iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
AI agents are starting to move from recommending purchases to initiating payments, but there is no single agent-payment system or universal consumer rollout. The key challenge is delegated authority: connecting a person’s permission to a specific agent and transaction without giving the agent unrestricted access to payment credentials or spending power. Visa, Mastercard, Stripe and on-chain services are developing different approaches, and announced capabilities, limited live use and broad availability are not the same thing.
What changes when an AI agent can pay?
A shopping assistant that finds an item is not necessarily able to buy it. Once an agent can initiate or complete a transaction, the payment system has to establish more than whether a card or account is valid. It needs to connect the user who granted permission, the agent acting on the user’s behalf, the details of the transaction and the scope of that permission.
That is the central trust problem. A user might authorize an agent to buy a particular item, but that should not automatically make the agent a general-purpose spender. The payment workflow needs a way to express and check what the agent may do, while giving the merchant and payment provider enough information to assess the transaction.
Visa’s Trusted Agent Protocol is described as a framework for communication between agents and merchants, intended to help merchants recognize trusted agents. When Visa announced it on October 14, 2025, it said it had received feedback from Adyen, Checkout.com, Fiserv, Microsoft, Shopify, Stripe and Worldpay. That feedback is evidence of industry interest, not proof that each company deployed the protocol in production. Visa’s announcement
#1 Best Overall
In practical terms, an agent payment needs to answer several linked questions: Who authorized this agent? Is this the agent it claims to be? What transaction was allowed? Can the agent use the underlying payment credential directly? If something goes wrong, who can investigate and what recourse does the customer have?
How the emerging payment approaches differ
The initiatives in the market do not describe one shared protocol. Some focus on merchant recognition and consumer shopping, others on payments between machines, and still others on the credentials an agent uses or on-chain transactions. Their announced features should be read as provider descriptions, not as evidence that every user or merchant can access them.
| Approach | What the source describes | What that does not establish |
|---|---|---|
| Visa Trusted Agent Protocol | A framework for communication between agents and merchants, with the stated aim of helping merchants recognize trusted agents. Visa announced it on October 14, 2025. Visa | The announcement and industry feedback do not establish that all named companies or merchants have put it into production. |
| Visa Intelligent Commerce | Visa describes embedding credentials, controls, authentication and protections in agent-initiated transactions. Its explanatory material says consumers could set rules such as which account to use and what checks to apply. Visa Intelligent Commerce · Visa’s agentic-commerce explainer | The described approach does not show that every rule is currently available to every user or in every market. |
| Mastercard Agent Pay for Machines | Announced June 10, 2026, for high-frequency, low-latency, low-value payments by agents and machines. The emphasis includes machine-to-machine and agent-driven transactions. Mastercard | The announcement does not establish consumer shopping availability or a general rollout across merchants and markets. |
| Stripe Shared Payment Tokens | On March 3, 2026, Stripe said support was expanding to network-led capabilities including Mastercard Agent Pay and Visa Intelligent Commerce. Stripe describes network-issued agentic tokens as enabling authorized agents to initiate payments without revealing underlying card details. Stripe | This describes Stripe’s support and credential model; it does not establish access for every Stripe merchant or account. |
| On-chain agent payments | A Visa and Artemis report examined live on-chain data. It says a service launched in May 2025 and had processed roughly $15.0 million in adjusted volume across 109.6 million transactions, according to Visa and Artemis in 2026. Visa and Artemis | This is a snapshot for a particular service and data source, not a total for agentic commerce or a general measure of consumer adoption. |
The distinctions matter. A network protocol for conveying agent information, a token that avoids exposing a card number, and a payment rail used by an on-chain service solve different parts of the problem. None alone answers every question about authorization, permissions, privacy or customer recourse.
What controls could limit an agent’s authority?
Several types of controls appear in provider descriptions, but their presence in a product announcement does not prove that fraud is eliminated or that all controls are available in a given checkout. A safer design would make the agent’s authority legible and limited, rather than treating access to a payment method as blanket consent.
- User authorization: Establish which person or account permitted the agent to act, and connect that permission to the transaction being attempted.
