TrustPay AI

Inspiration

As AI agents increasingly handle online shopping and payments, we realized that convenience also brings new security risks. Customers may unknowingly pay for incorrect products, unauthorized cart additions, hidden fees, or unexpected price changes caused by malicious website instructions. We were inspired to build a solution that ensures every AI-initiated purchase respects the customer's original intent and gives customers complete control over their payments.

What it does

TrustPay AI is an AI-powered shopping and payment verification system featuring IntentLock, a security layer that protects customers during AI-assisted purchases. It converts natural-language shopping requests into structured purchase rules and independently verifies product specifications, cart contents, seller details, and final checkout prices. It detects unauthorized changes and policy violations before payment. If a mismatch occurs, the payment process is paused and the customer is informed. Once all mandatory checks pass, the customer can approve the transaction through PayPal Sandbox. The system also maintains tamper-evident audit records for transparency and accountability.

How we built it

We built TrustPay AI using a full-stack architecture with a responsive frontend, Python-based backend, database integration, and AI-powered capabilities. We implemented natural-language intent processing, structured purchase rules, product and cart verification, and a rule-based validation engine. We integrated PayPal Sandbox to demonstrate secure payment approval and developed audit logging to maintain transaction records. We also worked on API integration, environment configuration, GitHub collaboration, and cloud deployment.

Challenges we ran into

One of our biggest challenges was ensuring that the AI shopping process followed the customer's exact instructions. Handling incorrect product details, unauthorized cart modifications, unexpected price changes, and malicious website instructions required careful verification logic. We also faced challenges with frontend-backend communication, API integration, database management, environment variables, and cloud deployment. Debugging these issues helped us improve the reliability and security of the application.

Accomplishments that we're proud of

We are proud of developing IntentLock as an independent verification layer for AI-powered shopping. We successfully brought together natural-language intent processing, purchase rule validation, transaction security checks, PayPal Sandbox integration, and audit logging into one platform. Most importantly, we focused on protecting customer intent rather than simply processing payments, ensuring that customers remain in control of their purchases.

What we learned

We gained practical experience in full-stack development, AI integration, natural-language processing, rule-based verification, secure payment workflows, API communication, database management, and cloud deployment. We also learned how important customer consent, transaction transparency, and security are when building AI-powered financial applications.

What's next for TrustPay AI

We aim to enhance TrustPay AI with more advanced AI-based threat detection, stronger protection against prompt injection and malicious website instructions, improved product and seller verification, and real-time transaction monitoring. We also plan to expand payment gateway integrations, strengthen audit mechanisms, and introduce more advanced customer approval controls. Our long-term vision is to make TrustPay AI a trusted security layer for autonomous AI shopping and payments, ensuring that every transaction reflects exactly what the customer intended.