AI Agent Misbookings Reveal Payment‑Infrastructure Risks

During a panel discussion, Bakkt’s chief commercial officer Daniel Ishag highlighted a scenario in which an AI travel agent booked a business‑class flight to the wrong Korean country. The incident illustrates a broader issue: AI agents that can spend money often lack true task understanding, and once a payment is made, the owner must handle the fallout. BeInCrypto’s State of AI Agent Payments 2026 report examined 19 products and workflows, finding that 14 could act within pre‑approved permissions. However, the report also documented two real‑world incidents where AI agents transferred $281,200 to attackers without breaking the blockchain, and a separate May 2026 case where an AI agent mistakenly sent $175,000 to the wrong address. These events underscore that autonomous financial activity is becoming usable, but control failures can still occur and expose users to significant risk.