Amazon and Perplexity Face Off at a US Appeals Court over Whether a 1986 Fraud Law Covers AI Agents Shopping on Accounts

Key Takeaways

• 9th Circuit questions AI's legal intent under 1986 fraud statute
• Perplexity's Comet tool allegedly accessed Amazon accounts without consent
• Case could set precedent for liability of autonomous AI agents
• Judge previously blocked Comet after finding unlawful system access
• Outcome may reshape e‑commerce security and AI developer responsibilities

Pulse Analysis

The legal battle between Amazon and Perplexity highlights a growing gap between legacy cyber‑crime laws and modern AI capabilities. The Computer Fraud and Abuse Act (CFAA), enacted in 1986, was designed to target human hackers, not autonomous software agents that can navigate websites, log in, and complete purchases. Courts now face the challenge of interpreting terms like "access" and "intent" when an AI, operating under a set of algorithms, initiates actions that would be illegal if performed by a person. This case forces judges to consider whether the CFAA’s language can be stretched to cover machine‑driven conduct or whether new legislation is required.

At the heart of the dispute is Perplexity's Comet browser, which integrates a conversational AI that can place orders on behalf of users. Amazon alleges the tool logged into shopper accounts without explicit permission, effectively bypassing authentication safeguards. Perplexity argues that the AI acts as a tool of the user, shifting liability to the individual who initiates the request. The 9th Circuit’s inquiry into whether an AI can possess "unlawful intent" is pivotal; a finding that intent can be imputed to the developer could expose AI firms to significant legal exposure and reshape product design strategies.

Beyond the courtroom, the outcome will reverberate across the e‑commerce ecosystem and the broader AI industry. A decision that extends CFAA liability to AI agents would likely prompt platforms to implement stricter API controls, enforce clearer user consent mechanisms, and accelerate the development of AI governance frameworks. Conversely, a narrow ruling could embolden developers to push more autonomous functionalities, raising concerns about consumer protection and data security. Stakeholders—from retailers to AI startups—must monitor this case closely, as it may set the legal baseline for how autonomous agents are regulated in the digital marketplace.