📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two converging regulatory regimes—PSD3/PSR rebuilding payment rails and the AI Act imposing high-risk guardrails—resulting in a slower but more durable system. The interaction of these regimes defines what agents can do and how they operate legally in Europe.
European law is currently defining the infrastructure for agentic commerce through two major regulatory regimes—PSD3/PSR and the AI Act—creating a complex legal environment that determines whether AI agents can pay or assess transactions.
The core issue is that, unlike in the US where private payment networks enable agent payments, Europe’s payment system is governed by statutory regulations requiring human authorization for online transactions, under PSD2 and upcoming PSD3/PSR reforms.
At the same time, the EU AI Act classifies high-risk AI systems—such as those used for credit scoring and fraud detection—as subject to compliance, human oversight, and registration, with high-risk obligations landing in 2026.
This convergence means that the ability of an AI agent to pay or perform financial assessments depends on the interaction of these two regimes, each with different timelines, scopes, and authorities. The reforms are not designed together but are shaping a unified infrastructure that will be slower to develop than the US model, which relies on private infrastructure extended by decision.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks for European AI Payments
This dual regulation approach makes European agentic commerce more deliberate and slower but potentially more resilient and open. The statutory nature of the rails means no single entity controls them, fostering open finance and API parity, which could lead to a more equitable and durable market structure. However, the pace of development is slower, and European agents may lag behind US counterparts in deployment and capabilities.
Understanding this framework is crucial for companies and developers aiming to operate AI agents in Europe, as the legal architecture directly constrains what is technically possible and how quickly innovations can be deployed.
EU AI Act Made Simple: Understanding, Implementing, and Governing Artificial Intelligence Under the New European Regulation (IT Made Simple Series)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Shift Toward Statutory Payment and AI Frameworks
Europe’s approach to agentic commerce is rooted in recent legislative developments: the PSD3 and Payment Services Regulation (PSR), expected to be enacted around 2028, will overhaul payment infrastructure with mandatory API parity and open finance provisions. Simultaneously, the EU AI Act, agreed upon in November 2025 with high-risk obligations scheduled for 2026, imposes strict compliance and oversight requirements on AI systems used for financial transactions.
Unlike the US, where private firms like Mastercard and Visa extend decision-based payment rails, Europe’s system is built on statutory rules that require legal authority for each transaction, making the process inherently slower but more regulated and transparent.
“The European approach is simultaneously the harder path and the more durable one, because the statutory rails move on legislative time and are built into law, not private decision.”
— Thorsten Meyer
payment authorization hardware Europe
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Implementation Timelines and Interactions
It remains unclear how quickly the PSD3/PSR reforms will be enacted and operational, with some estimates placing full implementation around 2028. The AI Act’s high-risk obligations could be delayed beyond initial targets, possibly slipping to 2027. How these regimes will precisely interact in practice, especially regarding AI agents’ ability to pay, is still being tested as legislation unfolds.
Why and How to Create Effective AI Prompts for Regulatory Compliance: Governing AI Interaction in Financial Institutions (Responsible Regulatory Compliance)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulatory agencies will continue finalizing and implementing PSD3/PSR and the AI Act, with full effects expected by 2026-2028. Stakeholders should monitor legislative developments, technical standards, and pilot programs to understand how the integrated infrastructure will function in practice and influence the deployment of AI agents in Europe.
Ongoing Performance Monitoring for LLM and Agentic AI in Banking: A Validation and Model Risk Handbook: Designing, Validating, and Supervising LLM and … AI Systems Across the Three Lines of Defense
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will European AI agents be able to pay automatically?
Not immediately. Under current regulations, AI agents cannot act as legal payers until the statutory payment rails are reformed to recognize them, which is expected around 2028.
How does the EU approach differ from the US in building agentic commerce?
The US relies on private, decision-extended payment networks, enabling faster deployment, while Europe is building a statutory, open, regulated infrastructure that prioritizes durability and transparency.
What role does the AI Act play in agentic commerce?
The AI Act sets high-risk obligations for AI systems involved in financial transactions, requiring oversight, conformity assessments, and registration, which influence how AI agents can operate within the legal framework.
When will these European regulations be fully in force?
The PSD3/PSR reforms are expected to be enacted around 2028, with the AI Act’s high-risk obligations coming into effect possibly by 2027, depending on legislative progress.
Will the European system be more open or more restrictive?
It will be more open in terms of access and transparency due to open finance and API parity, but also more restrictive because of the legal requirements and oversight imposed by the statutes.
Source: ThorstenMeyerAI.com
