📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two major regulatory regimes—PSD3/PSR and the AI Act—that jointly shape the legal and technical infrastructure for AI-driven transactions. This convergence impacts how AI agents can perform payments and assessments, with implications for speed, openness, and durability.
European agentic commerce is currently being shaped by two major regulatory regimes—PSD3/PSR and the AI Act—that are arriving simultaneously and are not coordinated. This convergence creates a unique, statutory infrastructure that will determine how AI agents can perform payments, assessments, and transactions within Europe, affecting the speed, openness, and durability of the market.
The core issue is that, unlike in the US where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enable agent payments, Europe’s payment system is governed by law. Under PSD2, strong customer authentication requires human approval, preventing AI agents from acting as payers without legal change.
In November 2025, the EU agreed on PSD3 and the Payment Services Regulation (PSR), which will rebuild payment rails with mandatory API parity, requiring banks to expose interfaces as capable as their apps, and open finance rules under FIDA, making data access a public utility. These reforms aim to create a more open and standardized payment infrastructure.
Simultaneously, the EU’s AI Act, with high-risk obligations set to land in 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration. These guardrails will limit and regulate how AI can operate in financial transactions.
The convergence of these two regimes means that the ability of an AI agent to pay or assess depends on the interaction between the statutory payment rails and the AI regulatory guardrails. The regimes differ in scope, timelines, and authorities, creating seams and constraints that are not present in the US model, which relies on private, decision-driven infrastructure.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Impacts of Dual EU Regulatory Frameworks on Agentic Commerce
This regulatory convergence means European agentic commerce will develop more slowly but potentially more durably than in the US. The statutory, law-based infrastructure is harder to change but offers transparency, openness, and resilience. It also shifts the competitive landscape, favoring systems built on open standards and public utilities over private control.
For businesses and consumers, this could lead to a more secure, interoperable, and fair environment for AI-driven financial services, but it also introduces delays and complexity in deploying fully autonomous payment agents. The outcome will depend on which infrastructure—private or statutory—becomes more effective and preferred by the market.
European AI payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms Reshape Payment and AI Governance
Historically, Europe’s payments landscape has been shaped by regulation, notably PSD2, which mandated strong customer authentication and access to bank data. Recent developments include the November 2025 agreement on PSD3 and PSR, which will overhaul payment infrastructure with API parity and open finance principles, expected to be implemented by 2028.
At the same time, the EU’s AI Act, agreed in 2025 and set to impose high-risk obligations in 2026, aims to regulate AI systems used in high-stakes environments like finance. It requires conformity assessments, human oversight, and registration, effectively acting as guardrails that limit AI autonomy and enforce accountability.
These reforms are not coordinated, and their different timelines and scopes create a complex regulatory environment that will influence how AI agents are developed, authorized, and operated across Europe.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
Open banking API integration devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in EU’s Regulatory Timelines and Implementation
It remains unclear how quickly the PSD3/PSR reforms will be fully implemented and adopted across banks and fintechs. Additionally, the final scope and enforcement of the AI Act high-risk obligations could shift, potentially affecting the timeline and nature of AI guardrails.
There is also uncertainty about how market players will navigate the seams between the two regimes, and whether new technical standards or industry practices will emerge to bridge the regulatory gaps.
Machine Learning for High-Risk Applications: Approaches to Responsible AI
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Regulatory Milestones and Market Adaptation
Key developments include the finalization and implementation of PSD3 and PSR, expected around 2028, which will establish the new payment rails. Simultaneously, the AI Act’s high-risk obligations are likely to take effect by mid-2026, setting the guardrails for AI systems in finance.
Market participants are preparing for these changes by developing compliant AI systems and infrastructure, but the pace of adoption will depend on regulatory clarity, technological readiness, and how effectively the regimes are integrated in practice.
European payment rails API
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the EU’s new payment rails affect AI agents’ ability to make payments?
They will require AI agents to operate within a statutory framework that mandates human authorization and API standards, potentially delaying fully autonomous payments but increasing security and openness.
What is the main difference between US and European agentic commerce infrastructure?
The US relies on private, decision-driven infrastructure built by firms like Mastercard and Visa, while Europe is constructing a statutory, regulation-based infrastructure governed by law and open standards.
When will the new European regulations be fully in place?
PSD3 and PSR are expected to be implemented around 2028, while the high-risk obligations of the AI Act are likely to take effect by mid-2026.
How might these regulatory differences impact innovation in AI commerce?
The slower, more open European approach may foster more durable and interoperable systems, but could also slow down rapid deployment compared to the US’s faster, private-driven model.
Source: ThorstenMeyerAI.com
