The first live trusted agent payment isn't a shopper. It's a business paying an invoice.
Visa, BILL and Billtrust: a verified agent pays invoices through supplier portals. No logins, no CAPTCHA.
The wall comes down for agents that can prove who sent them.
Money20/20's opening question: Know Your Agent.
KYC took decades to standardize. KYA has months, agents are already buying.
Five protocols, no standard yet.
But the question changed: not "do you have a credential" but "authorized, for this person, this action, right now."
When an agent buys something, the merchant knows what the customer asked for. The platform knows what the agent was told. The bank knows the account.
Nobody holds the whole truth.
"Authorized" was built for a human clicking a button. That definition is up for grabs.
Google launched a universal cart today. Carts were never the hard part.
The tell: GoDaddy, Cloudflare and Google admit every platform verifies agents in its own closed system and that trust doesn't travel.
Agents will shop everywhere. Trust has to work everywhere too.
People are already using AI to shop, but most still check the answer before they act.
Confidence grows when the whole network can earn trust, one interaction at a time.
Adoption stopped being the question this week.
Half of US shoppers now shop with AI. 1 in 9 purchase paths is agent-mediated. Machine payments went from 1,500 to nine figures in 15 months.
Agents didn't arrive. They crept in.
Now trust has to scale faster than they do.
Visa: 72% of consumers use AI assistants. 23% trust one to pay.
Amex, same week: a framework to capture your intent before the agent spends.
The question isn't whether agents can buy anymore. It's how to prove what you actually wanted.
Yes there is. More to come soon.
There is a huge gap opening up in the agentic payments space between expectations in B2C commerce and understanding the B2B angle.
Take travel payments.
For every booking a consumer makes on an OTA such as Booking . com or Expedia, there's transaction(s) that the OTA makes to procure the rooms from the hotel itself, from a third party aggregator, or even another OTA.
You can win the consumer side alone but that would mean buying inventory from a third party provider and limited your range of options.
No OTA can sell without first building inventory. Just can be done on a JIT basis, however the connectivity needs to be there prior to the B2C traffic to hold availability.
In travel, and in some other sectors, the winners often win in both B2C AND also B2B, both, at the same time.
Often they are seen as separate markets but to win at scale, and to disrupt, in some cases you need to do both together.
In agentic payments, apart from @bykahlil and the team at @naturalpay, are there other start ups building the infrastructure layer that can be plugged into both sides of a transaction?
An AI agent just bought coffee from another AI agent. Muse ordering from a shop's merchant agent, the receipt naming the agent.
Both sides of the counter are going machine-to-machine.
No human to eyeball the buyer means trust has to travel between machines, at machine speed.
Amazon blocks Muse on purpose. Delta, United, eBay, Zillow turn agents away, half by accident "prove you're human" was built for spam, not your agent.
A wall goes up when you can't tell a good agent from a bad one.
The next web isn鈥檛 better walls, but better ways to say yes.
Agentic commerce needs a trust network across the systems involved.
The agent, the merchant and the payment provider each see part of the transaction; confidence comes from connecting those views.
Amex is volunteering to pay when AI agents buy wrong.
Mastercard says consumers will delegate one purchase at a time.
Both networks just said it: the plumbing works, trust is the bottleneck.
Only 15% of shoppers trust an agent with a big purchase.
That's the whole game.
Meta and Sierra just published the Personal Agent Protocol, a standard for how AI agents introduce themselves to businesses.
v1 lets an agent say who it is. It can't tell the merchant whether to trust it.
Knowing an agent's name isn't the same as knowing whether to say yes.
The hard part isn鈥檛 the agent clicking buy. It鈥檚 giving the rest of commerce enough confidence to accept what the agent is doing
Muse agents are buying from brands direct now, not Amazon.
Every rail is racing to be the cheapest way for agents to plug in.
The race that matters starts after the agent acts: can the merchant trust what just showed up to buy?
The next step for agentic commerce is making trust travel with the customer across the places they shop.