📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is currently being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that together define the legal and technical framework. This convergence affects how AI agents can pay, assess, and operate within Europe, contrasting with the US approach.
European law currently prohibits AI agents from executing payments without human authorization, even though the technological capability exists. This is due to the simultaneous development of two major regulatory regimes—PSD3/PSR and the AI Act—that are shaping the future of agentic commerce in Europe, making the legal architecture more complex and slower to implement than in the US.
The core issue is that in Europe, the ability of AI agents to pay or make financial decisions depends on legal frameworks, not just technology. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, are rebuilding the payment infrastructure with mandatory API parity, requiring banks to expose interfaces as capable as their own apps. This means that payment rails are being redefined as statutory, not private, infrastructure.
Simultaneously, the EU AI Act, with high-risk obligations scheduled to land in 2026, classifies AI systems involved in finance—such as credit scoring and fraud detection—as high-risk, subjecting them to conformity assessments, human oversight, and registration requirements. This creates a layered, fragmented environment where AI and payment regulation intersect but are governed by different authorities and timelines.
Unlike the US, where private firms like Mastercard, Visa, and Plaid build and extend commercial rails for agent payments, Europe’s system is rooted in statutory law, which is slower but aims for a more open and durable infrastructure. The convergence of these regimes means that the legal authority, not just technological capability, determines whether an AI agent can pay or assess risk.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Regimes on European AI Payments
This convergence of regulatory regimes means that European agentic commerce will develop more slowly than in the US, but potentially with a more open and resilient infrastructure. The statutory nature of the rails—mandated API parity and open finance—limits control by individual banks and creates a shared data substrate, which could foster more competition and innovation in the long term.
However, the complexity and fragmentation of the legal environment pose challenges for deploying AI agents capable of autonomous payments or assessments. The legal constraints may delay the rollout of fully autonomous agentic services, impacting European competitiveness in AI-driven finance.
European AI payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks for Payment and AI
Since 2025, Europe has been simultaneously updating its payment infrastructure through PSD3 and PSR, which aim to modernize and open up banking interfaces via API parity and open finance. These reforms are scheduled for implementation around 2028, but the process is still in legislative stages, with some elements like FIDA (Financial Data Access) in trilogue negotiations.
Meanwhile, the EU AI Act, agreed in November 2025, classifies certain AI systems as high-risk, requiring strict oversight, conformity assessments, and registration. These regulations are designed to ensure safety and accountability but also impose constraints that could slow the deployment of autonomous AI agents in finance.
Unlike the US, where private networks and decision-making control dominate, Europe’s approach embeds the infrastructure within statutory law, emphasizing transparency, openness, and shared standards, which inherently slow down implementation but aim for greater durability.
“The core challenge is that in Europe, the legal architecture, not just technology, determines whether an AI agent can pay or assess risk. These regimes are being built simultaneously, creating a fragmented but deliberate foundation.”
— Thorsten Meyer
AI-Powered Fraud Detection for Small Accounting Firms: A Step-by-Step Guide to Using Open-Source AI and Anomaly Detection Models to Flag Suspicious Transactions — No Coding Required
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Implementation and Impact
It remains unclear how quickly the full implementation of PSD3/PSR and the AI Act will occur, given legislative delays and negotiations. The actual impact on AI agents’ ability to pay autonomously is still uncertain, as the legal frameworks are complex and subject to change before enforcement.
Additionally, it is not yet clear whether the convergence will favor durability over speed or if practical deployment will face unforeseen technical or legal hurdles.
API integration tools for European payment systems
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulatory agencies are expected to finalize and implement PSD3/PSR by 2028, while the AI Act high-risk obligations are scheduled for enforcement possibly starting in 2027. Monitoring legislative progress and industry adaptation will be critical. Stakeholders are preparing for a phased rollout, with pilot programs and compliance assessments likely to emerge over the next 12-24 months.
Further, ongoing negotiations around FIDA and other open finance standards will shape the data infrastructure, influencing how AI agents access and utilize financial data in Europe.
Machine Learning for High-Risk Applications: Approaches to Responsible AI
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will AI agents in Europe be able to pay independently?
Not immediately. Under current regulations, AI agents cannot execute payments without human authorization due to legal constraints. Full autonomy depends on future regulatory clarifications and implementation timelines.
How do European regulations differ from the US approach?
Europe relies on statutory, regulation-driven infrastructure with mandated API access and open finance, while the US depends on private, commercial rails controlled by firms like Mastercard and Visa, allowing faster and more concentrated deployment.
What are the risks of the European regulatory approach?
The slower pace may delay innovation and adoption of autonomous AI payments, potentially impacting European competitiveness. However, the approach aims for a more durable, transparent, and open infrastructure.
When will full implementation of PSD3 and the AI Act occur?
Legislative and regulatory processes suggest implementation could be completed by 2028 for PSD3/PSR, with AI high-risk obligations possibly starting enforcement in 2027, but these dates remain subject to legislative progress.
Source: ThorstenMeyerAI.com
