📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two converging regulatory regimes, PSD3/PSR and the AI Act, which together define the legal infrastructure for AI-powered payments and assessments. This process is slower but aims for a more durable, open system, contrasting with the US’s private, commercial rails.
European law is currently defining the infrastructure for agentic commerce through two major regulatory regimes—PSD3/PSR and the AI Act—creating a statutory and fragmented system that will govern how AI-powered agents can make payments and assess data.
The core issue is that, unlike in the US where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce facilitate agent payments, Europe’s payment system is regulated by law, requiring human authorization for transactions under PSD2. The upcoming PSD3 and Payment Services Regulation (PSR), scheduled for implementation around 2028, will rebuild payment rails with mandatory API parity, forcing banks to expose interfaces as capable as their consumer apps. Simultaneously, the EU AI Act, with high-risk obligations set to land in 2026, classifies AI systems involved in finance—such as credit scoring and fraud detection—as high-risk, subject to conformity assessments, human oversight, and registration. These two regimes were not designed together, resulting in a system where the legal framework constrains the capabilities of AI agents more than technological limitations.According to Thorsten Meyer, these developments mean that European agentic commerce will lag behind the US in speed and market concentration because the statutory process takes longer. However, the European approach aims for a more open and durable infrastructure: mandatory API parity prevents banks from favoring their own agents, and open finance under FIDA makes data a shared resource rather than a private moat. The convergence of these regimes is creating a complex, layered system where the agent’s ability to pay, assess, or recommend depends on different instruments and regulations, producing seams that will influence the evolution of agentic commerce.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks for European AI Commerce
This convergence of regulatory regimes in Europe is shaping a deliberate, open, and durable foundation for agentic commerce. While slower to develop than the US’s private infrastructure, Europe’s statutory approach ensures that the payment and data systems are governed by law, reducing the risk of monopolization and fostering interoperability. For businesses and consumers, this could mean a more resilient and transparent ecosystem in the long run, but it also introduces delays and complexity that could impact the speed of innovation and market entry.
AI-powered payment processing devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Evolution and Its Impact on Agentic Payments
Historically, European digital payments have been regulated primarily through PSD2, which requires multi-factor human authentication for online payments, effectively limiting AI’s role in payment authorization. The upcoming PSD3 and PSR aim to modernize the payment infrastructure by mandating API parity, exposing banking interfaces to third-party developers, and fostering open finance, scheduled for full implementation by 2028. Meanwhile, the EU AI Act, agreed upon in late 2025 and set to be enforced in 2026, classifies high-risk AI systems—such as those used in credit scoring and fraud detection—as subject to strict oversight, including conformity assessments and human oversight. These two regulatory tracks are progressing independently but are now converging, creating a new landscape for AI-driven commerce in Europe.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
European payment API integration tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation and Market Impact
It remains unclear how quickly the European frameworks will be fully implemented and enforced, especially given the legislative timelines for PSD3/PSR and the AI Act. The actual impact on AI agent capabilities and market adoption will depend on regulatory clarity, technological adaptation, and industry response, which are still evolving. Additionally, the interaction between the two regimes and their influence on innovation speed is not yet fully understood.
AI Compliance Mastery: Automate Legal Reviews, Risk Assessments, and Policy Management with ChatGPT and Excel Workflows: A Practical Guide for Law Firms and Compliance Teams to Integrate AI Tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European AI and Payment Regulation
Regulators are expected to finalize and publish the detailed rules for PSD3/PSR by summer 2026, with full implementation targeted around 2028. The AI Act’s high-risk obligations are also slated for enforcement in 2026, with possible delays. Industry stakeholders are preparing for these changes, and pilot projects or regulatory sandboxes may emerge to test the new infrastructure. Monitoring how these frameworks interact and influence market behavior will be crucial in the coming years.
API FRESHWATER MASTER TEST KIT 800-Test Freshwater Aquarium Water Master Test Kit, White, Single, Multi-colored
Contains one (1) API FRESHWATER MASTER TEST KIT 800-Test Freshwater Aquarium Water Master Test Kit, including 7 bottles…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the European regulations affect AI agents’ ability to make payments?
European regulations will require AI agents to operate within a statutory framework that mandates human authorization for payments and imposes high-risk obligations on AI systems, potentially limiting autonomous payment capabilities until the legal regime permits it.
What is the main difference between US and European agentic commerce?
The US relies on private, commercial rails controlled by firms like Mastercard and Visa, enabling faster deployment. Europe is building a statutory, regulation-based infrastructure that emphasizes openness and durability, though it may develop more slowly.
When will the new European payment and AI regulations be fully enforced?
PSD3/PSR is expected to be fully implemented around 2028, while the AI Act’s high-risk obligations are scheduled for enforcement starting in 2026, with some deadlines possibly slipping to 2027.
How might these regulatory differences impact innovation in AI commerce?
The slower, more open European approach may foster more resilient and interoperable systems in the long term, but could also delay the deployment of fully autonomous AI payment agents compared to the US’s faster, private infrastructure.
Source: ThorstenMeyerAI.com
