Payments & agentic commerce
Agents are spending money. No rulebook defines what an agent is.
The problem in one sentence
The card networks and processors have moved first — Visa, Mastercard, Stripe and others have all published agent-payment protocols. The rulebooks have not followed. PCI DSS, the network rules and Nacha each define the merchant, the issuer, the acquirer and the service provider. None of them defines the agent. So the obligations attach to the payment exactly as before, and there is no settled answer to who holds them when the thing that authorized it was not a person.
Where it breaks
Authorized under false pretenses
Nacha's phased fraud-monitoring rules require detecting payments authorized under false pretenses. A manipulated agent produces precisely that — an authorization that was technically valid and substantively induced. Almost nobody is connecting those two sentences.
Consent
Whether an agent's authorization constitutes the consumer's consent is unresolved. Every dispute, chargeback and liability allocation downstream depends on the answer.
The undefined party
If the rulebook has no role for the agent, the agent's actions land on whichever defined party the facts can be pushed toward. That allocation is being decided now, in contracts, not later in regulation.
Prompt injection is now a payments risk
An injection that changes what an agent buys is no longer a security curiosity. It is an unauthorized transaction with a real counterparty and a real settlement.
Velocity
Agent-initiated payments arrive at machine speed. Controls calibrated to human transaction rates do not fail loudly — they fail by approving.
The Payments & agentic commerce regime references above are checked against their primary sources on an ongoing basis. Instruments move — several cited here changed inside the last year — so verify against the source before you rely on one. If you find something stale, tell me and I will correct it.
If any of this is live for you
The fastest route is a conversation. Bring the architecture you are worried about — the first useful thing usually surfaces inside twenty minutes.