📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities. The regulatory landscape is being reshaped by two major regimes—PSD3/PSR and the AI Act—that are defining the legal infrastructure for agentic commerce in Europe.

The core issue is that, unlike in the US where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enables autonomous payments, Europe’s payment system is governed by statutory regulations. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and due to take effect around 2026-2028, will rebuild payment rails with mandatory API parity, requiring banks to expose interfaces as capable as their own apps. This will facilitate more open, interoperable payment systems.

Simultaneously, the EU AI Act, with high-risk obligations scheduled to land in 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, subjecting them to conformity assessments, human oversight, and registration. These two regimes, developed separately, are converging to shape the future of agentic commerce in Europe.

The key point is that the ability of an AI to pay depends on the payment regime, while its ability to assess or recommend depends on the AI regulation. The different timelines, scopes, and authorities involved create a fragmented but converging legal architecture. This means that the primary constraint on European agentic commerce is no longer technological but legal, rooted in statutory rules that are slower to implement but potentially more durable than US private infrastructure.

Implications of Dual Regulatory Frameworks on European AI Payments

This convergence of two regulatory regimes makes European agentic commerce inherently slower to develop but potentially more resilient and open. The mandated API parity and open finance under PSD3/PSR mean no single bank or network can dominate the infrastructure, fostering a more competitive environment. However, the slower legislative process may delay the deployment of autonomous payment agents compared to the US, where private firms can extend their payment rails more rapidly.

Furthermore, the high-risk classification of AI under the EU AI Act introduces guardrails—such as human oversight and conformity assessments—that could limit the agility of AI agents but also provide a more regulated and trustworthy foundation. The contrasting approaches—US private, US commercial versus EU statutory—highlight different visions for the future of agentic commerce, with potential long-term impacts on innovation, competition, and consumer protection.

European Regulatory Pathways for AI-Driven Payments and Assessments

Historically, Europe’s payment system has been tightly regulated, with strong customer authentication (SCA) under PSD2 and other directives limiting autonomous transactions. The new PSD3 and PSR aim to overhaul this system by mandating open interfaces and direct access for nonbank payment providers, aligning Europe’s infrastructure with more open, API-driven models.

At the same time, the EU AI Act, agreed upon in late 2025, introduces high-risk classifications for AI systems used in finance, requiring compliance, oversight, and registration. These regulations are not designed together but are converging to create a layered, statutory framework that will govern how AI agents operate in European financial markets.

Prior developments, such as the European Digital Finance Strategy and the PSD2 implementation, set the stage for this transition, emphasizing transparency, security, and open access. The upcoming regulations are expected to solidify these principles into a comprehensive legal architecture.

“The European approach is simultaneously the harder path and the more durable one. It’s slower, but builds a foundation that is less controlled by individual networks and more open by design.”

— Thorsten Meyer

Unresolved Challenges in Harmonizing Dual Regimes

It remains unclear how effectively the two regimes—PSD3/PSR and the AI Act—will be integrated in practice, given their different timelines, scopes, and authorities. The extent to which these regulations will enable autonomous payments without human intervention is still uncertain, as is the pace of implementation and enforcement.

Additionally, the impact on innovation and competitiveness compared to the US private infrastructure remains to be seen, especially as the European framework is more fragmented and slower to roll out.

Next Steps for European Regulatory and Market Development

Regulators are expected to publish detailed implementation guidelines for PSD3 and PSR in mid-2026, with full rollout anticipated by 2028. The AI Act high-risk obligations are also scheduled for finalization and enforcement in 2026, with some provisions possibly slipping to 2027.

Market participants and developers of AI agents are closely monitoring these developments, preparing for compliance and integration challenges. The first pilot programs of autonomous payment agents are likely to emerge post-2026, testing the new legal infrastructure.

Key Questions

How will the EU’s new regulations affect AI payment agents?

The regulations will impose legal and technical requirements, including human oversight, conformity assessments, and API standards, which could slow deployment but increase safety and trustworthiness.

Will European AI agents be able to pay autonomously?

Not immediately. Under current law, AI agents cannot act as legal payers until the PSD3/PSR regimes officially recognize them as such, which is still in development.

How does Europe’s approach differ from the US?

Europe relies on statutory, regulation-driven infrastructure with mandated open interfaces and high-risk AI classifications, while the US depends on private, commercial rails that can be extended by decision more rapidly.

When will we see fully operational autonomous AI payments in Europe?

Likely not before 2028, given the legislative timelines; initial pilot programs may appear earlier, but full-scale deployment depends on the finalization and enforcement of PSD3/PSR and the AI Act.

Source: ThorstenMeyerAI.com