📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two converging regulatory frameworks—PSD3/PSR and the AI Act—that will shape its infrastructure, speed, and openness. This contrasts with the US’s private, commercial rails.
European regulatory regimes are simultaneously rebuilding the payment infrastructure and establishing AI guardrails, fundamentally shaping how agentic commerce will operate in Europe. This convergence is not driven by technology but by statutory frameworks, creating a distinct and slower but more durable foundation compared to the US.
European law currently prohibits AI agents from acting as legal payers without human authorization, which creates a significant barrier for agentic commerce. Unlike the US, where private payment networks like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enable autonomous payments, Europe’s payment system is governed by regulation, notably PSD2 and upcoming PSD3/PSR, which enforce multi-factor human authentication and API parity.
Meanwhile, the EU’s AI Act, expected to impose high-risk obligations on AI systems such as credit scoring and fraud detection, will require conformity assessments, human oversight, and registration for AI used in financial transactions. These two regimes are being developed independently but will converge, shaping the infrastructure that AI agents can operate within in Europe. The PSD3/PSR reforms aim to open banking interfaces and create a more transparent, open financial data environment, while the AI Act’s high-risk classification will impose guardrails on AI systems involved in financial decision-making.
Thorsten Meyer explains that the European approach is inherently slower because the legal frameworks are moving on legislative timelines, with PSD3 expected around 2028 and the AI Act possibly slipping to 2027. However, this statutory foundation is more durable, as it is embedded in law and not controlled by private firms, unlike the US’s private, decision-driven infrastructure.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Europe’s Dual Regulatory Frameworks
This convergence means European agentic commerce will develop within a legal architecture that is more deliberate, open, and resilient but also slower to deploy. The statutory rails—mandated API access, open finance, and high-risk AI oversight—create a foundation that is less susceptible to private control and degradation, potentially leading to a more inclusive and transparent market. However, the pace of development is slower, which could impact competitiveness and innovation compared to the US, where private networks enable faster deployment of autonomous payment agents.
Ultimately, the question of which system produces a better agentic commerce market will depend less on technological capability and more on which infrastructure the agents and markets prefer—private, concentrated rails or open, statutory ones. The European approach’s durability and openness could foster a different kind of ecosystem, emphasizing trust, transparency, and resilience.
European open banking API tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Timeline and Foundations
The European Union’s efforts to regulate and build infrastructure for agentic commerce are unfolding through two main legislative processes. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, will overhaul payment rails by mandating API parity and direct access for nonbank payment providers. This aims to create a more open, competitive financial environment.
Simultaneously, the EU’s AI Act, with high-risk obligations scheduled to land in 2026 and possibly slipping into 2027, will impose conformity assessments, human oversight, and registration requirements on AI systems involved in financial transactions. These regulations are not designed together but will jointly define the legal and operational environment for agentic commerce in Europe. The process reflects a deliberate, law-based approach contrasting with the US’s private, decision-driven infrastructure.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer
AI compliance software for finance
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation and Impact
It remains unclear how quickly the regulations will be fully implemented and how effectively they will enable autonomous agent payments in practice. The potential for legal, technical, or political delays could impact the timeline and functionality of agentic commerce in Europe. Additionally, it is uncertain whether the regulatory approach will foster innovation or impose constraints that hinder market growth.
multi-factor authentication payment devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Regulatory Development
Regulators are expected to finalize and publish detailed rules for PSD3/PSR by summer 2026, with full implementation targeted for 2028. The AI Act’s high-risk obligations are also anticipated to be clarified and enforced by 2027. Stakeholders, including financial institutions, AI developers, and regulators, will begin testing and adapting their systems to meet these new requirements, shaping the future landscape of agentic commerce in Europe.
AI fraud detection tools for banking
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will Europe’s regulatory approach affect the speed of agentic commerce development?
The statutory, law-based approach is slower than private, decision-driven networks but aims for a more durable and open infrastructure, potentially leading to more sustainable growth in the long term.
What are the main differences between European and US agentic commerce infrastructures?
Europe relies on statutory regulations, mandatory API access, and high-risk AI guardrails, while the US depends on private payment networks and decision-driven infrastructure controlled by a few firms.
Will the AI Act restrict or enable AI-driven financial services?
The AI Act’s high-risk classification will impose oversight and conformity requirements, which could limit some AI applications but also promote trust and safety in AI-enabled financial transactions.
When will we see the first fully compliant agentic payment systems in Europe?
Full compliance with PSD3/PSR and the AI Act is expected around 2028, with early testing and pilot programs likely to emerge before then.
How might these regulations impact European competitiveness in AI and fintech?
The slower regulatory timeline could delay European market entry but might foster more sustainable and trustworthy AI and fintech ecosystems in the long run.
Source: ThorstenMeyerAI.com
