📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two simultaneous regulatory regimes—PSD3/PSR and the AI Act—that define how AI agents can operate in payments and AI systems. This convergence creates a complex, statutory infrastructure that influences market development and speeds of adoption.
European law requires human authorization for online payments, preventing AI agents from acting as payers despite technological capabilities. This legal constraint is being addressed through two major regulatory frameworks—PSD3/PSR and the AI Act—that are simultaneously shaping the infrastructure and guardrails for agentic commerce in Europe.
The core issue is that, unlike in the US where private infrastructure like Mastercard’s Agent Pay enables agent payments, Europe’s payment system is governed by statutory regulations, notably PSD2 and the upcoming PSD3/PSR. These laws mandate multi-factor human authentication and API parity, meaning banks must provide open access to their interfaces, but do not currently permit AI agents to act as payers without human oversight. Simultaneously, the EU AI Act classifies high-risk AI systems—such as those used for credit scoring or fraud detection—as subject to conformity assessments, human oversight, and registration, which impacts the development and deployment of AI agents in financial services. The convergence of these regimes—regulatory-driven payment rails and AI guardrails—means that the European agentic commerce system is being co-defined by statutory laws that are still under development, with implementation timelines stretching into 2027 and 2028. This creates a fragmented but deliberate infrastructure that differs fundamentally from the US’s faster, private-sector-led approach, emphasizing open, standardized interfaces and shared data substrates.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Europe’s Dual Regulatory Frameworks for Agentic Commerce
This convergence of legal regimes in Europe means that the development of AI-powered financial agents will proceed at a slower pace compared to the US, due to legislative timelines and the need for compliance with high-risk AI standards. However, the resulting infrastructure—built on open APIs and shared data—may foster a more resilient, transparent, and inclusive market. For readers, this signifies that Europe’s approach prioritizes legal certainty and stability over speed, potentially leading to a different competitive landscape and innovation trajectory in agentic commerce.
European open banking API developer tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact on Payment and AI Laws
Historically, Europe’s payment systems have been tightly regulated, with PSD2 introducing strong customer authentication and open banking. The upcoming PSD3/PSR aims to overhaul these rails, mandating API parity and direct access for non-bank providers, effectively democratizing payment infrastructure. Concurrently, the EU AI Act, agreed in November 2025, establishes high-risk obligations for AI systems, requiring conformity assessments, human oversight, and registration, with high-risk obligations expected to be implemented by 2027 or 2028. These developments are not coordinated but are converging, creating a complex legal environment that will govern AI agents in finance for years to come. Unlike the US, where private firms extend commercial rails, Europe’s statutory approach embeds the infrastructure within law, influencing the pace and nature of innovation.
“The question ‘can an AI agent pay for things in Europe’ has no technological answer, only a regulatory one.”
— Thorsten Meyer
Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Surrounding Implementation Timelines and Regime Interactions
It is not yet clear how quickly regulators will finalize and enforce PSD3/PSR and the AI Act, with legislative processes potentially slipping into 2027 or 2028. Additionally, how the two regimes will interact in practice—such as how AI systems will be integrated into the payment infrastructure and what specific compliance hurdles will emerge—is still uncertain. The extent to which these laws will facilitate or hinder rapid innovation remains to be seen.
Yubico – YubiKey 5C NFC – Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified – Protect Your Online Accounts
POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory Development and Market Adaptation
Regulators are expected to publish detailed implementation rules for PSD3 and the AI Act over the next 12 to 24 months. Financial institutions, AI developers, and fintech firms are preparing for compliance, with pilot programs and pilot regulations likely to emerge. Observers will watch how the legal frameworks influence the pace of AI agent adoption and the structure of the European agentic commerce market, which may differ significantly from the US model.
DALIX Bank Bags Money Pouch Security Deposit Utility Zipper Coin Bag Blue 2 Pack
FEATURES: THIS IS A 2 PACK QUANTITY. Main Zipper Compartment, Dalix original hardware zippers, Slightly expandable
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the European laws affect AI agents’ ability to make payments?
European laws require human authorization for payments, meaning AI agents cannot act as payers until the laws explicitly permit it, which is still under development.
When will the new regulations be fully enforced?
Legislative timelines suggest enforcement could begin between 2027 and 2028, but exact dates depend on legislative progress and regulatory implementation.
How does Europe’s approach differ from the US?
Europe’s approach is statutory, built into law with open, mandated interfaces, whereas the US relies on private, commercial rails controlled by firms like Mastercard and Visa.
Will the regulatory complexity slow down innovation?
Yes, the slower legislative process and high compliance standards may delay the deployment of fully autonomous AI agents in payments, but could lead to more durable and transparent systems.
What are the risks of fragmented regulation?
Fragmentation could lead to implementation challenges, inconsistencies, and delays, but it also offers opportunities for more tailored, high-quality regulation.
Source: ThorstenMeyerAI.com
