📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that are developing simultaneously. This statutory approach differs from the US’s private infrastructure, affecting speed and openness.
European law is currently shaping the infrastructure for agentic commerce through two major regulatory regimes: PSD3/PSR and the AI Act, which are being developed simultaneously and will jointly define how AI agents can operate in payments and high-risk AI functions.
The core issue is that, unlike in the US where private firms build and extend payment rails, Europe’s payment infrastructure is governed by statutory regulations that require human authorization for transactions. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, will rebuild payment rails with mandatory API parity, forcing banks to expose interfaces as capable as their own apps. Simultaneously, the EU AI Act, with high-risk obligations set for 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, subjecting them to conformity assessments, human oversight, and registration. These two regimes are being developed independently but will jointly influence the capabilities and limitations of agentic commerce in Europe.Thorsten Meyer, a researcher tracking these developments, emphasizes that the European approach is not merely an extension of existing technology but a redefinition of the underlying legal architecture. The convergence of these regimes means that whether an AI agent can perform payments depends on the evolving legal framework, not just technological capability. The process is slower than in the US, where private networks like Mastercard’s Agent Pay and Visa’s Intelligent Commerce operate on commercial rails that can be extended by decision. In contrast, Europe’s statutory rails are built into law, making them more durable but also slower to implement.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks for European AI Commerce
This dual regulation approach means that European agentic commerce will develop within a highly structured legal environment, potentially leading to slower deployment but greater durability and openness. The mandatory API parity and open finance provisions prevent private control of interfaces and data, fostering a more competitive and transparent ecosystem. However, the slower pace may delay the deployment of fully autonomous payment agents compared to the US, where private firms can rapidly extend their networks. Ultimately, the architecture of these regulations will influence which model—speed and concentration or openness and resilience—prevails in the future of agentic commerce.
European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Regulatory Foundations Shaping European Agentic Payment Infrastructure
The US has relied on private infrastructure, such as Mastercard’s Agent Pay and Visa’s Intelligent Commerce, which are owned and extended by decision of private firms. Europe’s approach is different: the payment rails are being rebuilt through legislation—PSD3 and the PSR—that mandate API parity and direct access for nonbanks, aiming for a more open and interoperable system. Simultaneously, the EU AI Act, agreed in November 2025 and set to take effect around 2026-2028, classifies AI systems used in finance as high-risk, requiring compliance, oversight, and registration. These developments are unfolding in parallel but are not coordinated, creating a complex, layered regulatory environment for agentic commerce.
“The European approach is not merely an extension of existing technology but a redefinition of the underlying legal architecture.”
— Thorsten Meyer
Machine Learning for High-Risk Applications: Approaches to Responsible AI
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation Timelines and Regime Interactions
It remains unclear how quickly the PSD3/PSR regulations will be fully implemented and whether the AI Act’s high-risk obligations will meet their projected deadlines. The interaction between these regimes, especially how they will practically constrain or enable agentic payments and AI functions, is still being defined. Additionally, the impact of potential delays or legislative amendments is uncertain, which could influence the pace and scope of European agentic commerce development.
payment regulation compliance tools Europe
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory Implementation and Market Adaptation
Regulators are expected to finalize and implement PSD3/PSR regulations by 2028, with ongoing trilogue discussions on the AI Act potentially extending into 2027. Industry stakeholders are preparing for these changes by developing compliance strategies and testing AI capabilities within the evolving legal framework. Monitoring how these regulations are enacted and enforced will be crucial for understanding the future landscape of agentic commerce in Europe.
AI-Powered Fraud Detection: Machine Learning Systems That Save Millions Annually
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US in developing agentic commerce?
Europe relies on statutory regulations like PSD3/PSR and the AI Act, which build a legal infrastructure that is slower but more open and durable. The US depends on private, commercial rails owned and extended by firms like Mastercard and Visa, enabling faster deployment but less transparency and openness.
When will the new European payment and AI regulations be fully in effect?
PSD3 and PSR are expected to be implemented around 2028, while the AI Act’s high-risk obligations are likely to take effect between 2026 and 2027, depending on legislative progress.
What are the main challenges for AI agents operating within Europe’s regulatory framework?
AI agents must navigate complex, layered regulations that require human oversight, conformity assessments, and registration. The legal requirement for human authorization at the point of payment also limits autonomous payment capabilities compared to private infrastructure models.
Will Europe’s approach make its agentic commerce market more durable?
Yes, because regulations embedded into law create a stable, open infrastructure less susceptible to private control, though this comes at the cost of slower deployment and adaptation.
How might these regulations influence global competition in agentic commerce?
Europe’s deliberate, regulation-driven model may set a durable standard for openness and interoperability, potentially influencing global norms, but its slower pace could disadvantage it in rapid innovation compared to the US’s faster, private-led approach.
Source: ThorstenMeyerAI.com
