📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

European regulatory regimes are simultaneously redefining the infrastructure and guardrails for agentic commerce, affecting whether AI agents can pay or assess transactions. This convergence of PSD3/PSR and the AI Act is shaping the future capabilities and legal authority of AI-powered payment agents in Europe.

The core issue is that, unlike the US, where private payment networks facilitate agent payments, Europe’s payment infrastructure is governed by statutory regulations such as PSD3 and PSD2, which require human authorization for transactions. The upcoming PSD3 and Payment Services Regulation (PSR), expected to be enacted around 2026-2028, will rebuild payment rails with mandatory API parity, requiring banks to expose interfaces as capable as their own apps, thus creating a more open and uniform infrastructure.

Simultaneously, the EU AI Act, with high-risk obligations scheduled to take effect in 2026, will impose conformity assessments, human oversight, and registration requirements on AI systems performing high-risk functions like credit scoring and fraud detection. These two regimes—regulatory for payment infrastructure and AI oversight—are not coordinated but are converging in the same timeframe, fundamentally shaping how AI agents can operate in European markets.

This dual regulation means that whether an AI agent can make payments depends on the evolving payment laws, while its capacity to assess or score depends on AI-specific rules. These regimes differ in scope, timeline, and authority, creating a fragmented but interconnected legal architecture that European agentic commerce must navigate.

Implications of Dual Regulatory Frameworks for European AI Agents

This convergence of regulation is significant because it results in a slower, more deliberate development of agentic commerce in Europe compared to the US, where private infrastructure allows faster deployment. However, the European approach aims to create a more durable and open foundation, with laws that prevent private monopolies over payment interfaces and promote open finance as a public utility. This could lead to a more resilient and equitable market, although it may lag in speed.

The dual regimes also mean that the fundamental architecture—statutory and fragmented—may favor stability and fairness over rapid innovation, potentially influencing which model of agentic commerce will prevail in the long term. The question remains whether this statutory foundation will produce a more robust or more restrictive environment for AI agents operating in payments and decision-making.

European Regulations Reshaping Payment and AI Frameworks

Europe’s approach to agentic commerce is distinct from the US, which relies on private, commercial rails like Mastercard’s Agent Pay and Visa’s Intelligent Commerce. In contrast, Europe’s payment infrastructure is governed by a complex regulatory landscape, including PSD2, PSD3, and the upcoming PSR, which enforce multi-factor human authentication and API openness. These laws are designed to rebuild payment rails with statutory mandates, emphasizing transparency and interoperability.

At the same time, the EU AI Act, agreed upon in late 2025 and scheduled for implementation in 2026, classifies certain AI systems as high-risk, requiring conformity assessments, human oversight, and registration. These regulations are not coordinated but are set to influence the same ecosystem, creating a layered regulatory environment that shapes the capabilities and limitations of AI agents in Europe.

This regulatory environment is still evolving, with key legislative details like the final scope of high-risk AI obligations and the precise timeline for PSD3/PSR implementation still under discussion. The convergence of these regimes is unprecedented and marks a deliberate move toward a statutorily governed, open, and durable infrastructure for agentic commerce.

“European agentic commerce is being co-defined by two regulatory regimes arriving at the same time, shaping what AI agents can do in payments and decision-making.”

— Thorsten Meyer

Unresolved Questions About Implementation Timelines

Key details remain uncertain, including the final scope and enforcement timelines of PSD3/PSR and the AI Act. The PSD3/PSR is expected to be enacted around 2026-2028, but legislative processes could shift. Similarly, the AI Act’s high-risk obligations might be delayed beyond 2026, possibly slipping to 2027 or later, depending on legislative negotiations and trilogue outcomes. The practical impact on AI agents will depend on how these laws are implemented and interpreted.

Next Steps in European Regulatory Development

Regulators in Europe are expected to finalize and enact PSD3 and PSR regulations by mid-2026, with detailed technical standards to follow. The AI Act’s high-risk obligations are also anticipated to be clarified and implemented by 2026 or shortly thereafter. Industry stakeholders are closely monitoring legislative developments, preparing for compliance, and exploring how these regulations will shape the deployment of AI agents in payments and decision-making roles. Further legislative updates and regulatory guidance are expected over the next 12-24 months.

Key Questions

How will PSD3/PSR affect AI agents’ ability to make payments in Europe?

PSD3/PSR will rebuild Europe’s payment infrastructure with mandatory API openness, allowing AI agents to access payment services more directly, but they will still need to comply with legal requirements such as human authentication until the law permits autonomous payments.

What are the high-risk obligations under the EU AI Act?

The AI Act will require high-risk AI systems to undergo conformity assessments, implement human oversight, and register with authorities, affecting AI systems used in finance, healthcare, and other critical sectors.

Will Europe’s regulatory approach slow down AI innovation?

While the statutory, regulated approach may slow deployment compared to private, commercial rails in the US, it aims to create a more durable and open infrastructure that could foster long-term stability and fairness.

When will AI agents be able to fully operate in payments without human approval in Europe?

This depends on the legislative timelines; full autonomous payment capabilities for AI agents are unlikely before the completion and enforcement of PSD3/PSR, which is expected around 2026-2028.

Source: ThorstenMeyerAI.com