Agentic AI in insurance usually refers to the AI agents carriers build for their own operations: claims triage, underwriting assistants, service bots. A second wave matters just as much for the P&L. Consumers now send their own AI agents to quote policies, change accounts and file claims, and those agents arrive through the same web applications your customers use.
This post covers that second wave: where consumer AI agents show up across the policy lifecycle, whether to block or welcome them, and what carriers should do now. For the detection mechanics, see ForMotiv’s agentic AI detection for insurance and our guide on how to detect AI agents in insurance applications.
What does agentic AI mean for insurance carriers?
AI agents can now complete insurance tasks on a consumer’s behalf: comparing quotes, updating policies and starting claims. Many are legitimate customers looking for help with long forms. Some probe rating plans, harvest prefill data or attempt fraud. Carriers need to detect agents inside their applications, determine each agent’s intent and respond in real time.
What is agentic AI?
Agentic AI describes software that pursues a goal with some independence. It reads a web page, decides what to do next and acts, often in a real browser at a pace close to a person’s. Where a chatbot answers a question, an agent carries out the task itself, such as filling in an auto quote, uploading claim photos or changing a mailing address.
In insurance, two groups are putting these agents to work:
- Carriers and their vendors, who deploy agents inside claims, underwriting, distribution and service operations. Most of the “agentic AI in insurance” guides you’ll find cover this side.
- Consumers, and increasingly agents and agencies, who use AI agents to act on the carrier’s public applications. This side gets far less attention, and it is already producing traffic in quote, servicing and claims flows.
Why consumer AI agents are reaching carriers now
Insurance shopping is a natural task to hand to an agent. A personal auto quote repeats dozens of questions across every carrier a shopper tries, and the answers rarely change. Agent volume across the web is climbing fast. HUMAN Security’s 2026 State of AI Traffic & Cyberthreat Benchmark Report found that “traffic from AI agents and agentic browsers grew 7,851% year over year.” That growth starts from a low base, and HUMAN sells bot defense, so the direction is more telling than the exact multiplier.
The industry also has its first public test case. On September 23, 2026, Insurify blocked Meta’s Muse agent from its marketplace, explaining that each quote request can trigger “paid data checks, such as driving records” and, “in states that permit it, credit-based insurance scores,” whether or not a real shopper is behind it. By October 28, Insurify had reversed course. Muse and other compatible personal agents now come in through Insurify’s AI Agent Gateway, an approved integration with safeguards for consumer consent and carrier quote details.
Within five weeks, a major personal lines marketplace moved from blocking an agent to admitting it through a defined door. Carriers are working through the same decision now, and most of them have no approved door yet. Agents that don’t come through one arrive on the public quote form, where they can look like any other visitor.
Where consumer AI agents show up across the policy lifecycle
Quoting and new business
The quote and application is where agents appear first. A shopper asks an assistant to “find me cheaper car insurance,” and the agent works through several carriers’ forms. Most of these sessions are real demand from a real household. The same tooling also makes it cheap to requote dozens of times while changing one answer at a time, to map where rating breaks fall, or to submit partial identity details and collect the prefilled vehicle and driver data that comes back. Each of those sessions can trigger paid third-party data calls. See how this plays out in quote and bind.
Policy servicing
We expect agents acting for policyholders to become routine in servicing: updating an address, adding a vehicle, downloading ID cards, changing a payment date. That is good for customers and for service costs. Risk concentrates where money or coverage moves. A session that changes the contact email and then the payout account a few minutes later deserves a closer look whether a person or an agent is driving it, because that sequence matches a common account takeover pattern. More on account servicing.
Claims
At first notice of loss, an agent can file for a policyholder who would rather not face a long form, and that is a legitimate use. The same capability lets a bad actor rewrite a loss narrative until it clears, expand a list of damaged items with each pass, or run the same claim story across several policies. At claims, how the claim was entered is part of the evidence. See ForMotiv for claims.
Agents and agencies using AI
Some independent and captive agents now use AI assistants to key business faster. Much of that use is productive. Some of it can recreate familiar problems at machine speed, such as cycling answers to hit a target premium. Carriers will want to see how business written with AI help performs, by agent and agency. That is the job of ForMotiv Agent.
Should insurers block AI agents or welcome them?
Neither extreme holds up. Blocking every agent turns away customers who simply delegated a chore, and agent-driven shopping is likely to grow. Admitting every agent invites rating-plan probing, data harvesting and fraud at scale, and the paid data calls add up. The workable middle is to decide by intent, line of business and channel.
| Approach | What it gets right | What it costs |
|---|---|---|
| Block all AI agents | Stops automated probing and excess data-call spend | Turns away real customers; hard to enforce against agents that look like people; Insurify reversed its block within five weeks |
| Welcome all AI agents | Captures agent-driven demand early | Opens the rating plan, prefill data, servicing and claims to abuse at scale |
| Decide by intent | Serves legitimate agents and contains the harmful ones | Requires seeing agents inside the application and judging what each one is doing |
Deciding by intent follows three steps: Detect the agent in the session, Determine its intent, and Act in real time by letting it through, adding friction or routing it for review. Detecting the agent is step one. TechRadar’s coverage of a Thales bot report put it this way: “The challenge is no longer identifying bots. It’s understanding what the bot, agent, or automation is doing.”
