For thirty years, online payments have assumed one thing: a human is at the checkout. Someone types a card number, taps Face ID or approves a one-time password. That assumption is breaking. AI agents that can search, compare and buy on a person's behalf have moved from demos to live pilots, and the card networks are rebuilding parts of their rails to support them.
This shift is usually called agentic payments or agentic commerce, and it is one of the most searched topics in fintech this year for a simple reason: whoever sets the rules for how machines pay will shape the next decade of checkout, fraud and customer loyalty.
What are agentic payments?
An agentic payment is a transaction started and completed by software acting for a person or business, within limits that person has set. Instead of “buy this now,” the instruction looks more like “book me the cheapest refundable flight to Mumbai under ₹9,000 next Friday” or “reorder printer toner when we drop below two cartridges.”
The agent does the searching, the choosing and the paying. The human sets the mandate and gets the receipt.
What the card networks are building
Both major networks have launched programs aimed at making agent-initiated payments safe enough for mainstream use:
Visa Intelligent Commerce gives developers tokenized credentials that an AI agent can use, along with tools for setting spending controls and passing signals about the agent to the merchant. Visa has also published a Trusted Agent Protocol to help merchants tell legitimate shopping agents apart from malicious bots.
Mastercard Agent Pay introduces “agentic tokens” that are tied to a specific, registered agent. In 2026 Mastercard extended the idea with Agent Pay for Machines, aimed at always-on, machine-to-machine payments.
The common thread is tokenization plus identity. The agent never holds the raw card number; it holds a token scoped to that agent, that user and a set of rules, and the network can check who the agent is before money moves.
Why this matters beyond the hype
1. Checkout conversion changes shape
If an agent can complete a purchase without a human filling in forms, many of the usual sources of drop-off disappear: form fatigue, forgotten passwords, a card left in another room. Merchants that are easy for agents to read and transact with, through structured product data, clear pricing and machine-readable return policies, will get picked more often.
2. Fraud models need a new baseline
Today, many fraud systems treat automated behaviour as suspicious by default. In an agentic world, “automated” is normal, so the question becomes: is this a trusted agent acting within its mandate? Risk teams will need to score the agent, the mandate and the user, not only the device and the card.
3. Liability and disputes get murkier
If an agent buys the wrong item, who is responsible: the user who set a vague instruction, the agent developer, the merchant or the issuer? Network rules are still evolving here, and it is one of the biggest open questions for issuers and acquirers.
4. Loyalty moves from the brand to the agent
When an assistant picks the product, brand loyalty weakens and “agent loyalty” grows. Merchants may find they are competing to be the default choice inside an AI model, much as they once competed for the top result on a search page.
Human checkout vs. agentic checkout
Stage | Traditional online payment | Agentic payment |
|---|---|---|
Who initiates | Customer clicks “Pay” | AI agent, within a pre-set mandate |
Credential | Card number or wallet token | Agent-specific token with spending rules |
Authentication | OTP, biometrics, 3-D Secure | Agent identity checks plus user consent captured up front |
Fraud signal | Is this the real customer? | Is this a trusted agent acting within its limits? |
Merchant priority | Persuasive UX and design | Clean, machine-readable product and policy data |
How fintechs and banks can prepare now
Audit your token strategy. Agentic payments sit on top of network tokenization. If you are still storing raw card numbers or have low token coverage, fix that first.
Design for mandates. Build controls that let users set limits by amount, merchant, category and time window, and make those limits easy to see and cancel.
Make consent auditable. Log what the user authorised, when, and which agent acted. This record will matter in disputes.
Expose clean APIs and data. Merchants and payment providers that give agents structured, accurate data will be easier to transact with and therefore chosen more often.
Update fraud models. Start separating “good automation” from “bad automation” in your risk rules instead of blocking both.
