Payments in the Age of AI Agents

Paper · Source
Agentic Commerce

Source: Christopher J. Waller, Board of Governors of the Federal Reserve System; speech · 2026-09-29

Thank you for inviting me to speak here today. Last year at Sibos I leaned into the conference theme and discussed how a range of emerging technologies could shape the next frontier in global payments. Consistent with this year’s theme, today I want to focus more specifically on the state of artificial intelligence (AI) in payments and raise a few questions about how this technology could change the way payment systems operate. As I have discussed before, within the financial sector, the payments industry has long been at the forefront of using AI to improve operations. There is a rich history of deploying machine learning to combat payments fraud. The industry was also an early adopter of large language models (LLMs) for payment reconciliation and similar tasks. Now it is helping to build foundational infrastructure for AI agents to operate more broadly in the economy. These agents can plan and execute multistep processes using LLMs, enabling those agents to transact autonomously. Given the global audience for this event, I’ll start by discussing the implications of AI for the efficiency and security of cross-border payments. Then I will turn to a potentially transformative topic for the payments industry—agentic commerce.

At a high level, there are two primary models of agentic commerce: agent assisted and agent delegated. In the agent-assisted model, a buyer uses an AI agent primarily for product search and discovery, but the buyer remains in control. They make the decisions, and they handle the payment. In the agent-delegated model, a buyer grants authority to an AI agent to shop and make payments on their behalf. The buyer may specify some constraints and set up guardrails, but the agent operates autonomously. For example, a buyer might give an agent access to a pre-funded virtual card with instructions to shop for groceries online based on past purchases. Consumer-to-business transactions are seen as the first wave of agentic commerce, with agent-assisted use cases preceding more autonomous, agent-delegated ones. Because it introduces higher risks of unintended purchases, the delegated model requires a more extensive buildout of trust mechanisms and guardrails. I'll say more about these shortly. Consumers are likely to access agents in two common ways: through general-purpose agents offered by AI firms and through merchant-specific agents. As personal AI assistants gain traction, they too could become a natural fit for agentic commerce. To be useful to consumers, AI agents need broad, real-time knowledge of merchant inventories. Large online retailers are sharing their inventory data in different ways. Some work directly with AI firms to make their product catalogs available to third-party agents, while others surface that catalog data through their own shopping agents. Small and medium-sized merchants are being supported by e-commerce platforms, which are building tools to standardize their digital product catalogs and make them discoverable by leading agent interfaces.

While consumer shopping receives a lot of attention in this area, business-to-business (B2B) purchases may be especially well suited for agentic commerce. These purchases are often recurring and abide by a set of rules, such as approved suppliers and budget limits, which create natural guidelines for agents. Agents could also potentially negotiate terms with suppliers and develop payment strategies to optimize working capital. However, the higher transaction values typical in B2B commerce amplify the financial exposure from agent errors or unauthorized actions, so robust controls and monitoring systems will be essential. For B2B purchases, agents would need to be able to carry out payments on a diverse set of rails. Whereas payment cards dominate consumer e-commerce payments, businesses rely on a wider range of methods, including ACH, wire, instant payments, and cards. To operate efficiently across these shopping contexts, agents will need to make micropayments along the way. Before completing a purchase, an agent might pay for LLM queries, price data feeds, and other API calls. Small machine-to-machine payments are not new, but they could reach a much larger scale if shopping agents are working around the clock at machine speed. Micropayments like these favor payment rails with lower flat fees. The biggest barrier to scaling agentic commerce, particularly the agent-delegated model, is building sufficient trust among buyers and sellers. A few concrete challenges stand out: authentication, liability, and fraud. Agentic commerce transforms the payment authentication paradigm. The question shifts from proving that a buyer is an authorized payer to proving that an agent has the authority to pay on the buyer’s behalf. Capturing this will require new authentication approaches. Liability in this context comes down to a pretty simple question: Who is on the hook if an agent makes the wrong purchase? Current e-commerce liability frameworks—including network rules, consumer protection standards, and other regulations—could potentially be adapted for agentic commerce. But there may also be an opportunity to test and refine new approaches. For example, technical standards could be designed to give everyone a better understanding of what the buyer intended and how their agent carried it out. That shared understanding could help reduce the ambiguities that complicate many transaction disputes today. Finally, as in other contexts, fraud could undermine confidence in agentic commerce. Existing fraud detection and prevention systems, calibrated to human behavior, may not translate well to agents. As a result, fraud models and rules will need to be recalibrated to account for agent payment patterns. Market participants are actively developing standards to address some of these trust challenges and related issues. Tech firms, e-commerce platforms, and payment service providers are building foundational protocols that standardize how agents interact with merchants and make payments. Card networks are also publishing technical specifications that enable AI agents to make secure payments on a payer’s behalf. These specifications include methods of registering agents and logging cardholders’ approvals to conduct agentic payments, among other functionalities. A key question is whether agentic commerce will migrate toward platform-specific or interoperable standards. Platform-specific standards are designed around a single ecosystem. Interoperable standards are designed to work across e-commerce systems, agent interfaces, and payment methods. In this sense, they could help to level the playing field for smaller merchants and payment providers seeking to operate in this space.

A related consideration revolves around open versus closed agentic commerce systems, which share similarities with open- and closed-loop payment networks. An open system in this context is one that allows a range of shopping agents on its platform. A closed system is one that requires using a specific AI agent. For example, an online retailer might require shoppers to use its proprietary AI agent and block other agents. Open systems support buyer choice and an active environment for developing new agentic commerce solutions. Closed systems give online retailers more control over what happens on their platforms and lead to more vertical integration. At this early stage, it is not clear which model will have the edge in shaping agentic commerce, but whichever gains traction could significantly influence how the market structure evolves. I’ve presented what I believe are some of the most thought-provoking considerations for the payments industry as it helps to bring agentic commerce to market. But there is no shortage of issues that the industry will need to consider as this new mode of transacting matures. For example, what standards are still missing for agents to carry identity, consent, and payment credentials across the full e-commerce stack? What is the right balance between user convenience and purposeful friction in agent authorization? Will payment rails need to adapt in a future where agentic payments scale dramatically? These are questions worth pondering. I am keenly focused on how new technologies can affect the structure and functioning of payment systems globally. While my comments today have focused on AI within the context of cross-border and e-commerce payments, AI agents may become integrated into a wide range of payment flows. Agentic transactions could materially change the frequency and timing of payments, as well as other characteristics. Meeting this moment requires a proactive approach that balances innovation with the safety, integrity, and stability that underpin trust in payments. With all of this in mind, I am very interested to see how the payments industry, including many of you here today, adapts to the use of AI in payments. Thank you.

Lines of inquiry this paper opens 24

Research framings built by reading the notes related to this paper — the questions it feeds into.

How can merchant-funded agents remain loyal to consumer interests in digital commerce? How should agent identity and authorization work across organizational boundaries? How effectively can sellers exploit AI shopping agents through description changes? How can AI agents earn consumer trust with financial decisions? Do AI shopping agents exhibit systematic bias in recommendations? When do multi-agent systems outperform single-agent approaches for complex task execution? Should multi-agent systems use structured protocols or natural language communication? How do capability differences shape collusion in AI markets?