📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being built on two regulatory frameworks—PSD3/PSR for payment rails and the AI Act for AI guardrails—resulting in a slower but more durable system. This convergence impacts how AI agents can transact in Europe.
European agentic commerce is being shaped by two regulatory regimes that are converging simultaneously: PSD3/PSR, which rebuilds payment rails, and the AI Act, which imposes high-risk obligations on AI systems. This convergence creates a complex legal environment that influences whether and how AI agents can pay, assess, or score in Europe.
The core issue is that, unlike the US where private infrastructure like Mastercard and Visa facilitate agentic payments, Europe’s payment system operates under statutory regulation. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025, are set to rebuild the payment rails with mandatory API parity, requiring banks to expose interfaces as capable as their own apps. Concurrently, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems used for credit scoring, fraud detection, and other financial functions as high-risk, subject to conformity assessments and human oversight. These two regimes, evolving on different timelines and scopes, are not designed in tandem but are both shaping the foundation on which European AI agents will operate. As a result, whether an AI agent can pay depends on the payment regime, while its ability to assess or score depends on AI regulations. This fragmented, statutory architecture contrasts sharply with the more private, commercial rails in the US, which are faster and more centralized.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual European Regulatory Frameworks on AI Payments
This convergence means European agentic commerce will develop more slowly but potentially more securely and transparently. The statutory rails are less controllable by individual firms, preventing private gatekeeping and fostering open finance. However, the slower legislative process may delay the deployment of fully functional AI payment agents, impacting competitiveness. The dual-regime approach could set a global standard for secure, transparent AI-driven finance, but it also introduces complexity and uncertainty for market participants. The outcome will influence which infrastructure—private or statutory—becomes the preferred foundation for future agentic commerce.European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact on AI Commerce Infrastructure
Historically, European payments have been heavily regulated, requiring multi-factor human authentication under PSD2. The recent agreements—PSD3 and PSR—aim to overhaul these rails with open APIs and direct access for nonbank payment providers. Simultaneously, the EU AI Act, finalized in late 2025, classifies AI systems used in high-risk sectors as subject to strict oversight, including conformity assessments and human oversight. These developments are unfolding in parallel, driven by different legislative bodies and timelines, creating a layered regulatory environment that will govern AI agents’ ability to operate in Europe. Prior efforts focused on data privacy and security, but the current convergence signals a shift toward building a robust, statutory infrastructure for AI-enabled commerce.“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
AI compliance software for financial services
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties Surrounding Implementation Timelines and Effectiveness
It is not yet clear how quickly the PSD3/PSR regulations will be fully implemented and how effectively they will enable AI agents to execute payments. Similarly, the precise impact of the AI Act’s high-risk classification on operational AI systems remains uncertain, especially regarding compliance costs and timelines. The exact interaction points between these two regimes are still being tested in practice, and their combined effect on market innovation is not yet fully understood.
high-risk AI assessment tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory Deployment and Market Adaptation
Regulatory authorities are expected to publish detailed implementation guidelines for PSD3 and PSR in mid-2026, with full enforcement anticipated around 2028. The AI Act’s high-risk obligations are also expected to be clarified through conformity assessment procedures over the next year. Market participants will need to adapt to these evolving standards, and pilot programs or early deployments of AI agents in Europe may begin in late 2026 or early 2027. Monitoring how these regulations interact in practice will be crucial for understanding the future landscape of European agentic commerce.
European payment processing hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How do PSD3 and the AI Act affect AI agents’ ability to make payments in Europe?
PSD3 rebuilds payment rails with open APIs, enabling nonbank payment providers, including AI agents, to access payment systems directly, but legal authorization depends on compliance with the regulation. The AI Act classifies AI systems used for payments as high-risk, requiring conformity assessments and human oversight, which can impact operational deployment.
Why is Europe’s regulatory approach slower than the US?
Europe’s approach relies on statutory, legislative processes that require extensive debate and consensus, leading to slower implementation. In contrast, the US relies on private infrastructure built by firms like Mastercard and Visa, which can extend features by decision, leading to faster deployment.
Will the European model be more secure or more innovative?
The European model aims for greater security and transparency through legal guardrails, but its slower pace may limit immediate innovation. Its durability could foster a more trustworthy environment for AI-driven finance in the long term.
What are the risks of the dual-regime convergence?
The complexity and fragmented nature of the regulatory environment may cause delays, uncertainty, and difficulties in compliance for firms deploying AI agents, potentially hindering rapid market development.
Source: ThorstenMeyerAI.com
