United Airlines has announced plans to block AI agents from accessing its platforms to book flights or manage travel reservations on behalf of customers, pointing to cybersecurity vulnerabilities and potential conflicts with federal aviation regulations as the driving reasons behind the decision.

The carrier joins a growing list of major American companies that have moved to restrict or outright prohibit the use of autonomous AI assistants from interacting with their digital systems. The development reflects a broader challenge facing airlines, financial institutions, and other service providers as they attempt to distinguish between genuine human users and AI-driven tools operating on those users' behalf - particularly in cases where customers share their account login credentials directly with their AI assistants.

Security Risks at the Core of the Decision

United Airlines has made clear that the practice of granting AI tools access to personal accounts carries significant risks. When login credentials are handed over to third-party applications or assistants, those credentials can potentially be exposed through data breaches or security lapses, creating a range of problems for account holders.

"Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles."

The airline's MileagePlus loyalty program is specifically mentioned as an area of concern, with unauthorized or automated actions potentially leading to unintended redemptions or account modifications that customers may not have explicitly approved.

Federal Regulations Add Another Layer of Concern

Beyond the cybersecurity dimension, United Airlines flagged a separate issue tied to federal aviation requirements. Certain regulatory obligations - such as the requirement that a human passenger personally confirm during check-in that their baggage does not contain prohibited or dangerous substances - cannot legally or practically be fulfilled by an automated AI system acting on someone's behalf. Allowing AI agents to complete these steps could place both the airline and the traveler in violation of existing federal rules.

This regulatory concern adds a layer of complexity to the broader debate around AI agent adoption, suggesting that the issue is not purely technical but also has meaningful legal implications for the aviation sector.

Sweeping Policy Updates Across Booking Channels

United Airlines stated that its efforts to block unauthorized AI access will extend beyond its own apps and website. The airline is implementing restrictions both directly through its own digital platforms and indirectly through travel agencies and aggregator services that connect to its systems.

In a formal statement, the airline said: "United is taking steps to restrict access - directly within our digital platforms and indirectly via travel agencies and aggregators - to prohibit use by unauthorized, third-party personal AI agents or assistants. This work includes updates to our booking, ticketing and distribution policies."

The scope of these changes indicates that United is approaching the issue comprehensively, recognizing that AI agents can reach airline systems through multiple pathways beyond direct consumer-facing apps.

A Trend Taking Shape Across Industries

United's decision does not stand in isolation. It comes shortly after major financial institutions began raising similar alarms about the risks of customers sharing account access with AI tools. Bank of America was among the banks that recently issued guidance urging its customers to avoid sharing passwords or login details with AI assistants, citing comparable concerns about security and unauthorized account activity.

Together, these moves from both the aviation and banking sectors signal that a wider institutional resistance to unsanctioned AI agent access is beginning to take shape across American industries. As AI agents become more capable and more widely used by consumers, companies are being forced to establish clearer boundaries around what these tools are permitted to do - and how far their access should extend into sensitive personal accounts and regulated processes.

The tension between the convenience that AI agents promise and the security and compliance obligations that businesses must uphold is likely to remain a central challenge as adoption of these tools continues to grow.