The RealReal Blocks AI Shopping Agents From Holding Luxury Stock

The RealReal has reconfigured its bot defenses after a demonstration showed that Meta's Muse agent could block other shoppers from buying designer items for hours. The change lands days after The Verge reported the exploit. The secondhand luxury consignment retailer now makes it far harder for AI agents to log in, add items to a cart, and check out.

What was the exploit?

The RealReal's website places an item on hold for 20 minutes once a shopper puts it in a cart. During that window, no other customer can buy the product. The flaw was simple. As The Verge demonstrated, an agent instructed through Meta's Muse could re-add a listing to the cart the moment each 20-minute hold expired. The result: a single automated shopper could keep an item locked away for hours or longer.

Chief technology officer Luke Friang confirmed the fix in an email after The Verge published its story. He said the company had addressed the Muse use case the report flagged.

What does the new defense actually do?

The updated configuration raises friction for all agents at three points: login, adding items to cart, and checkout. That is a deliberate narrowing of access rather than a full ban.

Agents will still surface The RealReal listings and direct Muse users to product pages, Friang said. He added that the company will continue to strengthen protections as AI-powered online shopping evolves. That last phrase deserves scrutiny. It is a promise of future work, not a description of finished defenses. Meta did not immediately respond to a request for comment.

The company has not said how it distinguishes agent traffic from human traffic, nor what happens to customers who use browser automation for accessibility. Those details are absent from the announcement.

How big is agent-driven shopping?

The numbers explain why a consignment retailer now treats bot defense as urgent. Meta said on its Q3 earnings call this month that shopping was the most common use case for Muse so far. Purchases made through the agent averaged over $200.

Muse has also moved fast. Meta said 10 million people in the United States downloaded the app in 40 days. That adoption rate puts automated purchasing power in the hands of millions of consumers who are, in the source's words, just beginning to learn how to take advantage of it.

Why are retailers pushing back?

The commercial stakes extend beyond one consignment site. If humans stop visiting websites directly and access the web through chatbots, businesses become one step removed from their own customers. That distance threatens revenue models built on direct engagement, especially advertising.

Amazon has already recognized this risk and blocked agents from shopping on its site, according to the source. The RealReal now sits in the same camp, though with a narrower restriction that still permits listing discovery.

There is also a structural asymmetry at work. A human shopper has a realistic limit to how long they will re-add designer clothing to a cart while deciding. An agent does not care. Repetitive cart management is exactly the kind of busywork a wealthy shopper might once have paid a personal assistant to perform.

What comes next?

The RealReal's move signals a broader collision between agent platforms and retailers who depend on direct customer relationships. Meta is selling agents as always-on personal assistants that schedule meetings, organize events, and purchase goods for billions of people; retailers are playing catch-up, each deciding independently where to draw the line. Expect more blocked checkouts, more friction at login, and further quiet reconfigurations of bot defenses as automated shopping volume grows and the revenue implications for platform-dependent retailers become clear.