📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two converging regulations: PSD3/PSR rebuilding payment rails and the AI Act establishing high-risk AI guardrails. This statutory approach differs from the US’s private infrastructure, impacting speed and durability.
European regulation is simultaneously restructuring payment rails and AI guardrails, creating a complex legal environment that will define how agentic commerce operates in the region. Unlike the US, where private firms control payment infrastructure, Europe’s approach is statutory, affecting how AI agents can perform transactions and assessments.
The core issue is that the European Union is developing two regulatory regimes—PSD3/PSR and the AI Act—that are not coordinated but are shaping the infrastructure and guardrails for AI-powered commerce. PSD3 and the Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, mandate API parity and open banking interfaces, allowing banks to expose their systems to third-party agents. Meanwhile, the EU AI Act, with high-risk obligations scheduled for 2026, classifies AI systems used in finance—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration.
These overlapping reforms mean that an AI agent in Europe cannot simply perform payments or assessments without navigating a fragmented legal landscape. Payment authorization depends on the PSD3/PSR framework, which requires human authentication, while AI systems must comply with high-risk obligations under the AI Act. The two regimes have different timelines and authorities, creating seams that influence how agentic commerce can develop in Europe.
Thorsten Meyer, a researcher in digital regulation, emphasizes that Europe’s approach is not based on existing commercial infrastructure but on statutory rules that are more deliberate and slower to implement. He notes that while this may delay the deployment of agentic payment capabilities compared to the US, it offers a more open and resilient foundation—since the infrastructure is embedded in law and not owned by private firms.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European Commerce
This convergence of regulations will shape the future landscape of agentic commerce in Europe, influencing speed, innovation, and market structure. The statutory approach, though slower, offers a more open and durable foundation, potentially leading to a more resilient and inclusive ecosystem. Conversely, the US model, driven by private infrastructure, enables faster deployment but concentrates control within a few firms. The European path’s success will depend on how these legal frameworks evolve and interact, ultimately determining whether Europe leads or lags in agentic commerce innovation.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms and Their Impact on Agentic Commerce
Historically, the US has relied on private payment networks like Mastercard and Visa, which can extend services to agents through decision-making within their infrastructure. Europe, however, is constructing a regulatory environment that mandates API access, open banking, and high-risk AI oversight. The PSD3/PSR reforms, announced in late 2025, aim to rebuild the payment rails with API parity, ensuring banks must expose interfaces equivalent to their consumer-facing apps. Simultaneously, the EU AI Act, scheduled for high-risk classification in 2026, introduces high compliance standards for AI systems involved in financial decision-making.
This dual reform process is unprecedented in scope and complexity, as the two regimes were not designed to work together but are now shaping the same operational environment for AI agents. The result is a fragmented but legally robust foundation that contrasts sharply with the US’s private, decision-driven infrastructure.
„Europe’s approach is not based on existing commercial infrastructure but on statutory rules that are more deliberate and slower to implement.“
— Thorsten Meyer
AI compliance assessment tools for finance
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Implementation Timelines and Interaction
It remains unclear how the two regimes will fully integrate in practice, especially given their different timelines—PSD3/PSR expected by 2028 and the AI Act potentially slipping to 2027. The specific mechanisms for how AI agents will navigate these legal seams, and whether regulatory authorities will coordinate effectively, are still developing. Additionally, the impact of these regulations on market innovation and competitiveness remains uncertain.
high-risk AI monitoring software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Regulatory Milestones and Market Adaptation
In the coming months, regulators will finalize detailed implementation rules for PSD3/PSR and the AI Act, with the first wave of compliance expected around 2026-2028. Market participants, including AI developers, banks, and fintech firms, are preparing for these changes by designing compliant systems. Observers will monitor how these legal frameworks influence the deployment of agentic commerce solutions and whether Europe’s deliberate approach results in a more resilient ecosystem or delays innovation compared to the US.
payment authorization hardware for EU regulations
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US in developing agentic commerce?
Europe relies on statutory regulations like PSD3/PSR and the AI Act to build foundational infrastructure, emphasizing legal robustness and openness. The US depends on private payment networks and decision-making firms, enabling faster but more concentrated deployment.
When will the new European payment and AI regulations become operational?
PSD3 and PSR are expected to be implemented by 2028, while the AI Act’s high-risk obligations are scheduled for 2026, possibly extending into 2027.
What are the potential advantages of Europe’s statutory approach?
It offers a more durable, open, and resilient infrastructure, less dependent on private control, and potentially more inclusive for a broader range of market participants.
Could the regulatory seams hinder innovation in European agentic commerce?
Yes, the fragmented and slower implementation process may delay deployment and limit rapid innovation compared to the US model, but it may also produce a more stable and compliant ecosystem in the long term.
Source: ThorstenMeyerAI.com
