📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is currently being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that jointly define the legal and technical infrastructure for AI-driven payments and assessments. This convergence creates a slower but more durable framework compared to the US’s private, commercial rails.
European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities that could enable autonomous transactions. This legal constraint stems from two regulatory regimes—PSD3/PSR and the AI Act—that are being developed in parallel, shaping the future of agentic commerce in Europe.
In Europe, the ability of AI agents to execute payments hinges on regulatory frameworks rather than technological limitations. The Payment Services Directive 3 (PSD3) and the Payment Services Regulation (PSR), agreed upon in November 2025 and expected to take effect around 2028, are rebuilding payment rails with mandatory API parity, requiring banks to expose interfaces as capable as their own apps. This move aims to create open, interoperable payment infrastructure that no single entity controls.
Simultaneously, the European AI Act, with high-risk obligations scheduled to land in 2026, classifies AI systems involved in credit scoring and fraud detection as high-risk, subjecting them to conformity assessments, human oversight, and registration. These guardrails impose constraints on AI models that could run agentic finance, adding layers of regulation that influence how AI can assess, recommend, or score in commerce.
The convergence of these two regimes—statutory in nature—means that the legal architecture for agentic commerce in Europe is not driven by private sector innovation but by regulatory design. This results in a fragmented, slower process compared to the US, where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce dominate, allowing faster, decision-driven deployment.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Foundations on European AI Commerce
This convergence makes European agentic commerce inherently slower to develop but potentially more resilient and open. The statutory nature of the rails—mandated API interfaces and open finance—limits control by any single network or bank, fostering a more competitive environment. However, the slower legislative timeline means European AI agents may lag behind US counterparts in commercial deployment.
Furthermore, the legal architecture ensures that AI systems involved in financial transactions are subject to strict oversight, potentially increasing trust and stability but also complexity for developers and users. The contrasting foundations—private, proprietary infrastructure in the US versus open, regulation-driven infrastructure in Europe—highlight different paths to innovation and market growth.
European open banking API devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Developments Shaping Agentic Commerce
The European approach to AI and payments is characterized by deliberate, regulation-based infrastructure development. PSD3 and PSR are part of a broader effort to overhaul payment rails with mandatory API access, aiming for interoperability and transparency. Meanwhile, the AI Act, agreed upon in late 2025, imposes high-risk classifications and oversight for AI systems involved in finance, reflecting Europe’s cautious stance on AI safety and accountability.
This regulatory environment contrasts sharply with the US, where private firms have built proprietary, decision-driven payment systems that can extend agent capabilities more rapidly. The European process involves legislative timelines that are inherently slower, with regulations expected to be implemented over the next two to three years, affecting how quickly AI agents can operate autonomously in commerce.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes—PSD3/PSR and the AI Act—that shape the infrastructure and guardrails simultaneously.”
— Thorsten Meyer
AI payment authorization hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Aspects of Europe’s Regulatory Convergence
It remains unclear how quickly the new regulations will be implemented and how effectively they will facilitate autonomous AI payments. The AI Act’s high-risk obligations might slip beyond 2026, and the full impact of API parity and open finance on actual market practices is still emerging. Additionally, the extent to which these statutory rails will enable or limit innovation in AI agentic commerce remains uncertain.
regulatory compliant AI credit scoring tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Regulatory and Market Development
Regulatory agencies in Europe are expected to finalize and implement PSD3/PSR by 2028, while the AI Act’s high-risk obligations are scheduled for enforcement in 2026. Industry stakeholders will closely monitor how these frameworks influence the deployment of AI agents capable of autonomous payments and assessments. Market experiments and pilot programs are likely to emerge as the regulations take effect, shaping the future landscape of European agentic commerce.
European agentic commerce payment systems
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will European AI agents be able to pay autonomously before 2028?
Not definitively. While technological capability exists, legal constraints under current and upcoming regulations mean that autonomous payment authorization by AI agents in Europe will depend on the final implementation of PSD3/PSR and the AI Act, which are scheduled for completion between 2026 and 2028.
How does Europe’s regulatory approach compare to the US?
Europe’s approach is regulation-driven, aiming for open, interoperable, and durable infrastructure, which is slower but more inclusive. The US relies on private, commercial rails that can extend decision-making capabilities more rapidly but are less open and more controlled by private firms.
What are the main risks of Europe’s statutory rails?
The primary risks include slower deployment of autonomous AI payment capabilities and potential complexity in compliance, which could limit innovation and delay market entry for new AI-driven financial services.
Will the convergence of these regimes create a better environment for AI innovation?
It is uncertain. The statutory framework aims to foster trust and stability, but whether it will enable faster or more innovative AI applications compared to private infrastructure remains to be seen.
Source: ThorstenMeyerAI.com