What agentic AI means for each team at a carrier
| Team | The question agentic traffic raises |
|---|---|
| Underwriting and product | Are agents testing our rating plan, and is business written through agents performing like everything else? |
| Fraud and SIU | Which agent sessions show gaming, takeover or claims fraud patterns, and can we link them into one case? |
| Digital and CX | Do legitimate agents complete our flows, or do they fail on friction we built for people? |
| Distribution | How are agents and agencies using AI, and does it change quality of business? |
| Security and IT | What does our edge bot management already see, and what happens after a session gets inside the application? |
| Finance | How much are we spending on third-party data calls for sessions that will never bind? |
What carriers should do about agentic AI now
- Measure it first. Find out what share of quote, servicing and claims sessions agents drive today, and on which flows. Without that baseline, every other decision is a guess.
- Know what each layer covers. Network-level bot management, from vendors such as Cloudflare, guards the front door and evaluates requests as they arrive. Agents that pass through it work inside the house, in your applications. Map which layer sees what.
- Write a policy by line and channel. Decide which agent behaviors you allow, which get friction and which go to review. A renters quote and a payout change deserve different rules.
- Protect paid data calls. Hold back third-party lookups for sessions that look like rating-plan probing.
- Plan for approved integrations. Insurify’s gateway shows where the market may go. Decide what an agent must disclose to come in through a defined door, and what happens to agents that don’t.
- Give reviewers reasons. Underwriters and investigators need to see which behaviors fired, and why, before they act.
How ForMotiv helps carriers with agentic AI
ForMotiv’s agentic AI detection is live today. It works inside the quote, servicing and claims applications, alongside whatever bot management you run at the edge, and follows Detect > Determine Intent > Act: it identifies who is in the session, determines what they are trying to do and applies your rules in real time.
That work builds on nearly a decade of research into behavioral intent. A dedicated R&D team focuses on agentic AI detection, and we’re tracking 100+ web-capable AI agents. Dozens of carriers have already come to ForMotiv for help with agentic traffic. Trusted by 6 of the top 10 P&C carriers and several additional top 10 life carriers.
See how much of your traffic AI agents already drive
Frequently asked questions
What is agentic AI in insurance?
Agentic AI in insurance covers AI agents that complete tasks with some independence. Carriers deploy them in claims, underwriting and service. Consumers and agencies also use their own AI agents to quote, change policies and file claims on carrier websites. Both affect carriers, and the consumer side arrives through applications carriers don’t fully control.
Are AI agents already quoting insurance?
Yes. In September 2026, Insurify blocked Meta’s Muse agent from its insurance marketplace because agent quote requests can trigger paid data checks. By October 28 it reversed course and now admits compatible personal agents through an approved integration. Agents also reach carrier quote forms directly, where many look like ordinary visitors.
Should insurers block AI agents?
Usually not across the board. Many agents act for real customers, and blocking them turns away business. Admitting every agent invites rating-plan probing, prefill harvesting and fraud. Most carriers are better served by detecting agents in the session, determining intent and setting responses by line of business and channel.
What risks do consumer AI agents create for carriers?
The main risks are rating-plan probing through repeated quotes, prefill data harvesting, application gaming, wasted spend on paid data calls, account takeover in servicing and padded or repeated claims. The same agents also bring legitimate demand, so the task is separating the two by intent.
Does ForMotiv detect AI agents today?
Yes. ForMotiv’s agentic AI detection is live today inside quote, servicing and claims applications. A dedicated R&D team focuses on agentic AI detection, and we’re tracking 100+ web-capable AI agents. We don’t publish accuracy figures. We’ll show you on your own traffic.
Sources
- HUMAN Security, The 2026 State of AI Traffic & Cyberthreat Benchmark Report (2026): https://www.humansecurity.com/learn/resources/2026-state-ai-traffic-cyberthreat-benchmarks/
- Insurify, “Insurify Blocks Meta’s Muse Agent From Its Insurance Marketplace” (Sept 2026, updated Oct 28, 2026): https://insurify.com/press/news/insurify-blocks-muse-from-its-marketplace/
- Insurance Journal (Sept 24, 2026): https://www.insurancejournal.com/news/national/2026/09/24/886704.htm
- TechRadar, Thales bot report coverage (2026): https://techradar.com/pro/security/the-challenge-is-no-longer-identifying-bots-its-understanding-what-the-bot-agent-or-automation-is-doing-new-report-flags-40-percent-of-all-internet-traffic-is-now-bad-bots







