Today's AI assistants can research a product, compare prices, and fill a cart. The next step — letting them actually pay — raises hard questions: How does a merchant know an agent is legitimate? How do you limit what it can spend? And who's on the hook when it buys the wrong thing? Card networks, payment processors, and AI companies have spent the past year and a half proposing answers.
Last updated September 17, 2026.
Key takeaways
- Agentic payments are transactions initiated by an AI agent acting on a person's (or business's) behalf, within permissions the person has set.
- Visa and Mastercard have built agent-payment programs on tokenization — replacing card numbers with restricted digital credentials. As of mid-2026, Visa describes live agent transactions in the U.S. and pilots or readiness programs elsewhere [1][2][3]; Mastercard said it would enable all U.S. cardholders for Agent Pay by mid-November 2025 [4].
- The market is still sorting out where checkout happens: OpenAI retired its in-chat Instant Checkout in March 2026, about six months after launch, and shifted checkout back to merchants [5][6], while Google announced agentic checkout via Google Pay in the U.S. for summer 2026 [7].
- "Machine payments" — AI agents paying other services in tiny, frequent amounts — became a separate front in 2026, with launches from Mastercard and the Stripe-backed Tempo [8][9].
- Consumer protections were written for humans pressing "buy." How card dispute rights and Regulation E apply to agent-initiated purchases is still being worked out.
What "agentic" means
An AI agent is software that can take actions toward a goal, not just answer questions. In commerce, an agent might:
- Find and buy a specific item when it drops below a set price
- Rebook a flight within a budget after a cancellation
- Reorder household supplies
- For businesses, pay invoices or buy API access and cloud services automatically
Agentic commerce is the broader shopping process; agentic payments is the money-moving step at the end.
The core challenge is trust in three directions: the consumer must trust the agent, the merchant must trust that the agent is authorized, and the payment network must be able to tell a legitimate agent from a bot committing fraud.
The building blocks
| Concept | Plain-English meaning | Why agents need it |
|---|---|---|
| Tokenization | Replacing your real card number with a substitute credential that's useless elsewhere | An agent can pay without ever seeing your actual card number |
| Scoped / agent-specific tokens | A token restricted by merchant, amount, time, or category | Limits damage if an agent errs or is compromised |
| Mandates / intent | A signed record of what the user authorized ("up to $200 for running shoes this week") | Evidence for disputes and liability |
| Agent identity / verification | Cryptographic proof that a request comes from a known, registered agent | Lets merchants distinguish good bots from bad ones |
| Passkeys / biometric confirmation | User approves with face, fingerprint, or device PIN | Keeps a human in the loop for sensitive steps Related field note |
Who's building what (and how far along it is)
Status labels matter. Announced means publicly described; pilot/preview means limited testing with selected partners or users; launched means generally available to some market; widely adopted means meaningful real-world usage — a stage we could not verify for any agentic payment product.
| Initiative | Company | What it is | Status (as of date shown) |
|---|---|---|---|
| Visa Intelligent Commerce | Visa | Agent-ready tokenized credentials, spending controls, and APIs for AI platforms | Announced April 30, 2025 [15]; Visa reported "hundreds" of completed agent-initiated transactions with partners (Dec. 18, 2025) [1]; described as live in the U.S. (Apr. 29, 2026) [2] |
| Visa Agentic Ready | Visa | Program for banks and issuers to test agent-initiated payments with live cards and real merchants | Launched first in Europe incl. UK (20+ active partners); expanding to Asia Pacific and Latin America, per Visa (Apr. 29, 2026) [2] |
| Visa Intelligent Commerce Connect | Visa | Single integration for agent platforms supporting several agent protocols, tokenization, and spend controls | Pilot with select partners; broader rollout planned during 2026 (Apr. 8, 2026) [3] |
| Trusted Agent Protocol | Visa | Framework to help merchants recognize legitimate AI agents | Introduced October 2025 [1] |
| Mastercard Agent Pay | Mastercard | "Agentic tokens" that let registered AI agents transact on a cardholder's behalf | Citi and U.S. Bank cardholders enabled first; Mastercard said all U.S. cardholders would be enabled by mid-November 2025, with cardholders globally "shortly thereafter" (Sept. 30, 2025); specific markets not named [4] |
| Mastercard Agent Pay for Machines | Mastercard | High-frequency, low-value payments between AI agents and machines, settling via cards, accounts, or stablecoins | Launched with 30+ initial partners (June 10, 2026) [8]; no volume figures disclosed |
| Agentic Commerce Protocol (ACP) | OpenAI and Stripe | Open protocol connecting AI apps with merchants | Released September 2025 [10]; as of March 2026 OpenAI said it was refocusing on product discovery, with retailers including Target, Sephora, Nordstrom, Lowe's, Best Buy, The Home Depot, and Wayfair integrated [6] |
