Amazon Vs. Perplexity: The CFAA Case That Decides Whether AI Agents Can Visit Your Website

The lines between human browsing and AI-assisted automation are collapsing faster than the law can keep pace. A federal court battle between Amazon and Perplexity is now forcing judges to answer a question that will reshape how every website operator thinks about access, authorization, and the future of digital commerce.

This isn’t just a legal skirmish between two tech giants—it’s the first major test of whether AI agents have the right to act on your behalf online. The outcome will ripple through retail, SaaS platforms, booking sites, and every marketplace that currently assumes a visitor is human. If you run a website, monetize traffic, or advertise programmatically, this case demands your attention.

The Comet Controversy: What Actually Happened

Perplexity launched Comet, an AI-powered browser capable of logging into user accounts with stored credentials.

• Comet can browse Amazon on a user’s behalf, viewing products and navigating account pages
• It completes purchases through Amazon’s standard checkout flow using the user’s authorization
• Amazon filed suit in the Northern District of California, claiming unauthorized access under the Computer Fraud and Abuse Act (CFAA)
• The lawsuit also raised trademark and unfair-competition concerns about how Comet renders Amazon’s interface
• Amazon’s core argument: their terms of service determine who is authorized, not the user’s instructions to an AI
• The case represents the first major legal challenge to agent-as-visitor rights in U.S. courts

What makes this different from typical scraping disputes is the explicit user consent layer. Comet doesn’t sneak in—it walks through the front door with keys the user handed over willingly.

The District Court’s Initial Ruling

On March 10, 2026, Judge Maxine Chesney sided with Amazon at the preliminary injunction stage.

• The order blocked Comet from accessing password-protected portions of Amazon.com
• Account pages, order history, and checkout flows became off-limits to Perplexity’s agent
• Public-facing Amazon pages remained accessible under the ruling
• The judge accepted Amazon’s theory that terms of service govern authorization, not user intent
• A user’s instruction to delegate access does not automatically extend that authorization to the AI agent itself
• The ruling treated the agent as a separate entity requiring independent permission

This interpretation carries enormous implications. Under this logic, every website’s terms of service become a potential barrier that no AI agent can cross—regardless of what the actual human user wants.

The Ninth Circuit Steps In

The appellate court’s response was unusually swift and telling.

• Roughly one week after the District Court ruling, the Ninth Circuit paused the injunction
• Comet could continue operating on Amazon’s logged-in pages during the appeal
• Appellate stays of preliminary injunctions are rare, signaling potential weakness in Amazon’s CFAA theory
• Procedurally, this pause suggests the higher court sees merit in Perplexity’s position
• Oral arguments are scheduled for June 11, 2026, in Seattle
• The speed of appellate intervention caught many legal observers by surprise

When appellate courts move this quickly to pause a lower court’s injunction, it usually means they see fundamental problems with the underlying reasoning.

Perplexity’s Appellate Argument

On May 8, 2026, Perplexity filed its appellate brief with a forceful rebuttal.

• The brief called Amazon’s CFAA theory “a fundamental misfit” for AI agents acting under user authorization
• Perplexity argues the CFAA was designed for 1986-era hacking intrusions, not delegated browsing
• The user remains the authorized party at all times—Comet simply acts as their delegate
• Amazon’s contractual terms cannot manufacture federal criminal-law violations from lawful user-authorized access
• The company positions this as a user rights issue, not just a corporate dispute
• Mozilla and the Electronic Frontier Foundation filed amicus briefs supporting Perplexity’s interpretation

The historical context matters here. The CFAA emerged in an era when unauthorized access meant breaking into systems without permission. The statute was never designed to address scenarios where a user explicitly grants an AI tool permission to act on their behalf.

Why Website Operators Should Care

This case will directly affect how you think about traffic, authorization, and terms of service.

• If Amazon wins, every website can effectively ban AI agents through contractual language
• Terms of service would become the ultimate gatekeepers, overriding explicit user consent
• Retailers, marketplaces, and SaaS platforms would gain new tools to block automated competition
• If Perplexity wins, AI agents operating under user authorization gain legal legitimacy
• Bot detection and access control strategies would need fundamental rethinking
• The precedent applies to any logged-in experience, from banking dashboards to subscription services

Most website operators will face this question within the next year. The Ninth Circuit’s ruling will determine whether you can legally exclude AI agents that users have explicitly authorized.

The Broader Implications for Digital Advertising

For those in programmatic advertising, the ripple effects extend far beyond e-commerce.

• AI agents browsing on behalf of users complicate attribution and conversion tracking
• Traditional assumptions about unique human visitors may need revision
• Advertisers must consider whether impressions served to AI agents carry the same value
• Publisher inventory calculations could shift if agent traffic becomes legally protected
• Fraud detection systems will require updates to distinguish authorized AI browsing from malicious bots
• The definition of “genuine user engagement” enters uncharted territory

The advertising ecosystem has always assumed that a browser session represents a human decision-maker. That assumption is eroding, and this case will accelerate the erosion regardless of outcome.

What Happens Next

The legal timeline is tight, and the industry is watching.

• Oral arguments take place June 11, 2026, in Seattle
• A Ninth Circuit ruling could arrive within months
• The precedent will bind courts across nine Western states immediately
• Other circuits may follow or diverge, potentially creating a Supreme Court question
• Website operators should begin policy reviews now rather than waiting for resolution
• Terms of service language around “authorized access” deserves immediate legal scrutiny

Companies that rely on restricting automated access should prepare contingency strategies. Those building AI agent tools should understand the legal boundaries they’re testing.

Final Thoughts

The Amazon-Perplexity dispute is not really about shopping or browsers. It’s about whether website operators can override user intent through contractual fine print. It’s about whether a 1986 anti-hacking statute should govern a 2026 world where AI agents are becoming extensions of human will.

For marketers, publishers, and advertisers, the practical question is simpler: can your users authorize AI to act for them on your site? The answer will reshape conversion tracking, fraud prevention, access control, and competitive dynamics across every digital vertical.

The web was built for humans. The courts are now deciding whether it must accommodate their AI proxies.

by Thomas Theodoridis

Source: https://www.dailyclicks.net