📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is currently being defined by two converging regulatory regimes—PSD3/PSR and the AI Act—resulting in a statutory, open, but slower infrastructure compared to the US. This development impacts how AI-driven financial agents operate in Europe.
European regulatory frameworks are currently co-constructing the infrastructure for agentic commerce, with new laws shaping how AI agents can perform payments and financial assessments. This convergence of two regimes—PSD3/PSR and the AI Act—means that the legal architecture, not technological capability, will determine whether AI agents can pay in Europe. This is a unique process not seen elsewhere, and it will influence the pace and nature of digital commerce on the continent.
European law requires human authorization for online payments, creating a legal gap for AI agents that can compare products and fill shopping carts but cannot complete transactions without human approval. Unlike the US, where private payment networks like Mastercard’s Agent Pay and Visa’s Intelligent Commerce extend agent capabilities through decision-making infrastructure, Europe’s payment system is governed by statutory regulations. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, will rebuild the payment rails with mandatory API parity, forcing banks to expose interfaces comparable to their consumer apps. These reforms aim to create a more open and interoperable payment infrastructure.
Simultaneously, the EU’s AI Act, with high-risk obligations scheduled for 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk. These systems will face conformity assessments, human oversight, and registration requirements. The convergence of these two regimes—regulatory for payment infrastructure and high-risk AI classification—means the entire agentic commerce stack in Europe is being shaped by statutory rules that are not fully aligned or coordinated. The process is slower than the US approach, which relies on private networks and decision-based extensions, but potentially more durable due to the law-based nature of the infrastructure.
As a result, European agentic commerce will lag behind the US in speed but may benefit from a more open, resilient, and standardized foundation. The different timelines, scopes, and authorities involved mean that the legal status of an AI agent’s ability to pay or assess depends on the evolving regulatory landscape, not just technological capability. This creates a complex, fragmented environment where the seams between regimes are critical to understanding what is possible.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Statutory vs. Commercial Payment Infrastructure
This convergence of regulatory regimes in Europe fundamentally alters the foundation of agentic commerce. Unlike the US, where private firms control critical payment infrastructures and can extend capabilities through decision-making, Europe’s approach relies on laws that define and restrict what agents can do. This statutory architecture, while slower to develop, promises a more open and standardized environment, potentially fostering more resilient and interoperable AI-driven financial services. For readers, this means that the evolution of AI agents in Europe will be shaped more by legal frameworks than by private innovation, influencing the speed, scope, and security of future digital commerce.
HAHA Smart AI Vending Machine for Business Contactless Grab & Go, Multi-Item Combo Vending with APP Management & Cashless Payment US1200CT(Black, AI Ultra)
HAHA AI Smart Vending Machine : Commercial Vending Machinesupports a wide range of product categories, supports stacking of…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Pathways for Agentic Payments
The legal landscape for digital payments in Europe is undergoing a significant overhaul. PSD3 and the PSR represent a comprehensive effort to rebuild payment infrastructure with API parity, requiring banks to open interfaces akin to their consumer-facing apps. This initiative aims to create a level playing field where nonbank payment providers and AI agents can operate on equal footing with traditional banks. Meanwhile, the EU’s AI Act, approved in late 2025, classifies high-risk AI systems used in finance as subject to strict oversight, including conformity assessments and human oversight. These developments are not coordinated but are occurring simultaneously, setting the stage for a complex regulatory environment where the legal and technical layers intersect.
“The European approach is simultaneously the harder path and the more durable one. It’s slower, but creates a resilient, open infrastructure.”
— Thorsten Meyer
European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Challenges and Regulatory Timelines
It remains unclear how quickly the EU will fully implement PSD3 and PSR, with estimates ranging from 2027 to 2028. The AI Act’s high-risk obligations are also subject to legislative delays, potentially slipping into 2027. The coordination between these regimes and their impact on practical AI payment capabilities in Europe are still evolving, and the extent to which the legal restrictions will limit or shape AI agent behavior remains uncertain.
AI-Powered Fraud Detection for Small Accounting Firms: A Step-by-Step Guide to Using Open-Source AI and Anomaly Detection Models to Flag Suspicious Transactions — No Coding Required
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
European regulators are expected to finalize and implement PSD3 and PSR by 2028, establishing the core payment infrastructure. The AI Act’s high-risk obligations will also take effect around 2026-2027, influencing AI system development and deployment. Industry stakeholders are closely watching how these laws will interact, and whether new technical solutions or legal interpretations will emerge to bridge the seams. The next milestones include regulatory adoption, technical standard setting, and practical testing of AI agents within this statutory framework.
digital payment infrastructure hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does the European regulatory approach differ from the US in developing agentic commerce?
Europe relies on statutory laws—PSD3/PSR and the AI Act—to define the infrastructure and guardrails, making the process slower but more standardized and resilient. The US relies on private, decision-based payment networks that extend capabilities more rapidly but with less legal uniformity.
When will AI agents in Europe be able to make payments autonomously?
It is not yet clear; full autonomous payment capability depends on the implementation of PSD3/PSR and the AI Act, expected around 2027-2028, but regulatory and technical uncertainties remain.
What are the main risks of Europe’s statutory approach?
The main risks include slower development and potential delays in deployment, but it offers a more secure, transparent, and standardized environment for AI-driven finance.
Will the European approach lead to better or worse AI financial services?
This remains an open question; the statutory, open infrastructure may foster more durable and interoperable services, but at the cost of speed compared to private networks.
Source: ThorstenMeyerAI.com
