📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being built on two regulatory regimes—PSD3/PSR and the AI Act—that are shaping the payment and AI guardrails. This dual regulation creates a slower but more durable infrastructure compared to the US, where commercial rails dominate.
European regulatory regimes are co-defining the infrastructure for agentic commerce, with PSD3/PSR and the AI Act shaping the rules that AI agents must operate within. This convergence creates a statutory environment that is more deliberate and slower to develop than the US, impacting how AI-driven financial transactions will function in Europe.
The core issue is that, unlike in the US where private infrastructure like Mastercard and Visa enable agent payments, Europe’s payment system is governed by law, specifically PSD2, PSD3, and the upcoming Payment Services Regulation (PSR). These laws require multi-factor human authentication, preventing AI agents from acting as payers without explicit human approval. Meanwhile, the AI Act, scheduled to take effect in 2026, classifies high-risk AI systems—such as those used for credit scoring or fraud detection—as subject to strict oversight, including conformity assessments and human oversight. The simultaneous development of these regimes means that AI agents in Europe will operate on a legal framework that is fragmented, slow to implement, and highly regulated, contrasting with the US’s faster, privately controlled infrastructure.Thorsten Meyer explains that the European approach involves rebuilding payment rails with mandatory API parity, exposing bank interfaces as capable as their consumer-facing apps, and establishing open finance principles via FIDA. These reforms aim to create a more open, interoperable system but will take years to fully implement, with PSD3 expected around 2028 and the AI Act’s high-risk obligations possibly slipping into 2027. This regulatory architecture means that the ability of an AI to pay or assess credit depends on compliance with these evolving statutes, not just technological capability.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Commerce
This dual regulation makes European agentic commerce fundamentally different from the US model, emphasizing legal infrastructure over private control. It results in a slower, more open, and potentially more durable system that could influence global standards. The approach prioritizes transparency, interoperability, and human oversight, which may lead to more resilient but less agile AI financial services. For businesses and consumers, this means a trade-off between speed and security, with European systems likely to be more stable long-term but less responsive in the short term. The regulatory environment also sets a precedent for how AI and financial infrastructure can be co-regulated, potentially shaping international norms.European open banking API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms Reshape Payment and AI Governance
Europe’s regulatory landscape is undergoing significant change with the upcoming PSD3, PSR, and the AI Act. PSD3 and PSR, scheduled for implementation between 2026 and 2028, aim to overhaul payment infrastructure by mandating API parity and open finance principles. Concurrently, the AI Act, with high-risk obligations landing in 2026, introduces strict oversight for AI systems used in finance, including conformity assessments and human oversight. These reforms are not coordinated but are converging to create a comprehensive, statutory framework for AI-driven commerce. Unlike the US, where private firms like Mastercard and Visa control the rails, Europe’s infrastructure is being built through law, emphasizing transparency and interoperability over speed.“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
Yubico – YubiKey 5C NFC – Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified – Protect Your Online Accounts
POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Surrounding Implementation Timelines and Effects
It remains unclear how quickly the European regulations will be fully implemented and how effectively they will integrate AI and payment systems. The PSD3 and PSR are expected around 2028, but delays are possible, and the AI Act’s high-risk obligations might slip into 2027. Additionally, the actual impact on AI agents’ operational capabilities and market dynamics is still uncertain, as the regulatory environment is evolving and subject to political and technical adjustments.
Start Using AI As Your Business Accountant: The Step-byStep Playbook to Automate Your Bookkeeping, Maximize Deductions, and Fire Your CPA
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European AI and Payment Infrastructure Development
The next major milestones include the formal adoption and implementation of PSD3 and PSR, expected by 2028, and the finalization of the AI Act’s high-risk obligations, potentially by 2027. Stakeholders will monitor how these regulations influence the development and deployment of AI agents in finance, as well as how banks and technology firms adapt to the new statutory environment. Further analysis will be needed to assess the real-world impact of these reforms on market speed, innovation, and stability.
AI-Powered Software Audits: Revolutionizing Audit, Compliance, Risk, Security, and Governance for Organizations: Harnessing AI to Automate Compliance, and Strengthen Governance in the Digital era
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does European regulation affect AI agents’ ability to make payments?
European laws require human authorization for payments, preventing AI agents from acting as legal payers until new regulations, like PSD3, explicitly enable such capabilities through statutory reforms.
Why is European agentic commerce slower than in the US?
Because European infrastructure is built on statutory rules that are slower to develop and implement, unlike the US’s private, decision-driven networks like Mastercard, which can extend capabilities more rapidly.
What role does the AI Act play in shaping AI-driven financial services in Europe?
The AI Act classifies high-risk AI systems used in finance as subject to strict oversight, including conformity assessments and human oversight, affecting how AI agents can operate in commerce.
Will European AI agents be able to pay automatically in the future?
It depends on the progress of PSD3 and related regulations. Until then, AI agents cannot act as legal payers without human authorization, but this may change as the legal framework evolves.
How does the European approach compare to the US model?
The US relies on private networks and decision-making by firms like Mastercard and Visa, enabling faster deployment of agentic payments. Europe’s approach is slower, law-based, emphasizing transparency and interoperability.
Source: ThorstenMeyerAI.com
