Who’s Really on the Journey? Agentic AI, Identity, and Responsible Decisioning
Sarah books a flight. Not quite.
She opens her phone, asks her AI assistant to find the best fare to Barcelona for the last week of June, and puts it down. A few minutes later, the ticket is confirmed. No form filled out. No card number entered. Her agent handled it, authenticated, delegated, and done.
For the airline, that transaction looked like any other customer interaction. But the behavioral signals were different. The session pattern was different. The identity was presented differently. The booking was real and the payment cleared, but the experience on the other side of that channel was something entirely new.
Now imagine the same scenario, but it wasn't Sarah's agent.
That shift is already under way. AI agents — software systems that take actions autonomously on a user's behalf — are booking travel, completing applications, processing payments and managing subscriptions on behalf of the customers brands work hard to serve. For fraud teams, brand leaders and decisioning executives, that shift creates a question that most existing systems were not designed to answer: who is actually acting, with what authority, and against what evidence?
Three Risks Agentic AI Creates for Fraud, Decisioning, and Brand Safety
The Sarah scenario is benign. But the same infrastructure that makes her agent possible: delegated authentication, cryptographic identity, autonomous action across channels, creates new exposure at exactly the points where brands are least prepared. Three risks stand out.
Fraud
Attackers were already probing across sessions, devices and channels. Agents make that easier, faster and cheaper. Scripted activity that used to be obvious now blends into traffic that can look signed, legitimate and authorized.
Decision Opacity
When an action is taken by an agent, “the customer authorized it” is no longer a complete answer. Was the authority delegated correctly? Is the behavior consistent with how this person actually transacts? Did the decisioning engine explain itself? Pega’s responsible-AI principles — fairness, transparency, empathy, robustness, accountability — apply to every one of those interventions.
Brand Safety
The agentic web is rapidly turning into a question of which agents your brand admits, which it challenges, and how proportionately it intervenes when something looks wrong. Get it wrong in either direction and the cost shows up in the wrong place: lost legitimate journeys, or fraud absorbed in silence.
Connected customer journeys are safer than disconnected ones
Fraud rarely happens in a single moment. It happens across a journey. The same is true for trust. When behavioral evidence and identity persist across sessions, devices, anonymous interactions and authenticated logins, signals compound. When they are siloed, each tool sees a fragment, and patterns slip through the gaps.
What makes those patterns visible is customer identity resolution: connecting behavioral signals across anonymous and authenticated states into a single, continuous view of the person.
Celebrus provides behavior + identity at the source:
- First-party, real-time, consent-aware data capture means signals are available the moment they're generated — not hours later
- Behavioral signals — typing rhythm, navigation patterns, hesitation, mouse jitter, inter-click timing — are the micro-patterns unique to how a real person moves. They look very different from scripted bot activity, or a properly signed agent acting under delegated permissions
- Identity resolution across all three states (anonymous, known-but-logged-out, and authenticated) means the journey is never reset and the decisioning engine never sees the customer for the "first" time
From Real-Time Behavioral Signals to Responsible AI Decisions
Think back to Sarah’s booking. The airline saw a completed transaction. What it didn’t see was whether that session matched her usual behavior, whether the identity presented was consistent with her history across channels, or whether the action taken was proportionate to what the profile actually warranted. That is the gap Celebrus and Pega CDH close together.
Celebrus is rich on signals and deliberately neutral on verdicts. The decisioning engine of record — Pega Customer Decision Hub — applies policy, makes the call, and is accountable for it. That separation is the point. Behavioral and identity evidence flows in at the millisecond. Pega’s responsible-AI controls — transparency, fairness, oversight, ethical guardrails — wrap the action that goes back out.
The result is a model that fits an agentic world. Properly signed agents under valid delegation are admitted without unnecessary friction. Suspicious sessions, whether human or otherwise, are stepped up proportionately rather than blocked outright. Legitimate customers, and the agents working on their behalf, keep their journey. Brands keep both their experience and their compliance posture.
What Agentic AI Means for Identity, Fraud Strategy, and Decisioning Going Forward
Agentic AI is not the end of identity or fraud strategy. It is the moment that makes both indispensable. Connect the journey, capture the evidence at source, and let a responsible decisioning layer act on it. That is how brands will stay safe — and stay open — as the next class of users, human and agent alike, turns up at the door.