OpenAI Are Shaking Up Their Agentic Shopping Deal (Mar 2026)
• Shopify Help Center: Managing agentic storefronts (Oct 2026)
• Shopify Help Center: Managing sales channel settings for discounts (Oct 2026)
• Shopify developer docs: Discount Function API, version 2026-10 (Oct 2026)
• Shopify: Shopify merchants generate record-breaking $14.6 billion in Black Friday Cyber Monday sales (Dec 2025)
• Adobe Digital Insights: US holiday shopping season to hit record $275.1 billion online (Sep 2026)
• Aswath Damodaran, NYU Stern: Operating and Net Margins by Industry Sector (US) (Jan 2026)
• Microsoft Advertising: Agentic Commerce (Oct 2026)
• Morgan Stanley: Here Come the Shopping Bots (Dec 2025)
• Bain & Company: Agentic AI poised to disrupt retail (Nov 2025)
• Marketing Science (INFORMS), Maximilian Kaiser and Christian Schulze: Frontiers: ChatGPT Referrals to E-Commerce Websites: How Do LLMs Compare Against Traditional Channels? (Apr 2026)
• Platform Aeronaut Transcripts (unofficial): SHOP Q4 2025 Earnings Call Transcript (Feb 2026)
• Shopify: Welcome to the first holiday season of the agentic era (Oct 2026)
• Shopify and Sapio Research: 2026 Global Holiday Retail Report (Oct 2026)
• Google: An intelligent new shopping cart (Oct 2026)
• Google Merchant Center Help: How to sync sale price and promotions from Shopify to Google (Oct 2026)
• Shopify Help Center: Shopify agentic storefronts (Oct 2026)
• Agentic Commerce Protocol: RFC: Agentic Checkout, Affiliate Attribution (Dec 2025)
• Shopify Community: Redeeming a real loyalty reward through Shopify checkout (Sep 2026)
• Shopify Community: Agentic Storefronts and post-purchase tools in in-chat checkout (Mar 2026)
• Asmal Digital: AI Agent Found Me Discount Codes Automatically (Mar 2026)
• Shopify: Tobi Lütke x Ilya Grigorik: Building the Universal Commerce Protocol (May 2026)
• ethercycle: Shopify VP Vanessa Lee Explains the Everywhere Edition (Jun 2026)
• Benson guide: Unique vs shared discount codes
• Benson guide: Stop discount code leaks on Shopify
• Benson guide: Shopify discount combinations
• Benson guide: Creator codes and affiliate links
• Benson guide: Black Friday code freeze
• Benson: AI shopping
• Benson playbook: Leaked codes