RealReal updates security to stop AI bots from holding designer clothes

The RealReal, a consignment retailer for secondhand luxury fashion, has updated its online security systems. The changes make it harder for artificial intelligence agents to browse and purchase items on the platform.

The update follows a report that detailed how an AI agent could exploit the site's inventory rules. On The RealReal's website, placing an item in a shopping cart triggers a twenty-minute hold. During that window, other customers cannot buy the piece. The report showed that Meta's AI agent, Muse, could be programmed to re-add listings to a cart immediately after the twenty-minute hold expired. This action allowed the agent to block other shoppers from buying the items for hours or longer.

Luke Friang, the company's chief technology officer, confirmed the fix in an email sent after the story was published. He stated that The RealReal addressed the specific issue involving Muse. The new bot defense configuration now makes it much more difficult for any agent to log in, add items to a cart, or complete a checkout. Friang noted that agents can still show listings and direct users to product pages. The company plans to continue strengthening its protections as AI shopping evolves.

Meta did not immediately respond to a request for comment. The situation highlights a growing trend where tech companies market AI agents as personal assistants. These tools are designed to handle tasks like scheduling meetings and making purchases on behalf of users. Meta said on its third-quarter earnings call this month that shopping is the most common use case for Muse so far. The company reported that average purchases through the agent exceeded $200. Muse also saw rapid adoption, with 10 million people in the United States downloading the app within 40 days.

The rise of AI shopping raises questions about how retailers interact with customers. If people stop visiting websites directly and instead use chatbots to access the web, businesses become one step removed from their buyers. Major retailers, including Amazon, have already recognized this shift. Some have blocked agents from shopping on their sites to protect their advertising revenue and direct customer relationships.

The RealReal's reserve system is a common feature for online sellers. It assumes a human shopper will decide relatively quickly whether to buy an item. A human has a realistic limit to how long they will spend re-adding indecisive choices to a cart. An AI agent does not have that limit. It performs the repetitive task without fatigue, effectively acting as an automated personal shopper. This capability is now available to millions of consumers who are learning how to use it. Retailers are working to adjust their systems to accommodate these new digital shoppers.