The bottom line
Agentic payments will not replace the human checkout overnight, but the building blocks are already live on the major networks. The winners will be the banks, merchants and fintechs that treat AI agents as a new kind of customer, one that needs trust, clear rules and good data, rather than as a threat to be blocked.
The question is no longer whether machines will pay. It is whose rules they will pay by.
What is the GENIUS Act?
The GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins) was signed into law in July 2025. It creates a federal framework for payment stablecoins, meaning digital tokens designed to hold a steady value, usually one US dollar, and to be used for payments and settlement.
At a high level, the law:
Limits who can issue. Payment stablecoins can only be issued by approved issuers, such as subsidiaries of insured banks, federally qualified non-bank issuers, or state-qualified issuers below a size threshold.
Requires 1:1 reserves. Every coin must be backed by high-quality liquid assets such as cash, bank deposits and short-term US Treasuries.
Mandates transparency. Issuers must publish the makeup of their reserves every month, with those reports examined by an accounting firm.
Applies AML rules. Issuers are treated as financial institutions under the Bank Secrecy Act, with full anti-money-laundering and sanctions duties.
Bans interest to holders. Issuers cannot pay interest or yield directly to stablecoin holders, keeping stablecoins a payment tool rather than a savings product.
Where things stand in 2026
Passing the law was only the first step. Through 2026, federal regulators, including the OCC, have been publishing proposed rules on licensing, capital, reserves and supervision. The law's requirements take full effect either 18 months after it was signed or 120 days after final regulations are issued, whichever comes first. That puts the effective date in early 2027 at the latest, so the rest of this year is the window for preparation.
Why banks are paying attention
1. Faster, cheaper cross-border payments
Stablecoins settle in minutes, around the clock, including weekends. For cross-border B2B payments and remittances, that can mean lower costs and less money tied up in pre-funded accounts abroad.
2. Deposit competition
If customers move balances into stablecoins, banks could lose low-cost deposits. That is why many banks are exploring their own coins or tokenized deposits, which keep money on the bank's balance sheet while offering similar speed.
3. New fee and service lines
Even banks that never issue a coin can earn revenue from custody, reserve management, on-ramps and off-ramps between dollars and stablecoins, and settlement services for fintech partners.
4. Compliance moves into the back office
Supporting stablecoins means monitoring blockchain transactions, screening wallet addresses and reconciling on-chain and off-chain records. Many banks will need new tools and skills for this work.
Stablecoins vs. tokenized deposits
Payment stablecoin | Tokenized deposit | |
|---|---|---|
What it is | A token backed 1:1 by reserves held by the issuer | A digital representation of a regular bank deposit |
Who issues | Approved issuers under the GENIUS Act | The bank holding the deposit |
Interest to holder | Not allowed from the issuer | Possible, like a normal deposit |
Transferability | Broad, often across public blockchains | Usually within a bank's network or permissioned partners |
Best fit | Open, cross-platform payments | Treasury, corporate and interbank settlement |
A practical checklist for fintechs and banks
Pick your role. Decide whether you want to issue, distribute, custody, or simply accept stablecoins. Each role comes with very different licensing and capital needs.
Track the rulemaking. Assign someone to follow proposed rules from the OCC, FDIC, Federal Reserve and Treasury, and respond to consultations where it matters to your business.
Upgrade AML tooling. Add blockchain analytics and wallet screening to your existing transaction monitoring.
Start with a narrow use case. Cross-border supplier payments or treasury movements between your own entities are lower-risk places to learn.
Talk to customers. Many corporate treasurers already hold stablecoins. Find out what they need from their bank before a competitor does.
The bottom line
The GENIUS Act has moved stablecoins from the edges of finance into regulated payments. Banks and fintechs that use the remaining months before full implementation to choose a role, build compliance capability and test real use cases will be ready when the rules take effect. Those that wait may find customers, and deposits, have already moved on.
Regulation did not kill stablecoins. It invited the banks in.
This article is for general information only and is not legal or financial advice.