📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is evolving under two major regulations—PSD3/PSR and the AI Act—that are shaping the payment and AI guardrails. This dual regulation creates a slower but more open and durable system compared to the US, where private infrastructure dominates.
European regulatory regimes are currently co-defining the infrastructure for agentic commerce, with PSD3/PSR and the AI Act setting the legal and technical framework. This convergence determines whether AI agents can pay or merely recommend and assess, fundamentally shaping Europe’s digital economy.
The core issue is that, unlike the US where private companies like Mastercard, Visa, and Plaid operate commercial rails allowing AI agents to pay directly, Europe’s payment infrastructure is governed by law. Under PSD2, Strong Customer Authentication requires human approval for online payments, preventing AI agents from acting as legal payers without regulatory changes. The upcoming PSD3 and Payment Services Regulation (PSR), scheduled for 2026-2028, aim to rebuild payment rails with API parity, exposing banking interfaces to facilitate open finance. Simultaneously, the EU AI Act, set to impose high-risk obligations on AI systems in 2026, classifies AI used for credit scoring and fraud detection as high-risk, requiring conformity assessments, human oversight, and registration.This dual regulation creates a fragmented, statutory infrastructure that is inherently slower to develop than the private, commercially controlled rails of the US. The European approach enforces legal authority over the payment process, making the deployment of AI agents dependent on legislative timelines and regulatory approvals, rather than technological capability alone.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Why Dual Regulation Shapes Europe’s Digital Commerce Future
This regulatory convergence makes Europe’s agentic commerce system more deliberate and potentially more resilient, as it is built on laws that no single entity controls. The open finance framework and API parity requirements foster a more transparent and accessible ecosystem, contrasting with the US model where private firms own the infrastructure. However, this also means slower deployment of AI-enabled payment capabilities. The outcome will influence whether Europe’s market favors speed and concentration or openness and durability, impacting global digital commerce standards.European open banking API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks for Payment and AI in 2026
The EU’s approach to digital commerce is evolving through two major legislative initiatives: PSD3/PSR, which aims to rebuild payment infrastructure with mandatory API access and open finance, and the AI Act, which imposes high-risk obligations on AI systems used in finance. These regimes are not coordinated but are converging in time, resulting in a complex, statutory environment for AI agents. The US, by contrast, relies on private infrastructure built by major card networks and data aggregators, allowing faster and more concentrated deployment of agentic payment solutions.“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Regulatory Timelines and Implementation
It remains unclear whether the PSD3/PSR legislation will be fully enacted by 2028, as some components like FIDA are still in trilogue negotiations. The AI Act’s high-risk obligations could be delayed beyond 2027, depending on legislative progress and political will. Additionally, how these regulations will interact in practice, especially regarding enforcement and compliance, is still uncertain.
Acquiring Card Payments
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulators are expected to finalize PSD3/PSR by 2026, with implementation likely beginning in 2027-2028. The AI Act’s high-risk provisions are also scheduled for 2026, but their practical application may extend into 2027. Industry stakeholders are preparing for these changes, and pilot programs or transitional provisions could influence the pace at which AI agents can operate fully within European payment systems.
AI-Powered Software Audits: Revolutionizing Audit, Compliance, Risk, Security, and Governance for Organizations: Harnessing AI to Automate Compliance, and Strengthen Governance in the Digital era
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US?
Europe relies on statutory, legally mandated payment rails with API parity and open finance, making the infrastructure more open and regulated. The US depends on private, commercial rails owned by firms like Mastercard and Visa, allowing faster but less transparent deployment.
When will AI agents be able to pay directly in Europe?
It depends on the legislative timelines for PSD3/PSR and the AI Act. Full capability may not be available until after 2028, once the regulations are enacted and compliance frameworks are in place.
What are the main risks of Europe’s regulatory approach?
The primary risk is slower deployment of AI-enabled payment solutions, which could impact competitiveness. However, the approach aims for a more resilient and transparent system, potentially reducing systemic risks.
Will Europe’s approach influence global standards?
Yes, Europe’s statutory, open-infrastructure model could set a precedent for global regulation, especially as AI and digital payments become more integrated worldwide.
Source: ThorstenMeyerAI.com
