AI Bots Dominate Commerce Traffic Amid Rising Cyber Threats

Akamai's latest report reveals that 47.9% of commerce traffic consists of AI bots, marking a significant increase in cyber threats targeting the industry. The report highlights a 9% year-over-year rise in API web attacks, with 85% of commerce organizations experiencing at least one API-related incident in the past year. Layer 7 DDoS attacks on commerce reached nearly 3 trillion in 2025, with retail absorbing 84% of that volume. Phishing attacks also surged, with average daily volumes for commerce customers increasing from 56,600 in February to 134,600 in April 2026. The report emphasizes the need for improved API security measures and better understanding of which APIs expose sensitive data. Akamai's recommendations include risk-based bot governance and aligning cybersecurity with fraud teams. The findings underscore the growing sophistication of cybercriminals leveraging AI tools.

Key Points: • 47.9% of commerce traffic is now driven by AI bots, increasing vulnerability to attacks. • 85% of commerce organizations reported at least one API-related security incident in the past year. • Layer 7 DDoS attacks on commerce reached nearly 3 trillion in 2025, with retail being the most affected sector.