Payments & agentic commerce
Agents are spending money. No rulebook defines what an agent is.
PCI DSS · card network rules
Reg E authorisation questions
Card-network agent protocols
The problem in one sentence
The card networks and processors have moved first — Visa, Mastercard, Stripe and others have all published agent-payment protocols. The rulebooks have not followed. PCI DSS, the network rules and Nacha each define the merchant, the issuer, the acquirer and the service provider. None of them defines the agent. So the obligations attach to the payment exactly as before, and there is no settled answer to who holds them when the thing that authorised it was not a person.
Where it breaks
| Failure point | What actually happens |
|---|---|
| Authorised under false pretenses | Nacha's phased fraud-monitoring rules require detecting payments authorised under false pretenses. A manipulated agent produces precisely that — an authorisation that was technically valid and substantively induced. Almost nobody is connecting those two sentences. |
| Consent | Whether an agent's authorisation constitutes the consumer's consent is unresolved. Every dispute, chargeback and liability allocation downstream depends on the answer. |
| The undefined party | If the rulebook has no role for the agent, the agent's actions land on whichever defined party the facts can be pushed toward. That allocation is being decided now, in contracts, not later in regulation. |
| Prompt injection is now a payments risk | An injection that changes what an agent buys is no longer a security curiosity. It is an unauthorised transaction with a real counterparty and a real settlement. |
| Velocity | Agent-initiated payments arrive at machine speed. Controls calibrated to human transaction rates do not fail loudly — they fail by approving. |
The Payments & agentic commerce regime references above are checked against their primary sources on an ongoing basis. Instruments move — several cited here changed inside the last year — so verify against the source before you rely on one. If you find something stale, tell me and I will correct it.
If any of this is live for you
The fastest route is a conversation. Bring the architecture you are worried about — the first useful thing usually surfaces inside twenty minutes.