📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two regulatory regimes—PSD3/PSR and the AI Act—that are building the payment rails and AI guardrails simultaneously. This statutory approach contrasts with the US’s private, commercial infrastructure, affecting speed and openness.
European law is currently shaping the infrastructure for agentic commerce through two major regulatory regimes—PSD3/PSR and the AI Act—both of which are being developed concurrently, creating a unique, statutory foundation that differs from the US model.
The core issue is that AI agents capable of shopping but not paying are limited by European law requiring human authorization at the point of payment. Unlike the US, where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enable agent payments, Europe’s payment rails are built by regulation. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, mandate API parity and open banking interfaces, effectively rebuilding the payment infrastructure. Simultaneously, the EU AI Act classifies high-risk AI systems used in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments and human oversight, with high-risk obligations landing in 2026. These two regimes, although not designed together, are converging in 2026-2027, creating a fragmented but deliberate system that constrains how AI agents can operate in Europe. The key difference from the US is that European infrastructure is statutory and public, not privately owned, leading to slower but potentially more durable and open systems. The regulatory timelines vary: PSD3/PSR is set for 2028, while the AI Act’s high-risk provisions may slip to 2027. The interaction of these regimes determines whether an agent can pay, assess, or recommend, with the seams between them representing current uncertainties.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Statutory vs. Commercial Payment Infrastructure
This convergence of two major regulatory regimes means that Europe’s agentic commerce will develop on a slower, more open foundation compared to the US’s private, faster system. The statutory infrastructure, built into law and governed by public authorities, aims to create a more resilient and accessible ecosystem. However, the pace of implementation and the complexity of aligning two different regimes pose challenges for timely deployment. The approach could result in a more durable, interoperable market, but it also risks lagging behind US-based innovations that rely on private, decision-driven infrastructure. Ultimately, the success of European agentic commerce will depend on which infrastructure ecosystem—public statutory or private commercial—becomes more attractive to developers and users.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks Driving Agentic Commerce
The development of agentic commerce in Europe is driven by two major regulatory initiatives. The PSD3 and PSR regulations, agreed upon in late 2025, aim to overhaul payment infrastructure by mandating API parity, open banking, and direct access for non-bank payment providers. These measures are designed to create a level playing field and foster innovation through statutory rules rather than private control. Meanwhile, the EU AI Act, also finalized in late 2025 with high-risk obligations scheduled for 2026, sets out compliance and oversight requirements for AI systems used in finance, such as credit scoring and fraud detection. Neither regime was designed specifically for agentic commerce, but their convergence in 2026-2027 will define the operational environment for AI-powered payment agents. This statutory approach contrasts with the US, where private firms like Mastercard and Visa have built proprietary, decision-driven payment rails that enable faster deployment of agentic services. The European process is slower but aims for a more open, resilient infrastructure.
“European agentic commerce is being co-defined by two converging regulatory regimes—PSD3/PSR rebuilding the payment rails and the AI Act installing the AI guardrails—creating a system that is statutory, fragmented, and fundamentally different from the US model.”
— Thorsten Meyer
AI Model Risk Blueprint: Model Validation Testing | Ethical Considerations in AI Models | Integrating AI with Business Risk Plans | Real-World AI Model … Strategies | AI Governance Tools & Resource
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation and Market Impact
It remains unclear how quickly the European regimes will be implemented and how effectively they will enable agentic commerce. The timelines for PSD3/PSR and the AI Act high-risk obligations are still uncertain, with possible delays into 2027 or 2028. Additionally, it is not yet confirmed how these statutory rails will interact in practice, especially regarding payments, data access, and AI oversight. The potential for fragmentation or integration challenges remains, and whether European infrastructure will be more durable or hinder innovation is still an open question.
European payment regulation compliance software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
The next major milestones include the finalization and implementation of PSD3/PSR by 2028 and the operationalization of high-risk obligations under the AI Act, possibly by 2027. Stakeholders will closely monitor how the two regimes interact and whether the statutory infrastructure can support rapid deployment of agentic services. Further regulatory guidance and technical standards are expected to clarify the operational environment. The evolving landscape will determine whether Europe’s approach results in a more resilient but slower market or if delays will hinder competitiveness.
agentic commerce payment authorization device
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US in developing agentic commerce?
Europe relies on statutory, regulation-driven infrastructure like PSD3/PSR and the AI Act, which are slower to implement but aim for openness and resilience. The US depends on private, commercial rails built by firms like Mastercard and Visa, enabling faster deployment and decision-making.
When will European payment and AI regulations be fully in effect?
PSD3/PSR is expected to be implemented around 2028, while the high-risk obligations of the AI Act may start applying by 2027, though these timelines could shift.
What are the main challenges facing Europe’s regulatory approach?
The primary challenges are the slower legislative process, potential fragmentation between regimes, and uncertainty about how the interaction of these rules will support or hinder the deployment of agentic commerce services.
Will Europe’s approach produce a better agentic commerce market?
This remains an open question. The statutory infrastructure might lead to a more durable and accessible system, but the slower pace could impact competitiveness compared to the US’s faster, private infrastructure.
Source: ThorstenMeyerAI.com
