Stripe just added Link to Instinct, the red-hot AI agent in iMessage & WhatsApp whose buyers spend over $1,300 a month through it.
Instinct is the invite-only agent you text on iMessage or WhatsApp that has every VC on Twitter excited.
It books flights. Buys tickets. Cancels subscriptions for you.
The company closed a $250M Series B this week at $2.5B, up from $100M a few weeks ago, and it's pre-revenue.
What makes it different from ChatGPT is that it's really smart and in many cases it "just works" like magic.
I saw one user whose agent got them IMAX tickets for The Odyssey by waiting until 3:09am for a cancellation and grabbing it.
I've used it to book restaurant reservations and haircuts for the kids. It found a free slot in my calendar, booked it, and dropped in the diary invite. Lovely!
I've also watched it get blocked by merchants and fail to authenticate.
Things like Instinct work like magic until they don't.
Under the hood, you used to store your card details with Instinct, and it would try and do 2FA for you using your email. Which left it open to phishing.
Enter @stripe:
Now when Instinct buys something for you, Link mints a one-time virtual card after you approve. The agent never sees your real card.
The card was the scariest thing you could hand it.
Stripe just took that out of the agent's hands.
This is smart by Stripe. Link is becoming the wallet agents default to. It already works with OpenClaw and Claude, and on the merchant side Stripe handles checkout inside ChatGPT, Gemini and Copilot. Stripe now sits on both ends of an agent transaction.
We're still early.
But consumer agents are coming.
And most companies are NOT ready.
Instinct and Grok Bot point to the same place: every consumer gets an agent, and the agent is the channel.
That changes marketing, payments, servicing, the whole relationship. Web to mobile still had a human reading your page. Now the agent reads it, fills your forms, and hits your bot detection.
Your CAPTCHA is about to start blocking your best customers.
What people said back
Light engagement, mostly nodding along: virtual cards close the trust gap, and one reply singled out the CAPTCHA and bot-protection line as the sharpest point.