A new report from Apify reveals how agentic e-commerce is reshaping the web. Here’s what it means for your store and your data.
If you think the visitors hitting your website are mostly humans, you need to read this.
Apify — one of the leading web infrastructure companies powering AI automation — recently published a detailed breakdown of what they’re calling agentic e-commerce: a new era where AI agents don’t just assist shoppers, they become the shopper. These agents crawl merchant websites autonomously, compare prices, extract product data, and execute purchases — all without a human ever touching a keyboard.
This isn’t a future prediction. It’s happening right now, at scale, on your site.
What Apify’s Report Actually Says
According to Apify’s analysis, agentic e-commerce platforms are built on specialized infrastructure designed specifically to crawl and interact with merchant websites. These agents use tools like Browser Use — an LLM-powered automation framework — to navigate pages, click buttons, and extract structured data from dynamic, JavaScript-rendered storefronts in real time.
They bypass anti-bot measures. They work through proxies. They’re scalable.
New protocols like the Universal Commerce Protocol (UCP) are even standardizing how AI agents interact with storefronts — meaning this infrastructure is actively being built for the express purpose of crawling sites like yours.
And there’s a payment layer too. Apify integrates with networks like Skyfire, allowing agents to execute purchases using pre-funded payment tokens — no human credentials required. These aren’t scrapers window shopping. Some of them are ready to buy.
The Split That Matters Most
Here’s the nuance that most security tools completely miss — and where Apify’s report gets really interesting for store owners.
Not all of this AI traffic is bad.
Some of these agents are legitimate AI shopping assistants — think Perplexity Shopping, Google’s AI overviews, or emerging autonomous purchasing agents acting on behalf of real consumers. They index your products, compare your prices, and send qualified buyers your way. You want those agents on your site.
But mixed in with the good agents? A different category entirely: scrapers harvesting your pricing data for competitors, bad bots inflating your traffic numbers and polluting your analytics, and AI crawlers running up your server costs without ever contributing a dollar of revenue.
Your existing tools can’t tell the difference. Your GA4 dashboard can’t tell the difference. That session that just bounced in 0.3 seconds? Could be a legitimate AI buyer that indexed your catalog. Could be a competitor scraping your pricing. You have no idea.
What This Means for Your Marketing Data
This is where the problem hits closest to home for most e-commerce store owners and the agencies managing their accounts.
Every bot visit that registers in your analytics is a lie your data is telling you about your audience.
- Your conversion rate looks lower than it actually is — bots inflate session counts without converting
- Your bounce rate skews artificially — bot visits are often zero-engagement single-page hits
- Your paid traffic ROI suffers — ad spend attributed to pages that bots crawled first poisons your attribution models
- Your audience segments are contaminated — remarketing lists built on bot-inflated traffic mean your ads reach the wrong people
Agencies: when you report performance to clients, you’re reporting numbers that include this noise. That 2.4% conversion rate? Almost certainly higher once you strip out non-human traffic. The campaigns that “aren’t working” might actually be performing — masked by bot inflation.
The Security Layer No One Talks About
The Apify report also highlights something the security-focused side of your business needs to hear.
These agents are sophisticated. They use LLM-powered browsers that behave like real users — scrolling, clicking, pausing. Traditional security layers that look for simple bot signatures miss them entirely. Your WAF doesn’t flag them. Cloudflare’s basic rules don’t catch them.
And some of them aren’t shopping. They’re mapping your site architecture, harvesting your product catalog for a competitor’s feed, or probing for vulnerabilities at a pace no human could match.
Your existing security stack was built for the last era of bots. The new era requires a fundamentally different layer of intelligence.
You Need to See What’s Actually on Your Site
This is exactly the problem BotLens was built to solve.
BotLens integrates directly with Google Analytics — the tool you’re already using — and classifies every visitor across five distinct traffic types:
- Real human visitors — your actual audience
- AI shopping agents — legitimate agents that may be sending you buyers
- AI scrapers — crawlers harvesting your data without permission
- Bad bots — traffic that pollutes your data and wastes your budget
- Search crawlers — legitimate indexing bots from Google, Bing, and others
That split between AI shopping agents and AI scrapers? That’s the call that no other tool makes clearly. BotLens makes it native, inside GA4, where your team already lives.
For e-commerce store owners: you finally know which AI agents are legitimate traffic sources worth welcoming — and which ones are costing you money.
For agencies: you can show clients their real performance numbers, not the bot-inflated version. That’s a conversation that wins renewals.
The Apify Report Is a Signal, Not a Warning
The agentic e-commerce infrastructure Apify describes isn’t a threat to stop. It’s a shift to understand.
AI agents are going to crawl your site. That’s not a question. The question is whether you know which ones are doing it, what they’re doing when they get there, and what it’s costing you in data quality and wasted spend.
The businesses that instrument for this now — who build clean, classified traffic data before their competitors do — will make faster, smarter decisions at every level.
See every bot. Move decisively.
→ Start your free 30-day trial at GetBotLens.com