Federal judge blocks Perplexity AI shopping agent in major legal victory for Amazon

The legal landscape of e-commerce has entered a transformative and contentious new era following a federal court order that effectively sidelines one of the most ambitious projects in agentic artificial intelligence.[1][2] A federal judge in San Francisco has granted Amazon a preliminary injunction against Perplexity AI, specifically targeting the startup’s Comet browser and its autonomous shopping agent.[1][3][4][5] The ruling represents a significant victory for established digital platforms seeking to maintain strict control over their proprietary ecosystems and user interfaces. At its core, the dispute highlights a burgeoning conflict between the traditional web, built on human-directed navigation and advertising, and a future where autonomous AI agents act as intermediaries for consumer transactions.

The court’s decision focuses on Perplexity’s Comet browser, a tool designed to allow users to delegate complex shopping tasks to an AI assistant.[1][6][5] This assistant was capable of searching for products, comparing prices, and navigating the checkout process—including accessing password-protected areas like Amazon Prime accounts—to complete purchases on a user’s behalf.[7] However, Senior U.S. District Judge Maxine Chesney found compelling evidence that this functionality likely violates both the federal Computer Fraud and Abuse Act and California’s specific computer fraud statutes.[3] The ruling establishes a critical legal distinction: while a user may give an AI agent permission to access their account, that permission does not automatically constitute authorization from the platform itself.[1][8][2][5]

The friction leading to this injunction began months prior, following a series of escalations between the retail titan and the AI startup. Legal filings reveal that Amazon issued at least five warnings to Perplexity starting in late 2024, demanding that the company cease using automated agents to interact with its storefront.[1] Amazon alleged that Perplexity deliberately attempted to evade technical barriers by disguising its AI agent as a standard Google Chrome browser session.[1] This "cat-and-mouse" game allegedly saw Perplexity release software updates to bypass Amazon’s blocks within 24 hours of their implementation.[1] In the eyes of the court, these actions demonstrated a willful bypass of the retailer’s terms of service and security protocols, leading to the requirement that Perplexity not only pause the agent’s shopping capabilities on Amazon but also destroy any data it had harvested from the platform.

Amazon’s legal argument centers on the preservation of a "trusted shopping experience" and the protection of customer data.[6][5][4][2] The company contends that third-party agents operating without oversight pose significant security risks, potentially exposing sensitive account information to hijacking or misuse.[3] Furthermore, Amazon argues that its terms of service explicitly prohibit the use of data mining, robots, or similar extraction tools.[9] By forcing the AI to stop, Amazon maintains it is protecting the integrity of its infrastructure, which it claims required thousands of dollars in engineering costs and numerous labor hours to defend against Perplexity's automated incursions.[6]

Perplexity has countered these claims with a more philosophical and competitive defense, framing the lawsuit as an attempt to stifle innovation and protect an aging business model. The startup argues that the real motivation behind Amazon’s legal pressure is not security, but the preservation of advertising revenue.[1][7] Because AI agents do not "have eyeballs," they do not view the sponsored product placements or pervasive advertisements that form a cornerstone of Amazon’s profitability. Perplexity asserts that agentic shopping is the natural evolution of e-commerce, offering consumers a more efficient way to find the best products at the lowest prices without being subjected to manipulative upselling or distracting ad campaigns. From this perspective, the legal battle is a clash between a platform’s right to control its interface and a consumer’s right to use the digital tools of their choice to interact with that platform.[2]

The implications of this ruling extend far beyond the two companies involved, as it sets a daunting precedent for the entire AI industry. Startups and tech giants alike are currently racing to develop "agents"—AI systems that don't just provide information but take action in the physical or digital world. If platforms can legally block these agents on the grounds of unauthorized access, the utility of such tools could be severely restricted.[5] An AI agent that cannot log into a user’s account to book a flight, order groceries, or manage a subscription loses much of its value proposition. This creates a potential "walled garden" scenario where only the platform owners themselves can offer agentic features.

Indeed, the competitive tension is underscored by Amazon’s own efforts in this space. The company has been aggressively developing its own AI shopping assistant, known as Rufus, and exploring other "agentic" features that keep the user within its own controlled environment. By blocking third-party agents like Comet, Amazon ensures that it remains the primary gatekeeper of the shopping journey, capturing all the behavioral data and advertising impressions associated with a purchase. This has led to accusations of anti-competitive behavior, with critics suggesting that the dominant players in e-commerce are using the legal system to prevent any disruptive technology from gaining a foothold.[9][2]

The court did acknowledge the potential hardship this injunction places on Perplexity, particularly regarding the loss of its first-mover advantage in the AI shopping space.[3] However, the judge ruled that because Comet can still be used on thousands of other websites, the injunction does not threaten the startup’s overall business viability.[1] Perplexity’s request for a one-billion-dollar bond to cover potential losses was denied, further cementing the immediate impact of the ruling. While the order is currently stayed for one week to allow Perplexity to seek an appeal from the Ninth Circuit Court of Appeals, the initial ruling sends a clear message: in the eyes of the law, the "digital front door" of a private corporation remains a gate that only the owner can unlock.

As the case moves forward, the legal community will be watching closely to see how the Ninth Circuit handles the nuances of "authorization" in the age of AI. The outcome will likely influence the development of future "robots.txt" standards and the ways in which AI companies negotiate for access to web data. If the preliminary injunction is upheld, it may force a shift in the AI industry toward a more collaborative approach, where startups must seek formal partnerships or pay for API access rather than relying on scraping or automated browser interaction.

In conclusion, the blocking of Perplexity’s shopping agent represents a pivotal moment for the future of autonomous commerce. It highlights the significant legal hurdles that "agentic" AI must clear when interfacing with the established giants of the internet. For now, the dream of a seamless, AI-driven shopping experience that works across all platforms remains stalled by the fundamental question of who truly owns the digital interaction: the user, the tool they choose to use, or the platform they are visiting. The resolution of this conflict will define the boundaries of the next generation of the web, determining whether it remains a series of interconnected platforms or evolves into a unified layer navigated by intelligent assistants.