Five billion people already have AI agents in their pockets, and TikTok's CEO just said the quiet part out loud: most of them have no idea what they've given permission to do.
The Summary
- TikTok CEO Shou Zi Chew warned that users are granting AI agents broad permissions without understanding the implications, citing examples of agents with credit card access making unauthorized purchases because they're "overly eager to deliver"
- SMS-based AI agents have already reached 5 billion users with zero learning curve, embedding agent capability into the most frictionless interface humans have
- TikTok is now training employees on what NOT to share with AI agents, including trade secrets and privileged legal information, signaling enterprise awareness of agent security risks
The Signal
The agent economy has a user experience problem, and it's not the one anyone expected. Speaking at the DBS Asia Future Forward Conference, Chew pointed to a pattern emerging across early agent adoption: people hand over credentials, permissions, and purchasing power without reading what they're authorizing. The result is agents buying more than requested, sharing information they shouldn't, and operating with a level of autonomy users didn't consciously grant.
This isn't a hypothetical. Agents accessible via text message have already scaled to 5 billion users, spanning general assistants, family coordinators, travel planners, and workplace tools. SMS agents require no app download, no new interface to learn, no behavior change. You text them like you text a friend. That frictionless entry point is both the opportunity and the liability.
"A lot of users may be giving permissions to the agents to do a lot of things for them, without really understanding what kind of permissions you have actually given."
The gap Chew identified is structural, not user error. Agent interfaces prioritize speed and convenience over informed consent. Setup flows that ask for credit card information, calendar access, email permissions, and API keys in rapid succession don't create space for users to understand cumulative risk. The agents work best when they have broad access. Users want things done fast. The permissions model hasn't caught up to either reality.
Key enterprise concerns emerging:
- Trade secret leakage through agent conversations logged on third-party servers
- Legal privilege violations when employees use agents to draft or summarize confidential documents
- Unauthorized purchasing when agents interpret vague requests as explicit commands
TikTok's internal training response signals how seriously platforms are taking this. If a company with Chew's technical sophistication is drilling employees on agent boundaries, the average small business or individual user is operating without a map. The agent permission problem resembles early cloud adoption, when employees synced corporate files to personal Dropbox accounts without IT approval. Except agents don't just store data. They act on it.
The SMS agent explosion makes this urgent. The TechCrunch analysis shows agents designed for families managing shared calendars and grocery lists, travel agents booking flights, workplace assistants scheduling meetings. Each has permission to read messages, access contacts, interpret tone and intent. Most users granted those permissions in under 30 seconds.
The Implication
We're at the inflection point where agent adoption outpaces agent literacy. Companies building these tools need permission interfaces that show cumulative risk, not just individual permissions. Users need agent audit tools that surface what their assistants can actually do, presented in plain language, accessible after setup is complete.
For anyone deploying agents in a work context, Chew's warning is tactical guidance. Review what your team's agents can access. Set explicit boundaries on what information doesn't go into agent prompts. Assume anything typed to an agent is logged and potentially trainable. The five billion people already using SMS agents didn't download new software. They just started texting differently. That's the adoption curve. Understanding what they've unleashed is the work that comes next.