📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two overlapping regulatory regimes: PSD3/PSR, which rebuild payment infrastructure, and the AI Act, which imposes high-risk AI obligations. This convergence creates a unique, statutory foundation that differs from the US approach, affecting how AI agents can operate in Europe.
European law currently prevents AI agents from directly paying for transactions, despite technological capabilities, due to the legal requirement for human authorization at the payment point. This legal gap highlights how Europe’s agentic commerce is being shaped not by technology but by two converging regulatory regimes: PSD3/PSR and the AI Act, which together impose structural constraints on how AI can operate in financial transactions.
In Europe, the ability of AI agents to make payments is restricted by existing laws requiring human authorization, despite the technical capacity for autonomous payments. The upcoming PSD3 and Payment Services Regulation (PSR), scheduled for implementation around 2028, are set to rebuild payment infrastructure with mandatory API parity, allowing banks to expose interfaces as capable as their apps. Simultaneously, the European AI Act, with high-risk obligations starting in 2026, classifies AI systems involved in credit scoring, fraud detection, and other financial functions as high-risk, requiring conformity assessments, human oversight, and registration.
This dual regulatory approach means that the legal architecture governing AI agents in Europe is not a product of technological innovation but a statutory framework that is still under development. The two regimes, designed separately, create seams and constraints that define what AI agents can and cannot do—particularly regarding payment authorization and data access—making the European agentic commerce environment slower but potentially more resilient and open than the US model, which relies on private, commercially controlled rails.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Commerce
This convergence of laws means that Europe’s approach to agentic commerce prioritizes legal robustness and openness over speed. The statutory nature of the payment rails, with mandated API parity and open finance, ensures that no single entity can dominate the infrastructure, fostering a more distributed and resilient ecosystem. However, it also results in slower deployment and adoption of autonomous payment capabilities compared to the US, where private firms can extend commercial rails rapidly. Ultimately, this regulatory architecture could influence the global competitiveness of European AI-driven financial services and set a precedent for balancing innovation with legal oversight.
European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms Reshape Payment and AI Governance
Historically, Europe’s financial infrastructure has been heavily regulated, with laws like PSD2 establishing strong customer authentication and multi-factor verification. The current reforms, PSD3 and PSR, aim to overhaul these frameworks by requiring banks to expose their interfaces via APIs, enabling more open, interoperable payment systems. Concurrently, the AI Act, agreed upon in November 2025, introduces high-risk classifications for AI systems involved in financial services, mandating conformity assessments and human oversight. These developments are part of a broader effort to modernize Europe’s financial and AI ecosystems, but they are unfolding on different timelines and under different authorities, creating a complex regulatory landscape.
“European agentic commerce is being co-defined by two regulatory regimes—PSD3/PSR rebuilding the rails and the AI Act installing guardrails—which were not designed together, inheriting seams and constraints.”
— Thorsten Meyer
Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Around Implementation Timelines and Practical Effects
While the legal frameworks are set to be enacted between 2026 and 2028, it remains unclear how quickly banks, AI developers, and regulators will fully implement and operationalize these reforms. Specific mechanisms for AI agents to autonomously pay or access data in compliance with the new laws are still under development, and there is uncertainty about how the seams and constraints will play out in practice, especially regarding cross-border interoperability and enforcement.
payment authorization hardware for businesses
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory Implementation and Market Adaptation
Regulators are expected to publish detailed technical standards and guidelines for PSD3/PSR and the AI Act over the next two years. Banks, AI firms, and fintechs will begin integrating these requirements into their systems, with pilot programs and phased rollouts likely starting in 2027. Monitoring these developments will be essential to understanding how the European agentic commerce ecosystem evolves and whether it can compete with the faster, private-sector-driven US model.
The Developer's Playbook for Large Language Model Security: Building Secure AI Applications
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the new European regulations affect AI agents’ ability to make payments?
The regulations will impose legal constraints requiring AI agents to operate within a framework of human oversight, API access, and high-risk compliance, delaying autonomous payment capabilities compared to the US but potentially creating a more open and resilient system.
Why is Europe taking a slower approach to agentic commerce?
Europe’s statutory, regulation-driven approach emphasizes legal robustness, interoperability, and open finance, which naturally results in a slower deployment timeline but aims for a more durable and equitable ecosystem.
What are the main differences between US and European agentic commerce infrastructures?
The US relies on private, commercially controlled rails that can be extended rapidly by decision, while Europe is building a statutory, open infrastructure governed by law, which is slower but more distributed and resilient.
When will AI agents in Europe likely be able to autonomously pay for transactions?
It is uncertain; full autonomous payment capabilities depend on the final implementation of PSD3/PSR and AI Act regulations, expected around 2027-2028, but practical deployment may take longer.
Source: ThorstenMeyerAI.com
