📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two major regulatory regimes—PSD3/PSR and the AI Act—resulting in a slower but more open infrastructure. This contrasts with the US, where private networks dominate.
European law currently prevents AI agents from executing payments without human authorization, despite technological capabilities. The region is now constructing a new regulatory framework that will define how agentic commerce can operate, with two major regimes—PSD3/PSR and the AI Act—being developed simultaneously.
The core issue is that, unlike in the US, where private payment networks and data platforms enable autonomous agent payments, Europe’s payment infrastructure is regulated by law. PSD3 and the Payment Services Regulation (PSR), expected to be enacted by 2028, are rebuilding the payment rails to require API parity and direct access for nonbank entities, effectively democratizing the infrastructure.
At the same time, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, imposing conformity assessments, human oversight, and registration requirements. These two regimes were not designed to work together, creating a fragmented but converging regulatory environment that will shape what agentic commerce can do in Europe.
As a result, the ability of AI agents to pay or assess depends not only on technological capability but also on whether the legal and regulatory frameworks permit such actions. The timelines differ: PSD3/PSR aims for full implementation around 2028, while the AI Act’s high-risk obligations might be enforced as early as 2027. This means European agentic commerce will lag behind the US in speed but may be more durable due to the robustness of statutory infrastructure.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual European Regulatory Frameworks
This convergence of two regulatory regimes in Europe fundamentally alters the foundation of agentic commerce. Unlike the US, where private firms control the infrastructure and can extend services swiftly, Europe’s statutory approach creates a slower, more open, and more resilient environment. This could lead to a more standardized and interoperable market, but also delays in deployment and innovation.
For businesses and consumers, this means that AI agents in Europe will operate within a carefully controlled legal environment that emphasizes human oversight and transparency. The long-term durability of this approach could foster trust and stability, but at the cost of reduced agility compared to private-sector-driven models.
Ultimately, the question is whether this statutory, open infrastructure will produce a more effective agentic commerce market than the US’s private, concentrated networks. The answer depends on which architecture the market prefers—speed and control or openness and resilience.
European AI payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact
The development of Europe’s agentic commerce infrastructure is rooted in recent legislative efforts. The PSD3 and PSR reforms, agreed upon in November 2025, aim to overhaul payment systems with mandatory API access and open finance principles, expected to be implemented by 2028. Simultaneously, the EU AI Act, finalized in late 2025 and scheduled for enforcement in 2026, classifies high-risk AI systems and imposes strict oversight.
Prior to this, Europe’s payment landscape was dominated by multi-factor human authentication under PSD2, which limited automation. The new laws aim to shift this paradigm toward a statutory infrastructure that supports autonomous payments and AI-driven financial services, but the two regimes have different scopes, timelines, and governing authorities.
This dual regulation is unlike the US model, where private firms like Mastercard, Visa, and Plaid have built infrastructure that can be extended by decision, enabling faster deployment of agentic payment solutions.
“Europe is building the most deliberate agentic-commerce foundation in the world, paying for that deliberateness in speed.”
— Thorsten Meyer
PSD3 API integration software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Challenges in European Agentic Commerce
It remains unclear how quickly the new regulations will be fully implemented and how effectively they will integrate with AI high-risk obligations. The exact timeline for operationalizing AI guardrails alongside payment reforms is still uncertain, and the extent to which these frameworks will enable autonomous agent payments is yet to be seen.
Additionally, the practical interoperability between AI systems and statutory payment rails, and how regulators will enforce compliance, remains under development.
AI Compliance Checklist: Self-Assessment Tool for EU AI Act, ISO 42001 & NIST AI RMF — Ready-to-Use Frameworks (AI Compliance Toolkit Book 1)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Regulatory Implementation
The European Commission is expected to publish detailed implementation rules for PSD3 and PSR by summer 2026, with full enforcement targeted for 2028. The AI Act’s high-risk obligations are likely to start applying in 2027, with ongoing adjustments based on industry feedback and technological developments.
Stakeholders are preparing for pilot programs and compliance assessments, while regulators monitor the integration of these regimes and their impact on market innovation and stability.
agentic commerce payment solutions Europe
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the new European payment regulations affect AI-powered agents?
The regulations will require AI agents to operate within a statutory infrastructure that mandates human oversight for payments, potentially limiting autonomous transactions until legal frameworks are fully in place.
Will European agentic commerce be slower than in the US?
Yes, due to the legislative timelines and the need to build statutory rails, European agentic commerce is expected to lag behind the US in speed but may benefit from a more durable and open infrastructure.
What are the main differences between US and EU approaches?
The US relies on private payment networks and data platforms controlled by a few firms, enabling faster deployment. Europe is building a statutory, open infrastructure governed by law, which is slower but potentially more resilient.
Could Europe’s approach lead to a better agentic commerce market?
This depends on whether speed or durability is prioritized. Europe’s open, statutory framework might foster more standardized and trustworthy services, but at the cost of slower innovation.
Source: ThorstenMeyerAI.com
