The RealReal Tightens Bot Defenses Against AI Shopping Agents

The RealReal has reconfigured the bot defenses on its site to make it harder for AI shopping agents to log in, add items to cart, and check out, chief technology officer Luke Friang said in an email, according to The Verge. The change follows a Verge report that found Meta's AI agent, Muse, could be used to tie up designer merchandise for hours.

What loophole did Meta's Muse exploit?

The RealReal's site places an item "on hold" for 20 minutes once it lands in a shopper's cart, making it unavailable to anyone else during that window, The Verge reported. The outlet instructed Muse to keep re-adding the same listings to a cart the instant each 20-minute hold lapsed, effectively locking other buyers out of purchasing those items for hours or longer — all without the agent ever completing a sale.

What did The RealReal's CTO say?

Friang told The Verge that the company "addressed the Muse use case" flagged in the outlet's reporting. The RealReal's updated bot-defense configuration, he said, now makes it "much more difficult for all agents to log in, add items to cart, and check out." The statement ties the fix directly to the specific exploit The Verge demonstrated rather than a broader policy against automated shopping tools.

"The RealReal's bot defense configuration now makes it much more difficult for all agents to log in, add items to cart, and check out." — Luke Friang, chief technology officer, The RealReal

Can AI agents still browse The RealReal?

Yes. Agents will still be able to surface listings from The RealReal and direct Muse users to pages on the site, per The Verge's reporting. The restriction targets the transaction layer — logging in, cart activity, and checkout — not product discovery or search.

Why does this matter beyond one retailer?

The episode is a concrete test case for a problem retailers are starting to confront as AI shopping agents proliferate: inventory systems built around human browsing speeds and short holds can be repurposed to deny access to real customers, even without a fraudulent purchase ever going through. Meta's Muse is part of the company's broader push into AI-driven consumer products; HTT News has separately reported on Meta's new AI-focused subscription plans, part of the same wave of agentic AI tools now interacting with third-party commerce sites.

For luxury consignment platforms like The RealReal, where inventory is singular and non-restocking, the stakes of a cart-hold exploit are higher than on sites selling mass-produced goods — a single blocked listing represents one unrepeatable item, not a SKU that can simply be reordered.

The RealReal has not said whether it plans further changes to its reserve-hold system itself, such as shortening the 20-minute window, according to the available reporting. The company's response so far has been limited to bot-detection rules governing how agents authenticate and transact on the site.