📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that will define how AI agents can operate in payments and data. This convergence creates a slower but more durable infrastructure compared to the US model.
European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities. This is due to the simultaneous implementation of two regulatory regimes—PSD3/PSR and the AI Act—that are shaping the foundational infrastructure for agentic commerce in Europe.
The core issue is that European payment regulations—specifically PSD2—require human approval for online transactions, creating a legal barrier for AI agents to act as payers. Unlike the US, where private payment networks like Mastercard and Visa enable agent payments through proprietary infrastructure, Europe’s payment system is defined by statutory law, with PSD3 and the Payment Services Regulation (PSR) set to overhaul the payment rails by mandating API parity and open access for nonbank actors. These reforms are scheduled for implementation around 2028, but are still in legislative development, with some aspects like FIDA (the open finance directive) and the AI Act high-risk obligations still under negotiation.Simultaneously, the AI Act, which will impose high-risk obligations such as conformity assessments, human oversight, and registration for AI systems involved in credit scoring and fraud detection, is expected to come into force in 2026. These regulations will impose guardrails on the AI systems that power agentic finance, further complicating the regulatory environment. The convergence of these two regimes—one rebuilding the payment infrastructure, the other imposing AI guardrails—means that the European agentic commerce system is being co-defined by statutory rules that are not aligned or designed together.
This dual regulation results in a fragmented, slower path for European agentic commerce, contrasting with the US approach where commercial rails are privately controlled and extendable by decision. The European system, rooted in law, is more deliberate but potentially more durable, as it creates a foundation less susceptible to private control or network degradation. The key insight is that the capability of AI agents to perform transactions is similar on both sides; what differs is the underlying legal architecture they must operate within.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Commerce
This convergence of regulatory regimes means that European agentic commerce will likely develop more slowly but with a more robust and open infrastructure. The statutory nature of the payment rails, with mandated API parity and open finance, prevents private control and favors a more inclusive ecosystem. This could lead to a more resilient market, but at the cost of delayed deployment and adoption compared to the US, where private networks and decision-based extensions enable faster innovation.
For businesses and consumers, the European approach promises a foundation less vulnerable to monopolistic control and more aligned with long-term regulatory stability. However, the slower legislative process and the complexity of aligning two separate regimes may hinder quick adoption of AI-powered payment agents, impacting competitiveness in the short term.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact on Agentic Commerce
Europe’s payment system has historically been governed by strict regulations aimed at security and consumer protection, exemplified by PSD2. The current push toward PSD3 and PSR aims to modernize this infrastructure by mandating API access and open finance, with legislation expected to be enacted around 2028. Meanwhile, the AI Act, agreed upon in November 2025 and set to take effect in 2026, introduces high-risk obligations for AI systems involved in financial transactions, including oversight and conformity assessments.
This regulatory environment is a response to the growing importance of AI in commerce, highlighting Europe’s cautious but deliberate approach. Unlike the US, where private firms like Mastercard and Visa have built proprietary infrastructure allowing agent payments, Europe’s statutory framework emphasizes legal and regulatory compliance, shaping a different trajectory for agentic commerce development.
“European agentic commerce is being co-defined by two converging regimes—PSD3/PSR and the AI Act—that are not designed together, creating a fragmented but potentially more durable infrastructure.”
— Thorsten Meyer
Start Using AI As Your Business Accountant: The Step-byStep Playbook to Automate Your Bookkeeping, Maximize Deductions, and Fire Your CPA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Challenges in European Agentic Payment Regulation
It is still unclear how quickly the legislative process will finalize PSD3 and the AI Act, and how effectively the new infrastructure will support seamless AI-driven payments. There is also uncertainty about how regulators will interpret and enforce high-risk obligations, and whether technical standards will align across regimes to facilitate practical implementation.
European payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Legislative Milestones and Implementation Timeline
Legislative bodies are expected to finalize PSD3 and PSR by 2028, with some provisions potentially coming into force earlier. The AI Act’s high-risk obligations are scheduled for 2026, with ongoing trilogue negotiations possibly extending deadlines into 2027. Industry stakeholders are closely monitoring these developments, preparing for the technical and legal adjustments needed to operate within the new European infrastructure.
Machine Learning for Financial Risk Management with Python: Algorithms for Modeling Risk
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the new European payment regulations affect AI agents?
The new regulations will require AI agents to operate within a statutory framework that mandates API access, human oversight, and compliance with high-risk obligations. This will likely slow deployment but enhance security and openness.
Why is Europe’s approach different from the US?
Europe’s approach is rooted in statutory law and regulatory oversight, requiring legal authorization for payments and AI operations, whereas the US relies on private, commercial payment networks that can extend agent capabilities by decision.
When will these regulations be fully implemented?
PSD3 and PSR are expected to be enacted around 2028, with high-risk obligations under the AI Act possibly coming into force in 2026 or 2027, depending on legislative progress.
What are the advantages of Europe’s slower, law-based infrastructure?
It offers a more durable, open, and less monopolized foundation, reducing risks of private control and promoting long-term stability in agentic commerce.
Source: ThorstenMeyerAI.com
