📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that jointly define the legal infrastructure. This convergence impacts how AI agents can operate in payments and data access, making Europe’s approach more deliberate but slower than the US.
European law currently prevents AI agents from making payments without human authorization, even though the technological capability exists. This is due to two regulatory regimes—PSD3/PSR and the AI Act—being implemented simultaneously, shaping the future of agentic commerce in Europe.
The core issue is that, unlike in the US where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enables autonomous payments, Europe’s payment system is governed by statutory regulations requiring human oversight. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, will overhaul payment rails by mandating API parity and open access, allowing nonbank payment providers to operate on equal footing with banks. Concurrently, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems involved in credit scoring, fraud detection, and other financial functions as high-risk, subject to conformity assessments, human oversight, and registration. These two regimes are not designed together; they intersect at the point of agentic commerce, creating a fragmented but deliberate legal architecture. This means that an AI agent’s ability to pay, assess, or recommend depends on separate, evolving legal standards—making the European approach slower but potentially more durable than the US model, which relies on private, commercially controlled rails.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks for European AI Commerce
This convergence of regulations means that European agentic commerce will develop within a more complex and legally constrained environment than in the US. While slower to implement, the statutory rails aim to create a more open, transparent, and durable infrastructure that reduces control by individual networks and enhances interoperability. This could influence the global competitiveness of European AI-driven financial services and set a precedent for regulation-driven infrastructure development, emphasizing legal certainty over speed.
European open banking API developer tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Rebuilding of Payment and AI Frameworks
Historically, Europe’s payment infrastructure has been tightly regulated, with strong customer authentication (PSD2) requiring multi-factor human approval for online transactions. The upcoming PSD3 and PSR aim to rebuild these rails with API parity, exposing banking interfaces to third-party providers and nonbank payment services. Simultaneously, the EU AI Act, proposed in 2025 and scheduled for high-risk classification in 2026, imposes strict compliance, oversight, and registration requirements on AI systems involved in financial decision-making. These developments are not coordinated but are converging, fundamentally shaping how agentic commerce can operate within Europe’s legal landscape.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
Start Using AI As Your Business Accountant: The Step-byStep Playbook to Automate Your Bookkeeping, Maximize Deductions, and Fire Your CPA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation and Impact of Regulations
It is still unclear how quickly the PSD3 and AI Act regulations will be fully implemented and how they will interact in practice. The exact timeline for operationalizing API parity and high-risk AI obligations remains uncertain, and the extent to which these frameworks will enable or constrain agentic commerce is not yet confirmed.
automated payment authorization devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory and Market Development
Regulatory agencies in Europe are expected to finalize the PSD3/PSR regulations by mid-2026, with implementation targeted around 2028. The AI Act’s high-risk obligations may be clarified or adjusted by 2027. Market participants and developers are closely monitoring these timelines, preparing for compliance, and testing how these legal frameworks will shape the operational environment for AI agents in finance.
Why and How to Create Effective AI Prompts for Regulatory Compliance: Governing AI Interaction in Financial Institutions (Responsible Regulatory Compliance)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US?
Europe’s approach relies on statutory laws that define payment and AI infrastructure, requiring compliance with regulations like PSD3/PSR and the AI Act. In contrast, the US depends on private, commercial rails controlled by firms like Mastercard and Visa, allowing faster deployment and extension of agentic payment capabilities.
When will AI agents in Europe be able to make payments autonomously?
It is not yet clear when fully autonomous AI payments will be permitted in Europe. The regulations are still being finalized, and legal authority to treat AI as a payer depends on future legislative decisions, likely around 2028 or later.
What are the advantages of Europe’s statutory rails?
Statutory rails aim to create a more open, interoperable, and durable infrastructure that reduces dependence on private networks and enhances transparency and consumer protection. They also set a legal foundation for trustworthy AI applications in finance.
Will Europe’s approach slow down innovation?
While slower to implement, Europe’s regulatory framework could foster more sustainable and trustworthy innovation by establishing clear legal standards and reducing fragmentation, potentially benefiting long-term market stability.
How might these regulations influence global standards?
Europe’s deliberate, law-based approach could set a precedent for global regulation of AI and payments, especially if it results in more robust and interoperable systems, influencing other jurisdictions’ regulatory strategies.
Source: ThorstenMeyerAI.com
