📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two regulatory regimes—PSD3/PSR and the AI Act—resulting in a slower but more open infrastructure compared to the US. This convergence influences the future of AI-driven transactions.
European law currently prevents AI agents from executing payments without human authorization, creating a legal gap that contrasts with US commercial payment rails. This development stems from the simultaneous implementation of two major regulatory regimes—PSD3/PSR and the AI Act—that are co-defining the infrastructure for agentic commerce in Europe.
The core issue is that while AI systems can compare products and fill shopping carts, European law requires a human to authorize payments, preventing AI agents from acting as payers. Unlike the US, where private payment networks like Mastercard’s Agent Pay and Visa’s Intelligent Commerce extend decision-making authority to agents, Europe’s payment infrastructure is rooted in statutory regulation.
In Europe, PSD3 and the Payment Services Regulation (PSR), agreed upon in November 2025 and expected to be implemented by 2028, are rebuilding the payment rails with mandatory API parity. This forces banks to expose interfaces as capable as their own apps, promoting open finance. Simultaneously, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems involved in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration.
The intersection of these regimes means that the legal framework constrains what AI agents can do, not their technical capabilities. The two regimes have different timelines, scopes, and authorities, creating seams that influence how agentic commerce will develop in Europe. An AI agent’s ability to pay or assess depends on the evolving legal architecture, not solely on technological potential.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Why the EU’s Dual-Regime Approach Shapes Market Foundations
This convergence of regulation means Europe is building a deliberate, statutory infrastructure for agentic commerce that is slower but potentially more durable and open. Unlike the US, where private firms control payment decision-making infrastructure, Europe’s approach is rooted in law, making the system less susceptible to private control but slower to develop. The open APIs and mandated interfaces aim to prevent monopolistic control, favoring a more inclusive and transparent ecosystem. This approach could influence global standards for AI-driven financial transactions and set a precedent for regulation-driven infrastructure development.
European open banking API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks for AI and Payments in Development
The European Union’s move to regulate AI and payments through PSD3/PSR and the AI Act reflects a strategic effort to create a resilient, open, and legally grounded infrastructure for agentic commerce. PSD3/PSR, scheduled for implementation around 2028, will overhaul payment rails, requiring banks to provide open, API-based access. The AI Act, with high-risk classifications set for 2026, imposes strict oversight on AI systems involved in finance, including requirements for conformity assessments and human oversight.
These developments follow previous European efforts to regulate digital finance and AI, but their convergence in 2026 marks a significant shift. The different timelines and authorities responsible—regulators overseeing payments and AI—highlight the complexity of building a cohesive system. The approach contrasts sharply with the US, where private firms extend decision-making authority through commercial infrastructure.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
FancyDove AI Assistant Device Powered by ChatGPT, No Subscription Needed, Standalone AI Chatbot Translator, AI Tutor for Learning, Writing & Homework, Portable AI Gadget for Students & Travel Black
No Subscription & Lifetime Access – Pay Once, Use AI Forever: Enjoy powerful AI chat, writing, translation, and…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Implementation and Impact
It remains unclear how quickly the European regulatory regimes will be fully implemented and how effectively they will facilitate AI agents’ ability to execute payments. The AI Act’s high-risk obligations might slip beyond 2026, and PSD3/PSR’s full rollout is expected around 2028, potentially delaying the operational capabilities of agentic commerce. Additionally, it is uncertain how these regulations will interact in practice and whether they will create unforeseen barriers or opportunities for AI agents.
Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European AI and Payment Regulation
Regulators are expected to finalize the PSD3/PSR regulations by 2027-2028, with the AI Act’s high-risk obligations possibly taking effect by 2027. Industry stakeholders will monitor how banks and AI developers adapt to these rules, especially regarding API exposure and high-risk compliance. Further legislative developments and regulatory guidance are anticipated to clarify how AI agents can operate within this statutory framework, shaping the future landscape of European agentic commerce.
agentic commerce payment solutions
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
When will AI agents in Europe be able to execute payments independently?
It is not yet certain. Full implementation of the necessary regulations, including PSD3/PSR and the AI Act, is expected around 2028, but legal and technical developments could accelerate or delay this timeline.
How does Europe’s approach differ from the US in developing agentic commerce?
Europe relies on statutory, regulation-driven infrastructure with mandated API parity and open finance, whereas the US depends on private payment networks and commercial rails controlled by firms like Mastercard and Visa.
What are the risks of Europe’s regulatory approach?
The slower pace may delay innovation and deployment of autonomous payment agents, but the approach aims to create a more durable and transparent system less prone to monopolistic control.
Could this regulatory framework stifle AI innovation in finance?
It is possible if regulations are overly restrictive or delayed, but the framework also aims to ensure safety, transparency, and fairness, which could foster sustainable innovation.
Source: ThorstenMeyerAI.com
