The "Token Heist" Wiping Out AI Startups | Emily Sands (Stripe)
Emily Sands from Stripe discusses the rapid maturation of agentic commerce infrastructure, including the Agentic Commerce Protocol, Link wallet for agents, and shared payment tokens. She highlights token theft as an underappreciated fraud risk threatening AI company economics, and projects that agents will evolve from simple transaction executors to multifaceted economic actors running entire businesses within 12 months.
Summary
The conversation covers the significant evolution of agentic commerce over the past year. Sands explains that while a year ago agentic commerce was largely hypothetical, concrete infrastructure now exists with real companies building on it. She introduces a spectrum of agentic commerce experiences ranging from fully autonomous agent-led transactions using the Machine Payments Protocol to AI-assisted shopping with buy buttons in services like Google Gemini and ChatGPT.
Stripe's infrastructure includes the Agentic Commerce Protocol (ACP), a standardized way for businesses to expose catalogs and prices to agents while enabling secure transactions through shared payment tokens. This protocol is now adopted by major brands like Best Buy, Coach, and URBN, as well as commerce platforms like Shopify and Wix. Sands introduces a framework mirroring autonomous vehicle levels (L1-L5) for agentic commerce, with current consumer adoption hovering around L2 where humans delegate some selection to AI but retain final purchase decisions.
A critical development is the Link wallet for agents, which allows consumers to authorize agents for purchases while maintaining granular controls over spending limits, merchant categories, and transaction approval requirements. This addresses the trust concerns Sands hears from consumers worried about overspending and wrong purchases. The shared payment token primitive enables agents to execute transactions without ever accessing underlying credentials, with each transaction scored in real-time by Stripe Radar for fraud detection.
Sands emphasizes that token theft represents an existential threat to AI company economics unlike anything in traditional SaaS. She provides data showing more than one in six signups at AI companies are multi-account abuse, with fraudsters creating free trial accounts to drain credits without intent to convert. Other patterns include reselling stolen tokens on dark marketplaces, using stolen inference to generate content for fraudulent purposes, and completely cloning AI services with stolen tokens as the backend. This contrasts sharply with SaaS abuse because token consumption has real marginal costs, making fraud directly threaten profitability.
The conversation shifts to vibe deployment as the new constraint after vibe coding has been solved. Sands explains that while AI can now write complete applications in 20 minutes, deploying those apps requires navigating multiple services with separate onboarding flows. Stripe Projects solves this by letting agents sign up, configure, and integrate services needed for deployment directly from the command line, partnering with Vercel, Supabase, Cloudflare, Twilio, and 16 other services.
On monetization, Sands explains why AI companies cannot rely on traditional SaaS subscription models due to real marginal costs per token consumed. Most successful AI companies use hybrid billing combining fixed-fee subscriptions with usage-based charges above certain thresholds. She discusses how agents change this equation by consuming at machine speed, necessitating real-time metering and billing enabled through partnerships with Metronome for usage tracking and Tempo blockchain for instant payment settlement in stablecoins.
Regarding the broader startup ecosystem, Sands presents striking data: new business registrations are up 40-80% globally, the pace of new Stripe businesses launching has doubled, and importantly, Atlas startups from 2026 are tracking to five times the revenue of 2025 cohorts at similar lifecycle points. These new businesses are going global immediately and 70% of Emergent Labs' revenue comes from international sales despite founding in 2024. She attributes much of this dynamism to AI enabling individuals with ideas to build and deploy products without traditional technical barriers.
Looking forward, Sands predicts the most interesting development in the next 12 months will be agents evolving from simple buyers into multifaceted economic actors that also sell and provision infrastructure, potentially running complete businesses end-to-end. She emphasizes this represents moving beyond incremental efficiency gains to fundamentally reimagining economic systems where agents operate as autonomous micro-firms making independent business decisions rather than simply executing human-authorized purchases.
Key Insights
- More than one in six signups at AI companies represent multi-account abuse, where fraudsters create repeated free accounts to drain new user credits, representing an existential economic threat because token consumption has real marginal costs unlike SaaS.
- AI companies face a critical choice between closing off self-serve product access to prevent fraud or staying open to agent buyers but risking substantial monetary losses, with the solution being real-time token tracking and payment collection through streaming payments.
- Free trial abuse in AI products has more than doubled on Stripe in the last 6 months, with cottage industries built around exploiting 24-hour expiring credit cards, making this the second major token theft vector after multi-account abuse.
- Atlas startups from the 2026 cohort are tracking to five times the revenue of the 2025 cohort at comparable lifecycle points, with much of this acceleration driven by vibe coding and vibe deployment enabling faster time-to-market and immediate global distribution strategies.
- The fundamental shift in the next 12 months will be agents evolving from simple transaction executors into multifaceted economic actors that buy, sell, provision infrastructure, and run businesses end-to-end, requiring purpose-built financial infrastructure beyond traditional human-centric commerce stacks.
Topics
Transcript
[0:00] fraudsters have figured out that in AI you actually don't really need to steal money or credentials. You can just steal tokens. And the scale of this actually shocked me when I looked at the data. So more than one in six signups at AI companies are this kind of abuse. Whatever the dine and dash, but it's for token. When I go and ask my friends and family whether they'd be comfortable letting an agent buy things on their behalf, they usually jump straight to like, well, is it going to overspend and is it going to buy the wrong thing and can I stop it? And those are actually [0:30] all legitimate concerns. And it's not Emily…
Full transcript available for MurmurCast members
Sign Up to AccessMore from The MAD Podcast with Matt Turck
Why State Space Models Are Better Than Transformers #ai #podcast
State space models achieve better intuitive understanding of sequences by compressing entire sequences into a constant-sized cache or scratchpad at each step, rather than allowing random access to full sequences like transformers. This architectural constraint paradoxically makes them smarter at tasks requiring global sequence understanding.
The Physics of 4-Bit AI Quantization #ai #podcast
The speaker discusses how resource constraints in AI development necessitate more efficient computational approaches, particularly highlighting 4-bit quantization as a solution that dramatically reduces memory usage and energy consumption across various computing operations.
Why Moore's Law Has Been Dead for Years #ai #podcast
Moore's Law, originally an economic principle about doubling transistor density affordably every 24 months, has ceased delivering practical benefits for shrinking existing designs. In the post-Moore's Law era, success requires clever system optimization and accelerated computing rather than relying on transistor scaling.
The Real Reason Enterprises Need Open Source AI #ai #podcast
Every company's competitive advantage relies on proprietary secrets tied to their data and platform. Open source AI technologies enable enterprises to customize and implement AI solutions that leverage their unique, valuable data more effectively than off-the-shelf alternatives.
Why Open Source AI Won't Be Killed by Distillation Bans #ai #podcast
The speaker argues that rapid progress in transformational AI technology will inevitably occur due to significant community investment, and that control of AI development cannot be concentrated in the hands of a small group because innovation is distributed across many labs worldwide with diverse ideas.