📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two major regulatory regimes—PSD3/PSR and the AI Act—resulting in a slower but more durable infrastructure. This contrasts with the US’s faster, privately controlled approach.
European regulatory frameworks are simultaneously shaping the infrastructure and guardrails of agentic commerce, with PSD3/PSR and the AI Act establishing statutory rules that will govern AI-driven payments and decision-making systems.
The core development is that European law requires human authorization for payments, preventing AI agents from acting as payers without legal change. Unlike the US, where private payment networks like Mastercard and Visa extend decision-making authority to agents via commercial rails, Europe’s payment systems are defined by legislation. PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and set to be implemented by 2028, will rebuild payment infrastructure with mandatory API parity, requiring banks to expose interfaces as capable as their own apps. Concurrently, the European AI Act, with high-risk obligations arriving in 2026, classifies AI systems involved in finance—such as credit scoring and fraud detection—as high-risk, subject to conformity assessments and human oversight. These two regimes, not originally designed to work together, are converging, creating a fragmented but legally binding foundation for agentic commerce. The outcome is a system where the ability of an AI to pay depends not on technological capability but on compliance with these evolving legal frameworks, which are slower to implement but potentially more durable than US private infrastructure.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Regimes for European AI Payments
This convergence of legislation matters because it fundamentally alters the foundation of agentic commerce in Europe. While the US relies on private, privately controlled payment networks that can extend decision-making authority quickly, Europe’s statutory approach creates a slower but more open and resilient infrastructure. Open finance under FIDA and API parity mean no single bank can dominate the interface, leading to a more distributed and transparent ecosystem. However, the slower legislative timeline means European agentic payments may lag behind the US in deployment and innovation. The legal architecture’s durability could foster a more stable and equitable market long-term, but it also presents a challenge for rapid adoption and competitiveness in the near term.
European AI payment regulation compliance tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Pathways Reshape Payment and AI Laws
European regulators are simultaneously advancing PSD3/PSR legislation and the AI Act, with the former aimed at rebuilding payment infrastructure through mandatory API access and open finance, and the latter establishing high-risk obligations for AI systems involved in financial decision-making. PSD3/PSR, agreed in November 2025, is expected to be implemented around 2028, while the AI Act’s high-risk classification and compliance deadlines could slip to 2027. These regulations are not coordinated but are converging to create a comprehensive legal environment for agentic commerce. Unlike the US, where private firms like Mastercard, Visa, and Plaid build decision-making rails, Europe’s approach is rooted in statutory law, leading to a slower but potentially more durable system that emphasizes transparency and shared access.
“European agentic commerce is being co-defined by two regulatory regimes—PSD3/PSR and the AI Act—creating a complex, statutory infrastructure that differs from US models.”
— Thorsten Meyer

API FRESHWATER MASTER TEST KIT 800-Test Freshwater Aquarium Water Master Test Kit, White, Single, Multi-colored
Contains one (1) API FRESHWATER MASTER TEST KIT 800-Test Freshwater Aquarium Water Master Test Kit, including 7 bottles…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Regulatory Timelines and Implementation
It is not yet clear how quickly the European regulations will be fully implemented or how they will interact in practice. The PSD3/PSR legislation is expected around 2028, but delays are possible, and the AI Act’s high-risk obligations may slip into 2027. The practical impact on AI agents’ ability to pay and operate remains to be seen, as the legal frameworks are still being finalized and tested in pilot environments.
AI high-risk credit scoring software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulators will continue finalizing the PSD3/PSR implementation details and establishing conformity assessment procedures for the AI Act. Industry stakeholders will observe how the legal frameworks are enforced and how they influence the deployment of AI agents in payments. Monitoring legislative progress and early pilot projects will be key to understanding how these regulations shape the future of agentic commerce in Europe.
European agentic commerce legal compliance software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does European regulation affect AI agents’ ability to pay?
European law currently requires human authorization for payments, meaning AI agents cannot act as payers without legal changes. The upcoming regulations aim to create a statutory infrastructure that could eventually allow AI agents to pay, but this depends on legislative implementation and compliance.
What is the difference between US and European approaches to agentic commerce?
The US relies on private, commercial payment rails controlled by firms like Mastercard and Visa, enabling faster decision-making and extension of authority. Europe’s approach is based on statutory laws that rebuild payment infrastructure with open, regulated access, which is slower but potentially more transparent and resilient.
When will these European regulations be fully in place?
PSD3/PSR is expected around 2028, while the AI Act’s high-risk obligations could be in force by 2027, depending on legislative progress and implementation delays.
Will these regulations limit innovation in AI payments?
The regulations may slow down deployment initially due to compliance requirements but aim to create a stable, transparent framework that could support sustainable innovation over the long term.
Source: ThorstenMeyerAI.com