Google app code hints at Gemini Spark in‑app purchase prompts

Google’s newly announced Gemini Spark is colliding with a question the company tried to answer before it was widely asked: how much authority will the assistant have when money is involved? Forbes reported on May 24 that code inside Google’s mobile app points to purchase and checkout flows tied to Gemini Spark, Google’s new “personal AI agent” announced at I/O 2026. The report said the code suggests Spark could be set up to complete some purchases without a fresh confirmation prompt, a possibility that would sit uneasily beside Google’s own recent security language. Google has publicly described Gemini Spark as a tool that can take action on a user’s behalf, and it has separately been building what it calls “agentic commerce” infrastructure across Search, Gemini and Google Shopping. The result is a narrower but more concrete issue than a generic AI-safety debate: whether Google’s consumer agent will ask again before it spends. ### Where did this concern come from? Forbes said an APK teardown of the Google app surfaced references to purchase and checkout operations linked to Gemini Spark. Because those references were found in pre-release code rather than in a public product flow, they do not show how the final feature will behave for users. Paul Monckton, writing for Forbes, said the code raised the prospect that Spark “could make purchases without asking first.” The article was published on May 24, five days after Google used its I/O conference to introduce Spark as a more autonomous assistant. ### What has Google said publicly about purchases? Google said last week that “Gemini is designed to require user confirmation before making purchases on your behalf,” according to a company security post about Gemini Intelligence. The same post said users decide whether their data is shared with apps or Gemini through settings, permission screens or direct actions. Sundar Pichai described Spark at I/O as a personal AI agent that helps users “navigate your digital life” and takes action “on your behalf while under your direction,” according to Google’s model announcement and conference materials. Google also said Spark runs continuously in Google Cloud and is being rolled out first to trusted testers before a wider beta. (blog.google) ### Why does shopping keep coming up in Google’s I/O rollout? Google spent part of I/O 2026 describing a broader shopping system built for AI agents. In its I/O roundup, the company said it was “unlocking agents and agentic experiences” across products including Gemini Spark and Universal Cart. Google Shopping said on May 19 that Universal Cart is meant to be an “intelligent, proactive shopping cart” and part of the foundation for “agentic commerce,” with infrastructure intended to make “agentic checkout seamless.” Separate Google shopping posts this year said agentic checkout had already begun rolling out in Search and AI Mode for eligible U.S. merchants. (blog.google 1) (blog.google 2) That matters because the code references flagged by Forbes did not emerge in isolation. They surfaced as Google is publicly wiring together shopping, payments and agent behavior across several products. That does not prove Spark will buy without confirmation, but it does show why checkout logic exists in the first place. (blog.google) ### So is Gemini Spark actually allowed to buy things on its own? Google has not publicly said that Spark can complete purchases without explicit confirmation, and its most direct published security statement says the opposite. Forbes’ report points to code hints, not a released user-facing setting or a documented policy change. TechCrunch and Google both described Spark as an agent built for “long-horizon tasks” with minimal oversight, but both also framed it as operating under user direction. (forbes.com) That leaves the unresolved question at the level of implementation: whether “under your direction” means a standing permission, a one-time approval, or a prompt at the point of sale. (blog.google) ### What should users watch next? Google said Gemini Spark is being rolled out to trusted testers and that a beta for Google AI Ultra subscribers in the United States is planned for next week. The first public beta, if it appears on that timetable, is likely to show whether purchase actions trigger a separate confirmation screen or rely on broader pre-authorized settings. (blog.google) (techcrunch.com)