📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

European agentic commerce is being shaped by two converging regulatory regimes—PSD3/PSR and the AI Act—that are jointly defining the infrastructure and guardrails for AI-powered transactions. This unique process means that the legal architecture, not just technological capability, determines whether an AI agent can pay in Europe, making the system slower to develop but potentially more durable.

Unlike the US, where private payment networks like Mastercard’s Agent Pay and Visa’s Intelligent Commerce enable agent payments through commercial rails, Europe’s payment infrastructure is primarily statutory. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, are rebuilding the payment rails with mandates for API parity, requiring banks to expose interfaces as capable as their consumer apps. This open approach aims to prevent network control by any single entity.

Simultaneously, the EU AI Act, with high-risk obligations coming into force around 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, subjecting them to conformity assessments, human oversight, and registration. These regulations are not designed together but are converging in the same timeframe, creating seams and overlaps in the regulatory architecture.

The core argument is that European agentic commerce is not simply a product of technological innovation but a system co-defined by these two regimes. The payment regime restricts whether an agent can pay, while the AI regime governs its ability to assess, recommend, or score. The different timelines, scopes, and authorities involved mean that the development of agentic commerce in Europe will be slower than in the US but potentially more resilient and open.

Implications of Dual Regulatory Frameworks on European AI Payments

This convergence of regulations means European agentic commerce will be slower to emerge but may benefit from a more open, standardized, and resilient infrastructure. The mandatory API parity and open finance provisions aim to prevent monopolistic control, potentially fostering a more competitive and innovative ecosystem. However, the slower pace could delay the deployment of AI-powered payment agents compared to the US, where private networks enable faster rollouts. Ultimately, the architecture chosen by these regulations will influence whether Europe leads in open, interoperable agentic systems or lags behind in speed but gains durability and fairness.

European Regulatory Developments Shaping Payment and AI Infrastructure

European regulators are simultaneously advancing two major legislative initiatives. The PSD3/PSR, expected to be enacted by 2028, will overhaul payment infrastructure by mandating API parity and direct access for nonbank payment providers, effectively democratizing access to payment rails. Meanwhile, the EU AI Act, with high-risk classifications for financial AI systems, aims to impose strict oversight, conformity assessments, and registration requirements, with high-risk obligations possibly taking effect by 2027. These initiatives are not coordinated but are converging in time, creating a complex regulatory environment that will define the future of agentic commerce in Europe.

This contrasts sharply with the US, where private firms like Mastercard and Visa have built proprietary, decision-extendable networks that facilitate agent payments without the same statutory constraints. The European approach emphasizes legal and open standards, which could foster a more resilient but slower ecosystem.

“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two regulatory regimes—PSD3/PSR and the AI Act—which were not designed together.”

— Thorsten Meyer

Uncertainties in European Regulatory Timelines and Implementation

It remains unclear how quickly the PSD3/PSR regulations will be fully implemented and how effectively they will be adopted by banks and payment providers. The AI Act’s high-risk obligations may face delays, possibly slipping beyond 2026, and the practical integration of AI guardrails with payment infrastructure is still under development. Additionally, the extent to which these regulations will harmonize across member states remains uncertain, potentially affecting the uniformity of the ecosystem.

Next Steps in European Regulatory and Infrastructure Development

Regulators are expected to publish detailed implementation rules for PSD3/PSR by summer 2026, with phased rollouts anticipated through 2028. The AI Act’s high-risk obligations are also expected to be clarified and enforced within the next year, with compliance processes beginning shortly thereafter. Observers will monitor how banks, AI developers, and payment providers adapt to these new standards, and whether the convergence results in a more open or fragmented ecosystem for agentic commerce in Europe.

Key Questions

How does Europe’s approach to agentic payments differ from the US?

Europe relies on statutory, regulation-driven payment rails with mandated API access and open finance, whereas the US depends on private, commercial networks built by firms like Mastercard and Visa, which can extend decision-making capabilities more quickly.

When will the new regulations be fully in effect?

The PSD3/PSR regulations are expected to be implemented around 2028, with detailed rules published by mid-2026. The AI Act’s high-risk obligations could start applying as early as 2027, depending on legislative progress.

Will the slower European regulatory process hinder innovation?

While slower, Europe’s approach aims for a more durable and open infrastructure, potentially fostering more competition and interoperability in the long term, though initial deployment of AI agents may lag behind the US.

What is the main challenge for AI agents in Europe?

The primary challenge is navigating the complex, fragmented legal architecture that governs payments, data, AI models, and accountability, which may slow deployment but provides stronger guardrails and standards.

Source: ThorstenMeyerAI.com