- Agent identity: Give the merchant a way to distinguish a recognized agent from unverified automation or an impersonator. Visa’s Trusted Agent Protocol is presented as one effort in this area. Visa
- Scoped permissions: Limit what an agent can do by factors such as amount, merchant, time or purpose, if the relevant product actually supports those rules. Visa describes consumer-set account and verification rules as part of its approach, but does not establish that every rule is universally available. Visa
- Tokenized credentials: Use a token or other payment credential so an agent does not receive the underlying card details. Stripe describes network-issued agentic tokens in this way; tokenization can reduce credential exposure, but does not by itself verify that a purchase matches the user’s intent. Stripe
- Authentication and checks: Require suitable authentication or verification for transactions. Visa’s Intelligent Commerce materials include authentication and payment passkeys in its described controls, but a passkey does not by itself limit an agent’s authority or prevent every form of fraud. Visa
For a consumer, the useful distinction is between permission to use an account and permission to make a particular kind of purchase. Before enabling an agent-payment feature, check what transaction limits and approval steps the actual service offers, how to revoke access, and how its provider handles a disputed or mistaken transaction. Do not assume that a setting described by a network is already present in a bank, wallet or merchant account.
What are the security risks?
An agent can misunderstand an instruction, be influenced by hostile or misleading content, or interact with a fraudulent merchant. A merchant may also face difficulty separating an authorized agent from malicious automation. That creates risks on both sides of a transaction: the customer’s delegated authority may be abused, and merchants or payment providers may be asked to trust an agent they cannot adequately identify.
Rank #3
Visa’s 2025 threat analysis reported a 25% increase in malicious bot-initiated transactions over the preceding six months, and a 40% increase in the United States over that same preceding-six-month comparison period. These are increases reported by Visa in its own analysis; they are not independently established market-wide rates and should not be read as increases in payment fraud generally. Visa’s threat analysis
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Visa also describes risks involving fake merchants and exploitation of a consumer’s AI agent. The broader questions are whether a merchant can distinguish an authorized agent from a malicious bot, whether the payment provider can verify who authorized it, whether the agent’s permissions are bounded, and what happens when its actions depart from the user’s intent.
The International Monetary Fund has highlighted consumer autonomy and governance as concerns as agentic AI enters payments. The sources cited here do not provide a comprehensive, jurisdiction-by-jurisdiction answer about liability, chargebacks or who is legally responsible for an agent’s mistake. Consumers and businesses should check the applicable provider terms and local rules rather than assuming a single global remedy. IMF Note No. 2026/004
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Where are agent payments available now?
Deployment claims need to be read with their geography, participants and date attached. On July 2, 2026, Visa said agentic-commerce transactions were live across participating merchant websites in Europe. That is evidence of transactions in a bounded deployment; it does not mean every merchant, bank, country or consumer can use the capability. Visa Europe’s announcement
Other announcements describe frameworks, product approaches or expanding support rather than universal availability. Mastercard’s June 2026 Agent Pay for Machines announcement addresses a different use case from a consumer shopping assistant, while Stripe’s March 2026 post describes expanding support for network-led capabilities. Availability still depends on the relevant provider, account, merchant, geography and implementation. Mastercard · Stripe
Free tools Windows power users keep installed
One-click scans. No signup required.
Scale figures also need careful interpretation. Visa and Artemis reported roughly $15.0 million in adjusted volume across 109.6 million transactions for one service in their 2026 on-chain analysis. That gives a view into activity on that service, not a measurement of all agent-led purchases, card-network commerce or consumer adoption. Visa and Artemis
Best Value
What should consumers and merchants check?
There is no settled model in these sources against which every payment product can be judged. Consumers and merchants can compare an implementation by asking the same practical questions:
- Authorization: How does the provider connect the transaction to the person who granted permission?
- Identity: What does the merchant receive to identify the agent, and how can it tell a recognized agent from an impersonator?
- Permission scope: Can authority be restricted by amount, merchant, time, purpose or another rule—and can the user revoke it?
- Credential exposure: Does the agent ever receive the underlying payment credential, or does it use a tokenized alternative?
- Privacy: What identity, intent and transaction information is shared with the agent, merchant and payment providers?
- Failure and recourse: What process applies if the agent is manipulated, misunderstands an instruction or makes an unauthorized purchase?
- Payment rail and use case: Is the transaction a card-network purchase, an on-chain payment or a high-frequency machine transaction? Controls and trade-offs may differ.
- Deployment: Is the feature an announcement, a limited deployment or broadly available for this user, merchant and region?
These checks are more useful than treating “agentic payments” as a single feature. A payment can be fast and use a token while still leaving unresolved questions about how permission is defined, what data is exposed and what remedy follows a mistake.
What to take away
AI agents are entering payment workflows through several distinct routes, but the central issue is not simply whether an agent can submit a payment. It is whether the user’s authority is clear, constrained and revocable—and whether merchants, providers and consumers can identify and resolve failures. Current announcements show experimentation and some bounded live activity, not a uniform system or universal access.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
