📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two converging regulatory regimes—PSD3/PSR for payment infrastructure and the AI Act for AI oversight. This statutory approach contrasts with the US’s private, commercial rails, affecting speed and durability.
European law is currently shaping the infrastructure for agentic commerce through two major regulatory frameworks—PSD3/PSR and the AI Act—creating a statutory environment that will govern how AI agents can perform payments and financial assessments in Europe.
The core issue is that, unlike the US, where private payment networks and firms like Mastercard and Visa facilitate agent payments through commercial rails, Europe’s payment infrastructure is defined by law. PSD2’s successor, PSD3, and the Payment Services Regulation (PSR), are rebuilding the payment rails with requirements such as API parity and open finance, making the infrastructure more open and less controlled by single entities.
Simultaneously, the EU’s AI Act, set to impose high-risk obligations on AI systems used in finance—including credit scoring and fraud detection—introduces guardrails that will regulate the behavior and oversight of AI agents. These two regimes are not coordinated; they are evolving separately but will jointly define the operational environment for agentic commerce in Europe.
This convergence results in a complex, fragmented architecture that impacts whether AI agents can be authorized to pay, assess, or recommend, depending on the legal status granted by regulators. The process is slower but aims for a more durable, open, and legislatively embedded infrastructure than the US model, which relies on private networks controlled by a few firms.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Statutory versus Commercial Payment Infrastructure
This regulatory approach means European agentic commerce will develop more deliberately, with a slower pace but potentially more resilient and open infrastructure. The statutory rails prevent private control over critical payment interfaces, promoting interoperability and data openness, which could lead to a more equitable and innovative market in the long run.
However, the delay in legal authorization for AI agents to pay could slow market deployment compared to the US, where private firms can extend payment capabilities rapidly. The outcome will depend on which infrastructure—statutory or commercial—agents and users prefer and trust, shaping the future landscape of AI-driven financial services in Europe.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks for Payment and AI
Europe’s payment infrastructure has historically been regulated by law, with strong customer authentication under PSD2 and now PSD3/PSR focusing on API access and open finance. These reforms aim to create a unified, interoperable payment environment that is less dependent on proprietary networks.
At the same time, the EU’s AI Act, finalized in late 2025 and set to take effect by 2026-2027, introduces high-risk obligations for AI systems used in finance, including requirements for human oversight, conformity assessments, and registration. These two regimes are not coordinated but are shaping the same ecosystem from different angles.
The timing of implementation varies, with PSD3 expected around 2028 and the AI Act’s high-risk provisions possibly slipping into 2027, adding complexity to the development of agentic commerce in Europe.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes—PSD3/PSR rebuilding the payment rails and the AI Act installing the AI guardrails.”
— Thorsten Meyer

The AI Revolution in Finance: Transforming Financial Services!
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Implementation and Impact
It remains unclear how quickly regulators will finalize and enforce PSD3/PSR and the AI Act, and how these regimes will interact in practice. The precise legal status that will allow AI agents to pay and perform financial assessments in Europe is still being defined, with some provisions possibly slipping into later years.
Additionally, it is uncertain whether market participants will favor the slower, more open statutory infrastructure or seek alternative private solutions, and how these choices will influence the competitive landscape.
European payment infrastructure API tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulators are expected to publish detailed rules for PSD3 and the PSR by mid-2026, with implementation anticipated around 2028. The AI Act’s high-risk provisions are likely to be finalized by late 2026 or early 2027, with phased enforcement.
Market participants and developers are closely monitoring these developments to adapt their AI agents and payment systems accordingly. The coming years will reveal whether Europe’s deliberate, regulation-heavy approach results in a more resilient or slower-to-deploy agentic commerce environment compared to the US model.

Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s payment infrastructure differ from the US?
Europe’s payment infrastructure is built on statutory regulations like PSD3/PSR that mandate open APIs and interoperability, whereas the US relies on private networks controlled by firms like Mastercard and Visa that extend payment capabilities through decision-based private infrastructure.
When will AI agents in Europe be able to make payments?
Legal authorization depends on the finalization and enforcement of PSD3/PSR, expected around 2028, and the AI Act’s high-risk obligations, possibly enforced by 2027. The exact timeline remains uncertain.
What advantages does Europe’s regulatory approach offer?
The statutory approach creates a more open, interoperable, and durable infrastructure less dependent on private control, potentially fostering more equitable innovation and resilience in the long term.
Will Europe’s slower pace hinder AI commerce development?
While the slower regulatory process may delay deployment, the resulting infrastructure aims to be more robust and trustworthy, which could benefit the overall market stability and user trust in the long run.
Source: ThorstenMeyerAI.com