📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being built on two regulatory regimes—PSD3/PSR and the AI Act—that are shaping the payment and AI infrastructure. This dual regulation creates a complex, slower, but more durable foundation compared to the US.
European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities. The region’s payment infrastructure is being reconstructed under two major regulatory regimes—PSD3/PSR and the AI Act—that are not designed together but are converging in 2026, fundamentally shaping the future of agentic commerce in Europe.
In Europe, the capacity for AI agents to make payments is limited by law, specifically by the requirement for human authorization under the PSD2 framework. While AI can compare products, fill shopping carts, and recommend options, it cannot complete transactions autonomously because current regulations do not recognize AI as an equivalent payer.
Meanwhile, the European Union is simultaneously reforming its payment infrastructure through PSD3 and the Payment Services Regulation (PSR), which are scheduled to be implemented between 2026 and 2028. These reforms will mandate API parity, requiring banks to expose interfaces as capable as their own apps, thereby opening the payment rails to nonbank actors and AI agents.
At the same time, the EU AI Act, with high-risk obligations set to take effect in 2026, classifies AI systems involved in financial decision-making—such as credit scoring and fraud detection—as high-risk, subject to conformity assessments, human oversight, and registration requirements. These two regimes are not coordinated but are converging in the same timeframe, creating a complex regulatory environment for European agentic commerce.
This convergence means that the legal architecture, rather than technological capability, will determine what AI agents can do in Europe. The system is being co-defined by statutory rules that are slow to develop but aim for a more open and durable infrastructure, compared to the US model which relies on private, commercial rails controlled by firms like Mastercard and Visa.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Foundations for European AI Commerce
This dual regulation makes Europe’s approach to agentic commerce more deliberate and potentially more resilient over time. The statutory infrastructure—built on open APIs and open finance—limits control by individual firms and fosters a more open market environment. However, the slower legislative process means European AI agents may lag behind the US in deployment and innovation.
Ultimately, the architecture chosen—statutory versus commercial—will influence which model thrives: a slower, more open European system or a faster, more concentrated US one. The durability of Europe’s approach could lead to a more stable and inclusive market, but at the cost of speed and immediate innovation.
European AI payment authorization device
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms Reshape Payment and AI Frameworks
Since 2025, the EU has been working on PSD3 and the Payment Services Regulation (PSR), with implementation expected between 2026 and 2028. These reforms aim to overhaul Europe’s payment infrastructure by mandating API parity, enabling nonbank access, and promoting open finance. Simultaneously, the EU is developing the AI Act, which classifies high-risk AI systems involved in financial decision-making as subject to strict oversight and conformity assessments.
This regulatory convergence is unique, as the two regimes were not designed to work together but are now jointly shaping the landscape of agentic commerce. The reforms reflect Europe’s broader strategy to build a more open, resilient, and regulated digital economy, contrasting with the US reliance on private infrastructure.
“Europe’s approach is more deliberate and slower but aims for a more durable, open infrastructure, built on statutory rules rather than private control.”
— Thorsten Meyer
API parity payment infrastructure tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Surrounding Implementation Timelines and Market Impact
It remains unclear how quickly the reforms will be implemented and how effectively they will enable AI agents to autonomously pay in practice. The final scope and enforcement of the AI Act, especially regarding high-risk AI systems, may evolve, potentially affecting the pace and nature of agentic commerce in Europe. Additionally, coordination between the two regimes is still developing, and their real-world interaction remains uncertain.
Start Using AI As Your Business Accountant: The Step-byStep Playbook to Automate Your Bookkeeping, Maximize Deductions, and Fire Your CPA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in EU Regulatory Development and Market Adoption
The EU is expected to publish detailed implementation rules for PSD3 and the PSR in summer 2026, with phased rollout over the following years. Concurrently, the AI Act’s high-risk obligations will be clarified, with compliance deadlines possibly extending into 2027. Monitoring how industry adapts to these regulations and how AI agents evolve to meet new legal standards will be crucial in the coming years.
European payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
When will AI agents in Europe be able to autonomously make payments?
It is not yet clear when the regulatory framework will fully enable AI agents to execute payments without human approval. The key reforms are scheduled for 2026-2028, but practical implementation may take additional time.
How do European regulations differ from the US approach to agentic commerce?
Europe relies on statutory, regulation-driven infrastructure with open APIs and open finance, making the system slower to develop but more durable. The US depends on private, commercial rails controlled by firms like Mastercard, enabling faster deployment but less open access.
What role does the EU AI Act play in shaping agent capabilities?
The AI Act classifies high-risk AI systems involved in financial transactions as subject to oversight, conformity assessments, and human oversight, which could limit or guide how AI agents operate in payment contexts.
Will the dual regulatory regimes create barriers for AI innovation in Europe?
The regulatory complexity may slow down deployment and innovation initially, but the open, statutory infrastructure could foster more stable and inclusive growth over time.
What is the main difference between the US and European foundations for agentic commerce?
The US builds on private, commercial rails that firms control, while Europe is constructing a statutory, open infrastructure governed by law, which may lead to different market dynamics and resilience.
Source: ThorstenMeyerAI.com
