📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is currently being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that are being developed simultaneously. This convergence creates a complex legal framework that impacts how AI agents can operate in payments and data assessment.
European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities. The regulatory landscape is being reshaped by two major regimes—PSD3/PSR and the AI Act—that will determine how agentic commerce functions in Europe, making this a pivotal moment for the future of AI-driven transactions.
The core issue is that, under European law, an AI agent cannot legally act as a payer because the payment system regulations require human authorization. Unlike the US, where private infrastructure like Mastercard’s Agent Pay enables autonomous payments, Europe’s payment rails are statutory and regulated by law, notably through the PSD2 framework.
Recent developments include the agreement on PSD3 and the Payment Services Regulation (PSR), expected to be published in summer 2026, which will overhaul payment interfaces with mandatory API parity, allowing banks to expose their systems to third-party agents. Simultaneously, the European AI Act, scheduled to impose high-risk obligations on AI systems—such as credit scoring and fraud detection—will enforce conformity assessments, human oversight, and registration requirements starting in 2026.
This convergence means that the legal architecture governing AI agents is being built from two separate regimes that were not designed to work together. The payment infrastructure will be rebuilt under PSD3/PSR, while AI guardrails are established through the AI Act, creating a fragmented but interconnected legal environment that will shape how agents can operate in Europe.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Agents
This dual regulation makes European agentic commerce more complex and slower to develop compared to the US, where private networks enable faster deployment of autonomous payments. However, the European approach, rooted in statutory law, promises greater durability and openness, as open finance and API parity reduce control by individual banks and foster a more inclusive ecosystem. The outcome will influence whether European or US models become the dominant foundation for global agentic commerce, depending on which regulatory architecture proves more effective and adaptable.
European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact on AI Commerce
Until now, European payment regulation has prioritized human oversight, with laws like PSD2 requiring multi-factor authentication for online payments. The recent agreements on PSD3 and PSR aim to overhaul this system, making payment interfaces more open and standardized. Meanwhile, the AI Act, agreed upon in November 2025, introduces high-risk classifications for AI systems involved in financial transactions, demanding strict compliance and oversight.
This regulatory environment is unique because these two regimes—payment infrastructure and AI governance—are being developed concurrently, each with different timelines and authorities. Their intersection creates a complex but potentially more resilient foundation for AI-driven financial services in Europe.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
AI Compliance Mastery: Automate Legal Reviews, Risk Assessments, and Policy Management with ChatGPT and Excel Workflows: A Practical Guide for Law Firms and Compliance Teams to Integrate AI Tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Regulatory Timelines and Implementation
It remains unclear how quickly the PSD3/PSR regulations will be implemented and how effectively they will integrate with the AI Act’s high-risk obligations. There is also uncertainty about how authorities will enforce compliance and how these regulations will impact the pace of AI agent deployment in Europe.
payment authorization hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European AI and Payment Regulation Development
Regulatory bodies are expected to publish PSD3 and PSR in summer 2026, with implementation timelines extending into 2028. The AI Act’s high-risk obligations are also likely to be clarified through further legislative and regulatory guidance. Stakeholders should monitor these developments to understand how the legal environment for AI agents will evolve and influence market deployment.
Trustworthy Medical AI: A Builder's Guide to Safe, Compliant Software as a Medical Device
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will PSD3/PSR change payment capabilities for AI agents in Europe?
They will mandate API parity and open access to payment interfaces, enabling AI agents to initiate payments once the regulations are enacted and banks comply.
What does the European AI Act mean for high-risk AI systems?
It will require AI systems involved in financial transactions to undergo conformity assessments, maintain human oversight, and register with authorities, impacting how AI can operate in commerce.
Why is European agentic commerce slower than in the US?
Because European regulations are statutory and require legislative approval, making the process slower than the private, decision-driven infrastructure in the US.
Could these regulations limit innovation in AI payments?
Potentially, as the regulatory process may impose constraints on deployment speed and operational flexibility, but they also aim to build a more secure and durable system.
When will these regulatory changes take full effect?
Implementation is expected around 2026 to 2028, with full effects depending on legislative and regulatory enforcement timelines.
Source: ThorstenMeyerAI.com
