· Cybersecurity news · October 2026 blocking wave

AI Agents Are Getting Blocked: The Full List of Sites Saying No (October 2026)

AI agents 2026 hit a wall in October. In less than a month, the web's biggest names went from tolerating AI agents to actively blocking them: Amazon shut out Meta's Muse on September 20, 2026, JPMorgan CEO Jamie Dimon warned on October 13 about "liability transfer," and then, across October 17-18, Yelp, Delta, JPMorgan Chase, and Charles Schwab blocked Muse, xAI's Grok, and OpenAI's agents — with Citibank and Bank of America joining the block list on October 18.

This is the full list of sites saying no to AI agents in October 2026, the timeline of how it happened, and what it means if you run a website.

Bottom line: as of October 18, 2026, at least 9 major sites actively block AI agents — led by banks over liability fears — while 4 big retailers and Shopify are doing the opposite, signing agents up as a sales channel. The web is splitting into agent-open and agent-closed zones.

What is the October 2026 agent-blocking wave?

The October 2026 agent-blocking wave is the cluster of announcements between September 20 and October 18, 2026, in which major websites began refusing traffic from AI agents. The pattern: Amazon moved first against Meta's Muse; banking and travel followed after liability warnings; retailers split the other way, cutting purchase deals with Meta. It is the first large-scale rejection of the assumption that AI agents 2026 can browse the whole open web.

Timeline: from Amazon's first block to the banking wave

September 20, 2026 — Amazon blocks Meta's Muse agent, the first major platform to shut an agent out.

October 13, 2026 — JPMorgan CEO Jamie Dimon warns about "liability transfer" to AI agents: nobody has settled who pays when an agent acts wrongly.

October 17, 2026 — The wave breaks: Yelp, Delta, JPMorgan Chase, and Charles Schwab block Meta's Muse, xAI's Grok, and OpenAI's agents. A Charles Schwab executive says "the client cannot control the agent and the broker cannot control it either."

October 18, 2026 — Citibank and Bank of America join the block list, extending the wall across US banking. From 1 blocker on September 20 to 9 by October 18: the block list grew 800% in 28 days.

Timeline compiled from technology-outlet reporting, October 2026. Details not independently verified.

Who is blocking, and who is welcoming AI agents?

Blocking: Amazon (Muse), Yelp (agents unless paid tier), Delta, JPMorgan Chase, Charles Schwab, Citibank, Bank of America — plus Reddit, Stack Overflow, and LinkedIn, which block AI scraping. Welcoming: Walmart, Gap, Sephora, and Best Buy (Muse purchase deals), Shopify (open agent network), and the agent makers themselves — Meta, xAI, OpenAI. Track every site live in the Agent-Access Index.

What does the blocking wave mean for site owners running AI agents 2026 strategies?

It means "the agent will just browse it" is no longer a plan. If your business depends on agents reaching third-party sites — price comparison, booking, lead research — those doors are closing one announcement at a time. And if you run a site, doing nothing is now a choice with consequences: every blocked competitor is a signal to your own legal team. The winners will be sites with a deliberate agent policy: published rules, agent detection, and a liability answer before the first incident.

Checker: is your site ready for the agent-blocking era?

Six scored questions. This is a deterministic self-assessment — your answers are scored against fixed best practices, nothing is sent anywhere.

1. Do you know which AI agents (Muse, Grok, OpenAI agents) currently request your site?

2. Does your robots.txt or terms of service address AI agents specifically?

3. If an agent buys on behalf of a customer, who is liable for a wrong charge?

4. Can your checkout distinguish an agent session from a human buyer?

5. Do you offer an API or agent program (like Shopify's agent network)?

6. If three more major sites block agents tomorrow, is your traffic plan affected?

How to make your site ready for the agent era in 5 steps

  1. Publish an agent policy. State in your terms whether AI agents may access your site, and on what terms — block, paid tier, or welcome.
  2. Detect agent traffic. Log agent user-agents separately from human traffic so you know the scale of what you are governing.
  3. Answer the liability question. Write down who pays when an agent transacts wrongly on your site, before a customer dispute forces the answer.
  4. Offer a machine lane. If agents bring you business, give them an API or agent program like Shopify's network instead of the human checkout.
  5. Review monthly. Agent policies are moving weekly in 2026. Re-check the Agent-Access Index and your own logs every month.

The Ingenious AI suite — 11 security platforms covering agent monitoring, disclosure compliance, and attack-surface watch — opens early access to teams navigating the agent era. Get early access on WhatsApp.

Frequently asked questions

Which sites are blocking AI agents in October 2026?

As reported by tech outlets in October 2026: Amazon blocked Meta's Muse on September 20; Yelp, Delta, JPMorgan Chase, and Charles Schwab blocked Muse, xAI's Grok, and OpenAI's agents on October 17; Citibank and Bank of America joined on October 18. Reddit, Stack Overflow, and LinkedIn also block AI scraping. Reported statuses, not independently verified.

Why did Amazon block Muse in September 2026?

Amazon's September 20, 2026 block of Meta's Muse was the first major platform move against an AI shopping agent — the opening shot of the October blocking wave. Outlets reported it as a defensive move over automated shopping traffic; Amazon's full reasoning was not publicly detailed.

What did Jamie Dimon warn about AI agents?

On October 13, 2026, JPMorgan CEO Jamie Dimon warned about 'liability transfer' — the unresolved question of who pays when an AI agent books, buys, or moves money incorrectly. Four days later, his own bank was blocking agents.

Which retailers allow AI agents to make purchases?

Walmart, Gap, Sephora, and Best Buy signed deals with Meta letting the Muse agent make purchases for shoppers, and Shopify opened its network to third-party shopping agents — the opposite bet from the banks.

Will more sites block AI agents?

The trend points that way for banking, travel, and data-rich platforms, where liability and scraping costs dominate. Retailers that profit from agent-driven sales are likely to keep welcoming them. Track it live in the Agent-Access Index.