American won on the logo. The hidden-city ticket never got a verdict.
TL;DR [show]
American Airlines' $9.4 million judgment against Skiplagged, entered May 6, 2025, rests on copyright in its flight symbol. The jury called the trademark use fair, and the contract claims about the tickets died on the statute of limitations. A decade after United's Chicago suit was dismissed, no court has decided whether hidden-city ticketing is allowed, so enforcement lives in the carriers' own account audits, which is exactly where AI-as-enforcement lands.
By early 2025 the airlines' campaign against hidden-city ticketing had been running for a decade, and almost none of it ran through the courts. It ran through the carriers' own records. In 2019 United told airport customer-service staff, in an internal memo reported by Skift, that hidden-city booking was "a growing trend" and "not aligned with United's contract of carriage." In 2020 One Mile at a Time published a letter American sent an AAdvantage member: an audit of his account had found 52 hidden-city tickets, the account was restricted pending investigation, and it would be terminated unless he paid back roughly $2,500. The category-wide pattern was airlines pointing their own data at their own customers, framed as fare-integrity protection.
The federal record says the same thing from inside American. Judge Mark Pittman's July 2024 summary-judgment order found that American knew about the Skiplagged "problem" by 2016, was brainstorming deterrents by 2019 (extra fees to deliver checked bags to the hidden city), and that its "rank-and-file employees were reporting problematic 'skiplagging' well before the higher-ups took action." The front-line staff were already the detection layer. Software is the obvious thing to put in front of them.
On May 6, 2025, Pittman entered judgment in American Airlines v. Skiplagged. The headline is that American won: $9.4 million and a permanent injunction. The order says American won on its logo. In October 2024 the Fort Worth jury found Skiplagged liable for copying American's copyrighted flight symbol, set the award at $23.7 million, and found American had failed to mitigate $14.3 million of it. On trademark, the jury found Skiplagged had used American's marks and that the use was nominative fair use; Pittman let that stand. The claims that actually concerned the tickets (breach of contract, breach of the conditions of carriage, tortious interference) were thrown out at summary judgment because American had known about Skiplagged since 2016 and waited past the statute of limitations. The injunction bars Skiplagged from displaying American's copyrights on its website. It says nothing about selling hidden-city fares. United and Orbitz tried the question in Chicago in 2014, and that case was dismissed in April 2015 for lack of personal jurisdiction. A decade of airline litigation, and no court has yet decided whether skiplagging is allowed. The carrier can still refuse to do business with passengers it identifies. The customer's defense is that the question keeps dying on procedure.
That is the operator-class frame for adversarial-AI-against-customers: when the courts decline to answer the question, the operator answers it with its own data.
The pattern is broader than skiplagging. The arc is: operator deploys AI to detect customer behavior the operator wants to discourage; the AI becomes the enforcement front-end; the legal frame either accepts the deployment or constrains it; the customer's defense is whatever the legal frame protects. The skiplagging case is the cleanest visible example because no court has called the customer behavior illegal, the rule being enforced is a contract the customer clicked through, and the enforcement runs on the operator's own records. Other categories have similar shape with different legal frames.
What's the category that's been named? AI-as-enforcement-against-customers exists and is growing. Every operator-customer relationship where the customer can extract value the operator did not intend is a candidate category for adversarial AI deployment. Insurance: AI to detect claim patterns the insurer wants to deny. Banking: AI to detect account-behavior the bank wants to flag. SaaS: AI to detect usage-patterns the vendor wants to upsell or terminate. Healthcare: AI to detect billing-or-prescribing patterns the payer wants to deny. The pattern recurs.
What does the legal frame look like in 2025? Not yet calibrated for this deployment shape. The skiplagging case should have been the clean one, a contract question with a decade of litigation behind it, and it still has no answer: the contract claims died on the calendar and the money came from a logo. Most adversarial-AI-against-customer deployments are not in categories with that clarity. The legal frame is going to have to develop case-by-case across multiple jurisdictions, and the development will take a decade. In the interim, the operator deploying the AI captures the operating leverage; the customer absorbs the cost of the deployment until the legal frame catches up.
Where's the trade-press framing failing the part that holds? The trade-press read of these deployments is "fraud detection" or "policy enforcement." The structural read is "operator deploying AI to capture value the customer was getting under the legacy frame." Both readings are accurate at the description level. Only the second one captures the operator-level shift the AI deployment represents. The reframe matters because operators using the trade-press framing don't recognize the legal-and-reputational risk they're taking on. The AI is, in operating terms, more aggressive than the press release admits.
The thing that crosses pillars is that adversarial-AI-against-customers is the same shape that recurs in healthcare prior-auth, in insurance underwriting, in employment screening, and in B2B SaaS abuse detection. Each of those categories has its own version of the skiplagging-vs-airlines arc playing out. The arcs are at different stages. Airlines are in the clarity-that-never-arrives stage; healthcare prior-auth is in the regulatory-frame-still-developing stage; employment screening is in the early-legal-litigation stage.
Operators in any of these categories have to decide whether to deploy adversarial AI ahead of the legal frame or wait for clarity. Operators who deploy ahead capture leverage; they also absorb litigation and reputational risk. Operators who wait absorb less risk and capture less leverage. The right answer depends on the category's specific legal trajectory and the operator's risk tolerance.
What survives all of this is that the airlines' skiplagger-detection deployment is the leading visible case study of an operator shift that is going to play out across a long list of regulated and lightly-regulated categories. This week's Fort Worth judgment shows where the airline category's legal floor actually sits: under the logo, nowhere near the ticket. Each adjacent category will get its own ruling on its own arc. The operators paying attention now are the operators who will deploy the next generation of adversarial AI with awareness of where the legal floor is going to land.
American won on the logo. The ticket never got a verdict. The category continues. The next category's court hasn't ruled yet. Operators are deploying AI against the unresolved legal frame anyway.
—TJ