AI shopping comes with its own perils this Black Friday

Retailers face rising operational risk as AI-driven 'agentic shopping' has grown roughly 200% in the past six months while fraudsters' use of AI has increased nearly tenfold, forcing investments in identity verification and fraud prevention. Though McKinsey and industry executives flag AI and digital tools as the biggest 2026 opportunity for fashion firms, consumer confidence remains weak — European sentiment below long-term averages since mid-2022 and U.S. confidence at its lowest since April in November — suggesting uneven spending and pressure on value propositions during the holiday season.

Analysis

Market structure: Winners are identity/fraud and cloud infrastructure vendors that can productize “AI vs AI” detection — think OKTA, CRWD, PANW and ZS, plus cloud hosts (MSFT, AMZN, GOOGL) and payment firms with strong risk engines (PYPL, SQ). Losers are mid/low‑margin online retailers (KSS, M) and payment processors that absorb chargebacks; a sustained chargeback rise of +0.5–1.0 percentage points would meaningfully compress retail gross margins and shift pricing power to fraud vendors. Competitive dynamics favor platforms that expose semantically rich APIs (SHOP, CMS/CDN vendors) because brands that feed better data to shopping models will win share.

Risk assessment: Near term (days–weeks) we expect spikes around Black Friday with clustered fraud attempts; medium term (3–12 months) the big risks are regulatory clarification (EU AI Act enforcement / US CFPB guidance) and a high‑profile breach. Tail scenarios: a systemic agentic‑fraud wave pushing issuer chargeback rates >1% could force card networks to reprice interchange or compel indemnity rules — equity downside 20–40% for exposed retailers in that scenario. Hidden dependency: retailers reliant on third‑party content feeds and cookies are more attackable; migrating to authenticated APIs is a multi‑quarter project.

Trade implications: Tactical long exposure to cybersecurity/identity (CRWD, OKTA, PANW) and cloud infra (MSFT, AMZN) for 3–12 months, funded by selective shorts in vulnerable specialty apparel/department stores (KSS, M) and small‑cap omni retailers. Use options: buy 6–9 month calls on CRWD/PANW (capture corporate budget cycle) and 3‑month put spreads on KSS going into holiday results; rotate +300bp into cyber/payments vs -200bp retail over next 4–8 weeks. Entry: initiate trades 0–4 weeks before Black Friday to capture seasonality, re‑asses after Dec monthlies; exit or trim if fraud vendor bookings growth drops >300bps QoQ.

Contrarian angles: The market may overreact to headlines advocating blanket AI bans — that would be self‑harmful for retailers capturing AI-driven demand. Mispricing exists where SHOP and cloud/API providers are punished today despite being critical enablers of secured agentic shopping; historical parallel: fraud spikes in early e‑commerce led to lasting share gains for Visa/PayPal. Unintended consequence: too much prevention (friction) can cut conversion >200 basis points, so winners will be those who balance friction with strong authentication.

Key Decisions for Investors

• Establish a 2–3% long position in CRWD and a 1–2% long in OKTA (combined 3–5% AUM) over 6–12 months to capture accelerated enterprise spend on identity/fraud; trim if next two quarterly ARR growth prints fall >300bps below consensus or if net retention drops below 100%.
• Buy 6–9 month ATM+10–25% call options (size ~0.5% AUM each) on PANW and ZS to lever upside from corporate security budgets; target a 30–60% option return and cut if implied vol falls >40% or IVR drops below 30%.
• Implement a pair trade: go long OKTA (1.5% AUM) / short KSS (1.5% AUM) for 3–6 months — rationale: identity/fraud vendor revenue should reprice higher while mid‑tier department stores face margin shock if chargebacks +0.5%+. Exit if KSS same‑store sales beat consensus by >200bps or if chargebacks remain flat for two consecutive months.
• Rotate portfolio: overweight cybersecurity & cloud infra by +300bp and underweight small/mid‑cap retail by -200bp over the next 4–8 weeks; monitor EU AI Act implementation and US CFPB guidance within 60–180 days as binary catalysts to increase/decrease positions.