| Instant Checkout in ChatGPT | OpenAI | Buying directly inside ChatGPT | Launched September 2025 [10]; retired in March 2026 — OpenAI said the initial version "did not offer the level of flexibility that we aspire to provide" and it would let merchants use their own checkouts [5][6] |
| Universal Commerce Protocol (UCP) & Universal Cart | Protocol and cross-merchant cart spanning Search, Gemini, YouTube, and Gmail | Agentic checkout via Google Pay announced to launch summer 2026 in the U.S. with select partners; UCP checkout expanding to Canada, Australia, and the U.K. (announced May 19, 2026) [7]; we did not confirm whether the summer launch had occurred as of Sept. 17, 2026 | |
| Agent Payments Protocol (AP2) | Google, with partners | Protocol using signed "mandates" so agents buy within preset boundaries | Announced September 2025 [11]; Google said in May 2026 it planned to implement AP2 "in coming months," starting with Gemini Spark [7] |
| Machine Payments Protocol (MPP) | Tempo (Stripe-backed) with Stripe | Standard for AI agents to pay for services programmatically | Launched alongside Tempo blockchain mainnet (March 2026) [9] |
| x402 | Coinbase (now stewarded by the x402 Foundation, a Linux Foundation project) | Uses the HTTP "402 Payment Required" status code for machine-to-machine stablecoin payments | Open protocol introduced May 6, 2025 [16]; its website reported tens of millions of transactions in the prior 30 days, a self-reported figure (Sept. 17, 2026) [12] |
Figures in this table are company-reported. Visa has also forecast that millions of consumers will use AI agents to complete purchases by the 2026 holiday season [1] — a prediction, not a measurement.
The OpenAI reversal is a useful reality check: the protocols and tokens are real, but consumers and merchants haven't yet settled on handing an AI the entire checkout. Many current experiences are "discover in AI, buy on the merchant's site or app."
How an agentic purchase might flow
A simplified, illustrative sequence based on the published designs [3][4][11]:
- You set permissions. "Buy a pair of size 10 trail shoes under $150 from a retailer with free returns."
- The agent shops. It searches merchants and selects an item.
- Credentials are issued. The payment provider supplies a token scoped to that merchant and amount rather than your card number.
- Identity is signaled. The agent presents proof that it's a registered agent acting for you.
- You may confirm. Depending on the design and amount, you approve with a biometric or passkey.
- The merchant processes the order through its usual payment processor. In most current designs the merchant remains the seller and owns the checkout; OpenAI's 2026 shift made that explicit for ChatGPT [6].
- A record is kept of what you authorized, which can matter in a dispute.
The unresolved questions
Who's liable when the agent gets it wrong?
Suppose the agent buys the wrong size, a non-refundable fare, or 10 units instead of one. Card network rules and consumer laws were built around a human cardholder authorizing a purchase.
- Credit cards: Under the Fair Credit Billing Act, cardholders can dispute billing errors, including goods not accepted or not delivered as agreed [13]. Whether an agent's mistake within the permissions you granted counts is untested.
- Debit and bank accounts: Regulation E protects against unauthorized transfers [14]. If you authorized an agent, is a mistaken purchase unauthorized? We found no clear answer from regulators as of September 17, 2026.
- Network rules: Visa and Mastercard frameworks aim to create evidence (mandates, tokens tied to agents) for allocating responsibility, but detailed dispute rules may still be evolving.
Fraud and "bad bots"
Merchants have spent years blocking automated traffic. Now they must let good agents in while keeping scalpers and card-testing bots out — the reason agent-verification protocols exist. Criminals may also try to hijack agents through prompt injection: hidden instructions on a web page designed to manipulate an AI into taking unintended actions.
Privacy and data
An agent that shops for you may see your purchase history, addresses, and preferences. Who can use that data, and for what, depends on each platform's terms and applicable privacy laws.
Competition and neutrality
If an AI platform picks the merchant, how it ranks options — and whether it's paid for placement — matters for consumers and merchants.
What consumers should know now
- Start with low limits if you try an agent that can spend money.
- Prefer credit cards or tokens with spending controls over direct bank access while protections are unsettled.
- Read what you're authorizing: Which merchants? What maximum? For how long?
- Keep confirmations on for purchases until you trust the tool.
- Watch statements and set transaction alerts.
What merchants and developers should watch
- Which protocols your payment processor supports, and whether you need to adopt more than one
- How agent-initiated orders are flagged in fraud tools and chargeback evidence
- Product data quality: agents rely on structured catalog information
- Evolving network rules for agent transactions
Related field note Related field note
FAQ
Can AI agents pay for things today? In limited ways. Visa reports live agent-initiated transactions in the U.S., Mastercard has enabled U.S. cardholders for Agent Pay, and Google announced U.S. agentic checkout for summer 2026. Availability varies by product, merchant, and country [1][2][4][7].
