AI agents over WhatsApp: the investor frenzy for digital butlers runs into the permissions problem

By TechCrunch (via DiarioBitcoin) · October 3, 2026.

More than a dozen startups are competing right now for the same goal: to become the assistant that lives inside your messaging app and that, instead of merely answering questions, carries out tasks. Caddy adds events to your calendar from a friend's message. Folk books restaurants and tracks flights from iMessage, WhatsApp or Telegram. Fambot sends a nightly rundown of the following day with events, to-dos and practical details such as uniform or kit requirements. All share the same premise: chat as the entry point, and a connected account — email, calendar, payment card — as the execution engine.

The figure that best sums up the moment is Instinct's. The startup raised $350 million at a $2.5 billion valuation and then, in September 2026, closed another $1 billion round at a $10 billion valuation, according to data compiled by TechCrunch. That fourfold jump suggests investors already treat these consumer agents as the next big platform, not as just another app. Town, the assistant geared toward professional life, raised a $55 million Series A led by Andreessen Horowitz and Forerunner; Fambot, just $3.5 million at the pre-seed stage; Skye (from Signull Labs), around $3.6 million. The spread of figures portrays a sector still in its discovery phase, with a handful of big bets and many more small ones testing variations on the same script.

Consolidation has already begun, too. Poke launched in March 2026, in June became the first AI agent approved by Apple within its Messages for Business platform and, a month later, Cognition — known for its autonomous coding tool Devin — bought its parent, The Interaction Company of California, for a low nine-figure sum. In a market with more than a dozen products nearly identical in their pitch (organize, book, buy, remind), it is reasonable to expect that most will not survive as independent companies: the winner will be whoever secures distribution, as Poke did with Apple, or enough trust for users to hand over control of their email and their card.

And that is the underlying problem no marketing brochure resolves well. For one of these agents to book a flight or cancel a subscription, it needs real permissions over real accounts: access to the calendar, to the inbox and, in some cases, to a phone number and a payment card of its own, as is the case with Fo, Wajo's agent. Of the entire list compiled by TechCrunch, only Ollie explicitly mentions having passed a security audit (the SOC 2 standard, a control framework widely used in enterprise software); for the rest there is no such information, which does not mean it does not exist, but it does mean the user has no easy way to compare before handing over the keys to their digital life. It is the same logic we flagged when discussing agent containment in the corporate environment: the risk is not that the model becomes misaligned, it is that nobody — neither the company nor the user — has a clear inventory of what an agent can touch once deployed. Here that risk moves down from the IT department to the living room.

Our reading is that this kind of product is, in miniature, a preview of the underlying thesis about AI and work: household and administrative coordination — scheduling, reminding, booking, chasing paperwork — is exactly the kind of low-judgment, high-volume cognitive load that falls first to automation, just as back-office work does in companies. If these agents deliver what they promise, they free up real time from tasks nobody enjoys; that is, on a small scale, the kind of abundance — of time, not just resources — that AI's long horizon points to. But in the short term the message is one of caution: the convenience of delegating family logistics to a WhatsApp number should not make us forget that every new account connected widens the surface of what a bug, a hack or a misconfiguration can expose. These tools are worth trying; the permissions are also worth reading before accepting.