Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two simultaneous regulatory regimes—PSD3/PSR and the AI Act—resulting in a statutory, open, but slower infrastructure. This contrasts with the US’s faster, private-led approach.
European law currently prohibits AI agents from acting as legal payers in online transactions, due to the requirement for human authorization at the point of payment. While AI can compare products and fill shopping carts, it cannot complete payments without human approval, creating a fundamental legal gap.
This legal gap stems from two converging regulatory regimes in Europe. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and scheduled for implementation by 2028, are rebuilding payment infrastructure with mandated API parity, requiring banks to expose interfaces as capable as their consumer apps. Simultaneously, the EU AI Act, with high-risk obligations landing in 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration.
These two regimes are not coordinated; PSD3/PSR focus on payment infrastructure, while the AI Act sets guardrails for AI systems. The interaction of these regulations determines whether an AI agent can pay, assess, or recommend in European commerce. The regulatory timelines differ, with PSD3/PSR potentially taking until 2028 and the AI Act’s high-risk obligations possibly slipping to 2027. This fragmented legal architecture means the agentic commerce system in Europe is being co-defined by these overlapping, yet separate, legal frameworks.
The Rails — Thorsten Meyer AI
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
AN AGENT THAT CAN SHOP CANNOT PAY·
THE CONSTRAINT IS LEGAL, NOT TECHNOLOGICAL·
SCA REQUIRES A HUMAN PAYER · NO MECHANISM FOR AGENTS·
US COMMERCIAL RAILS · EXTENDED BY DECISION · FAST, CONCENTRATED·
EU STATUTORY RAILS · DEFINED BY LAW · SLOW, OPEN·
PSD3/PSR AGREED NOV 27 2025 · PUBLISHING SUMMER 2026·
MANDATORY API PARITY · NO MORE DEGRADED INTERFACES·
DIRECT PAYMENT-SYSTEM ACCESS FOR NONBANKS · NO SPONSOR-BANK VETO·
AI ACT · CREDIT SCORING IS HIGH-RISK·
FOUR INSTRUMENTS · PSR / FIDA / PSD3 / AI ACT · ONE AGENT·
THE FRICTION IS INTER-REGIME, NOT INTRA-REGIME·
THE MANDATE BRIDGE · AUTHORIZE ONCE, DELEGATE BOUNDED ACTION·
WHICH FOUNDATION AN AGENT ECONOMY PREFERS IS THE OPEN QUESTION·
THE RAILS·
AN AGENT THAT CAN SHOP CANNOT PAY·
THE CONSTRAINT IS LEGAL, NOT TECHNOLOGICAL·
SCA REQUIRES A HUMAN PAYER · NO MECHANISM FOR AGENTS·
US COMMERCIAL RAILS · EXTENDED BY DECISION · FAST, CONCENTRATED·
EU STATUTORY RAILS · DEFINED BY LAW · SLOW, OPEN·
PSD3/PSR AGREED NOV 27 2025 · PUBLISHING SUMMER 2026·
MANDATORY API PARITY · NO MORE DEGRADED INTERFACES·
DIRECT PAYMENT-SYSTEM ACCESS FOR NONBANKS · NO SPONSOR-BANK VETO·
AI ACT · CREDIT SCORING IS HIGH-RISK·
FOUR INSTRUMENTS · PSR / FIDA / PSD3 / AI ACT · ONE AGENT·
THE FRICTION IS INTER-REGIME, NOT INTRA-REGIME·
THE MANDATE BRIDGE · AUTHORIZE ONCE, DELEGATE BOUNDED ACTION·
WHICH FOUNDATION AN AGENT ECONOMY PREFERS IS THE OPEN QUESTION·
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
The rail’s owner sets the rule — extend to agents by product decision
Fast — moves at product speed
Concentrated — a few firms control access
PSD2/PSD3, PSR, SCA, FIDA
The legislature sets the rule — no network can grant payer status
Slow — moves at legislative speed
Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.
Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Payments
This convergence of regulatory regimes makes Europe’s approach to agentic commerce more deliberate but also slower compared to the US. While the US relies on private infrastructure—like Mastercard’s Agent Pay and Visa’s Intelligent Commerce—that can extend decision-making authority quickly, Europe’s statutory rails are built into law, ensuring openness and resilience but at the cost of speed. The open finance mandates and API parity requirements foster a more inclusive environment, potentially leading to a more durable and equitable market structure. However, the complexity and timing of these regulations mean European AI agents may lag behind their US counterparts in operational capabilities, raising questions about competitiveness and innovation.
European Regulatory Rebuilding of Payment and AI Frameworks
Historically, European payments have been governed by regulation requiring human oversight, such as Strong Customer Authentication under PSD2. The upcoming PSD3/PSR reforms aim to overhaul the payment infrastructure, mandating API parity and open access for nonbank entities, effectively creating a public utility-like data and payment substrate. At the same time, the AI Act, agreed in November 2025, classifies high-risk AI systems used in finance as subject to strict oversight, including conformity assessments and human oversight. These two developments are occurring simultaneously but are not designed as a unified framework, leading to a fragmented yet comprehensive system that shapes how AI agents can operate in European markets.
“The core challenge is that the legal authority for AI agents to pay is not yet established, even though the technological capability exists.”
— Thorsten Meyer
Unresolved Aspects of Europe’s Regulatory Convergence
It remains unclear when fully compliant, operational AI agents capable of paying in Europe will be legally authorized, as the implementation timelines for PSD3/PSR and the AI Act may shift. Additionally, the exact mechanisms through which these regimes will interact and whether they will fully enable autonomous agent payments are still under development.
Next Steps in European Agentic Commerce Regulation
Regulators will finalize the implementation of PSD3/PSR by 2028 and clarify the high-risk obligations under the AI Act, likely through trilogue negotiations and technical standards. Observers will monitor how these frameworks influence the actual deployment of AI agents in commerce and whether legal authorization for autonomous payments will be established within the coming years.
Key Questions
When will AI agents in Europe be able to make payments independently?
It is not yet clear; the legal authorization depends on the final implementation of PSD3/PSR and the AI Act, likely around 2027 or later.
How does Europe’s approach differ from the US in developing agentic commerce?
Europe relies on statutory, regulation-based infrastructure with open, mandated APIs, making it slower but more durable. The US depends on private, commercial rails that can extend decision authority faster and more privately.
What are the main challenges facing Europe’s regulatory convergence?
The primary challenge is coordinating the timelines and interactions of the two regimes—PSD3/PSR and the AI Act—and ensuring they work together to enable autonomous AI payments.
Will the regulatory frameworks favor innovation or stability?
Europe’s approach emphasizes stability, openness, and resilience, potentially at the expense of speed, whereas the US prioritizes rapid deployment through private infrastructure.
Source: ThorstenMeyerAI.com