Does the agent get my card number? In the network-backed designs, the agent typically uses a token rather than your actual card number [3][4].
What's the difference between ACP and AP2? Both are open protocols. ACP, from OpenAI and Stripe, connects AI apps with merchants and, since March 2026, emphasizes product discovery; AP2, from Google, uses signed user mandates that set boundaries for agent purchases [6][7][11]. Google also runs a separate Universal Commerce Protocol for checkout experiences [7].
If an AI agent makes a mistake, can I get a refund? Merchant return policies still apply, and card dispute rights may help, but how existing protections apply to agent errors isn't settled. Check the terms of the agent and your card.
Is this safe for business payments? Businesses can use agents with strict limits, approvals, and audit logs, but should treat it like granting spending authority to an employee.
Sources
- Visa, "Visa and Partners Complete Secure AI Transactions, Setting the Stage for Mainstream Adoption in 2026," press release, December 18, 2025, https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21961.html, accessed 2026-09-17.
- Visa, "Visa Announces Global Expansion of Agentic Ready Program," press release, April 29, 2026, https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22341.html, accessed 2026-09-17.
- Visa, "Visa Opens the Door to AI-Driven Shopping for Businesses Worldwide" (Intelligent Commerce Connect), press release, April 8, 2026, https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22276.html, accessed 2026-09-17.
- Mastercard, "How Mastercard's agentic tokens are driving agentic AI commerce," September 30, 2025, https://www.mastercard.com/us/en/news-and-trends/stories/2025/agentic-commerce-momentum.html, accessed 2026-09-17.
- Hypotenuse AI, "ChatGPT Instant Checkout: What Happened to It in 2026," https://www.hypotenuse.ai/blog/chatgpts-instant-checkout-the-next-phase-of-agentic-commerce, accessed 2026-09-17. (Secondary source; see also CNBC, "OpenAI revamps shopping experience in ChatGPT after struggling with Instant Checkout offering," March 24, 2026, https://www.cnbc.com/2026/03/24/openai-revamps-shopping-experience-in-chatgpt-after-instant-checkout.html.)
- Digital Commerce 360, "OpenAI reveals updates to its agentic commerce experience for ChatGPT," March 24, 2026, https://www.digitalcommerce360.com/2026/03/24/openai-agentic-commerce-updates-chatgpt-walmart/, accessed 2026-09-17.
- Google, "Google Shopping introduces Universal Cart, agentic shopping," The Keyword blog, May 19, 2026, https://blog.google/products-and-platforms/products/shopping/google-shopping-cart/, accessed 2026-09-17.
- Mastercard, "Mastercard launches Agent Pay for Machines to unlock super-fast, always-on payments," press release, June 10, 2026, https://www.mastercard.com/global/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html, accessed 2026-09-17.
- CoinDesk, "Stripe-led payments blockchain Tempo goes live with protocol for AI agents," March 18, 2026, https://www.coindesk.com/tech/2026/03/18/stripe-led-payments-blockchain-tempo-goes-live-with-protocol-for-ai-agents, accessed 2026-09-17. See also Stripe, "Introducing the Machine Payments Protocol," https://stripe.com/blog/machine-payments-protocol.
- Stripe, "Stripe powers Instant Checkout in ChatGPT and releases Agentic Commerce Protocol codeveloped with OpenAI," September 2025, https://stripe.com/newsroom/news/stripe-openai-instant-checkout, accessed 2026-09-17; OpenAI, "Buy it in ChatGPT: Instant Checkout and the Agentic Commerce Protocol," https://openai.com/index/buy-it-in-chatgpt/.
- Google Cloud, "Powering AI commerce with the new Agent Payments Protocol (AP2)," September 16, 2025, https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol, accessed 2026-09-17.
- x402 Foundation, x402 protocol site, https://www.x402.org/, accessed 2026-09-17.
- Federal Trade Commission, "Fair Credit Billing Act," https://www.ftc.gov/legal-library/browse/statutes/fair-credit-billing-act, accessed 2026-09-17.
- Consumer Financial Protection Bureau, "§ 1005.6 Liability of consumer for unauthorized transfers," https://www.consumerfinance.gov/rules-policy/regulations/1005/6/, accessed 2026-09-17.
- Visa, "Find and Buy with AI: Visa Unveils New Era of Commerce," press release, April 30, 2025, https://investor.visa.com/news/news-details/2025/Find-and-Buy-with-AI-Visa-Unveils-New-Era-of-Commerce/default.aspx, accessed 2026-09-17.
- Coinbase Developer Platform, "Introducing x402: a new standard for internet-native payments," May 6, 2025, https://www.coinbase.com/developer-platform/discover/launches/x402, accessed 2026-09-17.
This article is for educational purposes only and is not financial, legal, or investment advice. Product availability and terms change rapidly; verify current features, limits, and protections with each provider. Mentions of companies are not endorsements.