The RealReal tightens bot defenses after an AI agent exploited its item hold system

The RealReal restricts agent shopping

The RealReal, an online consignment marketplace for secondhand luxury fashion, has reconfigured its bot defenses to make it substantially harder for AI shopping agents to buy things on its site. According to The Verge, the change follows a report the outlet published showing that an agent running on Meta's Muse could monopolize listings by abusing the site's item reservation system.

How the reservation exploit worked

On The RealReal, an item goes "on hold" and becomes unavailable to other buyers for 20 minutes after it enters a shopper's cart. The Verge demonstrated that Muse could be instructed to re-add a listing to the cart each time the 20-minute window expired, keeping the item locked away from everyone else for hours or longer. The tactic exploits a simple asymmetry: a hesitant human will eventually stop refreshing their cart, while an agent can loop the task indefinitely.

What the retailer changed

Chief technology officer Luke Friang told The Verge by email that the company had resolved the specific Muse scenario flagged in the original article. Under the new bot defense configuration, agents of all kinds face much steeper obstacles to signing in, filling a cart and completing a purchase. The crackdown is not total: Friang said agents can still pull up The RealReal's listings and send Muse users to product pages, and the retailer plans to keep hardening its protections as agent-driven shopping evolves. Meta did not respond to a request for comment from The Verge.

Retailers are starting to push back on agents

The RealReal is an early, concrete example of a retailer rebuilding its defenses around consumer AI agents, but the friction is building across the industry. Platforms are pitching agents as always-on assistants that schedule meetings and buy things on a user's behalf, and shopping is their breakout use case: Meta said on its Q3 earnings call that shopping is the most common activity on Muse so far, that purchases average over $200, and that 10 million people in the US downloaded the app within 40 days.

Stores have reasons to be wary. If shoppers stop visiting sites directly and instead browse through chatbots, retailers lose the direct relationship with their customers — and, as The Verge points out, the advertising revenue tied to it. Amazon is the most prominent retailer to have already blocked agents from shopping on its platform.

The RealReal incident highlights a different kind of damage. Agent traffic can quietly break small mechanics that marketplaces rely on, like a courtesy hold that assumes a buyer's patience is finite. Queue systems, flash drops and limited-inventory sales all rest on assumptions about human stamina that agents simply do not share.

Why it matters

This is one of the first clear cases of a website treating consumer AI agents as hostile traffic rather than as customers, and it is unlikely to be the last. Access to persistent, tireless automation has just expanded from companies running bots — or people hiring personal assistants — to anyone with a popular chatbot app. Every retailer that depends on fairness mechanisms like holds, waiting rooms or checkout limits is now effectively designing for two populations: people who tire, and software that does not. How sites draw that line — blocking agents entirely, as Amazon has done, or throttling specific actions, as The RealReal now does — will shape how much of the web agent traffic is allowed to touch.