📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

European law is currently shaping the future of agentic commerce through two major regulatory regimes—PSD3/PSR and the AI Act—that are being developed simultaneously but independently. This convergence will determine whether AI-powered agents in Europe can facilitate payments and perform complex financial functions, making the legal architecture the central constraint rather than technological capability.

The core issue in European agentic commerce is the legal requirement that a human must authorize online payments, preventing AI agents from acting as payers under current law. Unlike the US, where private payment networks like Mastercard’s Agent Pay or Visa’s Intelligent Commerce enable agent payments through proprietary infrastructure, Europe’s payment ecosystem is governed by statutory regulations. PSD2’s Strong Customer Authentication (SCA) mandates multi-factor human authentication, and upcoming reforms—PSD3 and the Payment Services Regulation (PSR)—aim to rebuild payment rails with API parity, requiring banks to expose interfaces comparable to their consumer apps.

Meanwhile, the European AI Act, scheduled to impose high-risk obligations in 2026, classifies AI systems involved in credit scoring, fraud detection, and other financial functions as high-risk, subject to conformity assessments, human oversight, and registration. These two regulatory streams are not coordinated but are converging within the same timeframe, creating a complex, fragmented legal environment that defines what an agent can do in Europe. The outcome will depend on how these regimes intersect: whether an agent can pay, assess, or recommend, all hinges on the evolving legal framework.

Implications of Dual Regulatory Frameworks for European AI Agents

This convergence of regulations shapes the entire foundation of agentic commerce in Europe. The statutory nature of the payment rails means that AI agents cannot act as payers until legislation explicitly permits it, which could delay deployment compared to the US, where private networks enable faster innovation. However, the European approach’s durability—built into law and open standards—may foster a more resilient and accessible infrastructure. The open finance mandates and API parity reduce control by individual banks, potentially democratizing access and innovation. Ultimately, the success and competitiveness of European agentic commerce will depend on which regulatory architecture proves more effective: the faster, private, and concentrated US model or the slower, open, and statutory European model.

European Regulatory Reforms and Their Impact on Agentic Commerce

European regulators are actively rewriting the rules governing digital payments and AI systems. The PSD3 and Payment Services Regulation (PSR), expected to be enacted around 2028, aim to overhaul payment infrastructure with mandatory API parity, direct access for nonbank payment service providers, and open finance initiatives under the FIDA regulation. These reforms seek to create a unified, open payment ecosystem where no single entity controls the interfaces or data access.

Simultaneously, the AI Act, adopted in November 2025 with high-risk obligations scheduled for 2026, aims to regulate AI systems that perform financial functions, requiring compliance, human oversight, and registration. These reforms are not linked but are unfolding concurrently, which means the legal environment for AI agents in Europe is being built piece by piece, with the potential for seams and inconsistencies.

“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”

— Thorsten Meyer

Uncertainties in Regulatory Timelines and Implementation

It remains unclear how quickly the European regulations will be fully implemented and harmonized, given legislative delays and political negotiations. The PSD3/PSR is expected around 2028, but the FIDA regulation and AI Act deadlines may shift, potentially affecting the deployment timeline for agentic commerce. Additionally, the practical integration of these regimes—how they will interact and resolve conflicts—is still uncertain.

Next Steps in European Regulatory Development

European regulators are expected to finalize PSD3 and PSR regulations by 2027-2028, with AI obligations possibly coming into force by 2027. Stakeholders are watching legislative processes closely, as the outcome will influence whether AI agents can act as payers and perform complex financial tasks. Industry and policymakers will need to navigate the seams between these regimes to ensure a coherent framework for agentic commerce.

Key Questions

Will AI agents in Europe be able to make payments soon?

Not immediately. Under current law, a human must authorize payments, but upcoming regulations like PSD3/PSR aim to change that. Implementation is still in progress, and legal changes are expected around 2028.

How does the European approach differ from the US?

Europe relies on statutory, regulation-based infrastructure with open standards and mandated API parity, while the US uses private, proprietary payment networks that can extend agent capabilities more quickly through decision-based extensions.

What role does the AI Act play in agentic commerce?

The AI Act classifies AI systems involved in financial functions as high-risk, imposing compliance, oversight, and registration requirements that will influence how AI agents operate within European law.

Are the European regulations likely to delay innovation?

Yes, the statutory and legislative process may slow deployment compared to the US, but it aims to create a more durable and open infrastructure in the long term.

Source: ThorstenMeyerAI.com