Gorgias AI Agent acts on SMS once the shopper verifies

On September 8, 2026 Gorgias announced that AI Agent can take real actions over SMS rather than only answering questions. Cancelling an order and editing an address are the two examples given. Before this, SMS was read-only.

How the verification works

The shopper provides an email address or phone number, then enters a one-time code sent by email or text. Once that check passes, the agent can act.

This is the right shape. SMS has no session and no login, and a phone number is not proof of identity, so an agent that acted on an inbound text alone would be taking instructions from whoever holds the handset. A code closes that gap.

The phrase to read carefully

The announcement says this is live for all merchants today. That is true, and it is narrower than it sounds.

Gorgias's own compatibility documentation still lists AI Agent as supported on Shopify and not supported on BigCommerce, Magento, WooCommerce or PrestaShop. Order Management, the feature that lets an agent act on an order at all, is Shopify only as well. All of it requires an active AI Agent subscription.

So all merchants means all merchants who can run AI Agent, and that is the Shopify set. If you are on BigCommerce or Magento, nothing changed for you this week. We keep flagging this because it keeps catching people on scoping calls.

What to decide before switching it on

• Which actions are allowed unsupervised. A verified identity establishes who is asking. It does not establish that cancelling is the right outcome. Refund thresholds and cancellation windows are policy, and policy is your decision rather than a setting.
• What happens on a failed code. Three wrong attempts on a channel with no session needs a defined path, and that path should end with a human rather than a loop.
• Whether the shopper knows what just happened. An order cancelled by text with no written confirmation is a support ticket tomorrow.
• How this reads in your reporting. An action taken on SMS should be distinguishable from one taken in chat, or you will not be able to tell which channel is carrying risk.

What is coming

Gorgias says it plans to extend this to other channels, starting with social media. Worth noting when you write the policy, because writing it once for SMS and again for Instagram is how two policies end up disagreeing.

On deflection numbers

We will not quote you a containment percentage for this before seeing your tickets. Across the Gorgias instances we have configured, containment lands between 26 and 56%. That is our own measured range from our own builds, not a Gorgias figure. Adding actions to a channel moves it, and how far depends on how much authority you hand over.

Verified against

• Gorgias product updates, AI Agent can now take action on SMS, not just answer questions, September 8, 2026.
• Gorgias docs, Compatibility of automation features with ecommerce store providers, for AI Agent and Order Management platform support.

Checked against Gorgias's own pages on September 13, 2026.