📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

European law requires human authorization for online payments, preventing AI agents from acting as payers, unlike in the US where private infrastructure enables agent payments. This regulatory gap is central to the development of agentic commerce in Europe.

In Europe, the ability of AI agents to make payments hinges on statutory frameworks rather than technological capability. The PSD3 and Payment Services Regulation (PSR), expected to be enacted by 2028, are set to rebuild payment rails with mandatory API parity, exposing banking interfaces to third-party developers and AI systems. Simultaneously, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems involved in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration.

This convergence of regulations creates a complex environment where AI agents must operate within two distinct regimes: one governing payment execution and the other regulating AI behavior and safety. The two regimes were not designed to work together, resulting in a fragmented infrastructure that influences what agentic commerce can do in Europe. The European approach is characterized by slower legislative processes, with key regulations still in development, contrasting with the US’s faster, privately-controlled commercial rails.

Despite the slower pace, Europe’s statutory infrastructure offers advantages: open finance under FIDA mandates API parity, preventing banks from degrading interfaces to favor their own agents, and making data access a public utility rather than a private monopoly. This foundational difference means European agentic commerce will be more open and less concentrated, but also lag behind the US in speed and immediate capabilities.

Implications of Dual Regulatory Frameworks on European Agentic Commerce

This dual regulatory approach means that the development of AI-enabled financial agents in Europe is constrained more by law than by technological capability. While the US relies on private, commercial rails that can be extended or modified quickly, Europe’s statutory infrastructure is more deliberate, slower, and designed for durability. This may lead to a more resilient but less agile market, affecting how quickly AI agents can perform payments and other financial functions. The choice of infrastructure could ultimately influence which model—European or American—becomes dominant in global agentic commerce.

Regulatory Foundations and the European Approach to Agentic Commerce

Prior to these developments, European payments law has mandated multi-factor human authentication, preventing AI from acting as a payer. The upcoming PSD3 and PSR regulations aim to overhaul payment infrastructure, requiring banks to open interfaces via APIs that are as capable as their own apps. Meanwhile, the EU AI Act, agreed upon in November 2025 and scheduled for implementation in 2026, categorizes high-risk AI systems used in finance as subject to strict oversight, including conformity assessments and human oversight.

This regulatory environment is distinct from the US, where private sector firms like Mastercard and Visa have built proprietary infrastructure for agent payments, which can be extended or modified through decision-making processes. Europe’s approach, rooted in law, creates a more open but slower-moving foundation for agentic commerce, emphasizing transparency and public access over speed.

“European agentic commerce is not just a product of labs or networks; it is being co-defined by two converging regulatory regimes—PSD3/PSR and the AI Act—that were not designed together.”

— Thorsten Meyer

Unresolved Aspects of Europe’s Dual Regulatory Impact

It remains unclear how quickly the PSD3 and AI Act regulations will be enacted and enforced, and how effectively they will integrate to support seamless agentic payments. The precise timeline for full implementation and operationalization of the new infrastructure is still uncertain, as legislative processes are ongoing and subject to delays. Additionally, how the fragmented regimes will interact in practice, especially at the technical and operational levels, remains to be seen.

Next Steps in European Regulatory and Market Development

The European Parliament and regulators are expected to finalize and implement PSD3/PSR regulations by 2028, with the AI Act’s high-risk obligations possibly taking effect in 2027. Industry stakeholders will closely monitor the legislative process, and pilot programs or early implementations may emerge as regulators clarify the rules. The market will also observe whether the slower, more open European infrastructure can effectively support AI agents in performing payments and other financial activities, potentially influencing global standards.

Key Questions

How does Europe’s regulatory approach differ from the US for AI payments?

Europe relies on statutory, law-based infrastructure with mandated API parity and open finance, while the US depends on private, commercial rails controlled by firms like Mastercard and Visa, which can extend or modify their systems through decision-making.

When will European regulations supporting AI agent payments likely be in place?

Key regulations such as PSD3/PSR are expected to be enacted around 2028, with the AI Act’s high-risk obligations possibly coming into effect in 2027.

What are the main advantages of Europe’s statutory infrastructure?

It offers greater openness, transparency, and resilience by making data access a public utility and preventing private control over interfaces, which could lead to a more durable but slower system.

Will Europe’s approach to agentic commerce be more secure?

Potentially, because the legal guardrails and high-risk classification under the AI Act impose strict oversight and conformity assessments, which may enhance safety and accountability.

Source: ThorstenMeyerAI.com