📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being co-defined by two regulatory regimes—PSD3/PSR and the AI Act—that are rebuilding payment rails and installing AI guardrails simultaneously. This statutory approach influences how AI agents can operate in Europe, contrasting with the US’s commercial rail system.
European law currently prohibits AI agents from acting as legal payers, despite technological capabilities that could enable such transactions. The development of the payment infrastructure and AI regulations is happening in tandem, fundamentally shaping the future of agentic commerce in Europe.
The core issue is that European payment laws require human authorization for transactions, unlike the US, where private infrastructure like Mastercard’s Agent Pay and Visa’s Intelligent Commerce facilitate agentic payments. The European approach is driven by two regulatory regimes: PSD3/PSR, which rebuilds payment rails with API parity and open finance, and the AI Act, which classifies high-risk AI systems used in finance as subject to conformity assessments and human oversight. These regimes are not coordinated but are converging, creating a fragmented yet deliberate infrastructure for agentic commerce. The PSD3/PSR reforms are expected to be implemented around 2028, while the AI Act’s high-risk obligations may take effect as early as 2027. This statutory architecture means that the ability of an AI agent to pay or assess credit depends on compliance with these laws, not just technological capability. The European system’s slower pace contrasts with the US’s faster, private-sector-driven model, but it promises a more open and resilient foundation, as the laws prevent control by single networks and promote open data access.The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Frameworks on European AI Payments
This convergence of two regulatory regimes in Europe will shape the foundational architecture of agentic commerce, influencing speed, openness, and resilience. Unlike the US, where private companies control infrastructure, Europe’s statutory approach aims to create a more open, standardized, and durable system. This could lead to more equitable access and innovation but also results in slower deployment and adaptation, raising questions about competitive advantage and technological leadership in the global AI economy.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Developments Reshaping Payment and AI Laws
European regulators are simultaneously advancing PSD3/PSR legislation, which mandates API parity and open finance, and the AI Act, which classifies high-risk AI systems for financial applications. These laws are being developed separately but will intersect in shaping how AI agents operate in the payment ecosystem. The PSD3/PSR is expected to be enacted around 2028, while the AI Act’s high-risk obligations might be enforced as early as 2027, depending on legislative progress. Unlike the US, where private firms build and extend payment rails, Europe is establishing a statutory infrastructure that all market participants must follow, emphasizing openness and legal consistency.
“European agentic commerce is not a product the labs ship onto existing rails; it is a system being co-defined by two converging regulatory regimes.”
— Thorsten Meyer

Build Financial Software with Generative AI (From Scratch)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Regulatory Timelines and Implementation
It remains unclear how quickly the PSD3/PSR reforms will be fully implemented and how the AI Act’s high-risk obligations will be enforced, especially as legislative processes may face delays. The interaction between these regimes and their actual impact on AI agent capabilities in practice is still evolving, with some aspects subject to future regulatory adjustments and legal interpretations.
payment processing hardware for European markets
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Agentic Commerce Regulation
Regulators are expected to finalize and enact PSD3/PSR legislation by 2028, with the AI Act’s high-risk provisions possibly coming into force as early as 2027. Industry stakeholders will closely monitor how these laws are implemented and how they influence the development of AI agents capable of performing payments and financial assessments. Market adaptation and compliance strategies will be critical as the legal architecture takes shape.

Why and How to Create Effective AI Prompts for Regulatory Compliance: Governing AI Interaction in Financial Institutions (Responsible Regulatory Compliance)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How does Europe’s regulatory approach differ from the US in agentic commerce?
Europe relies on statutory regulations like PSD3/PSR and the AI Act to build a legal infrastructure that all market participants must follow, emphasizing openness and resilience. In contrast, the US uses private, commercial rails controlled by firms like Mastercard and Visa, which can extend and modify their systems more quickly.
When will the new European payment and AI laws be enforced?
PSD3/PSR is expected to be enacted around 2028, while the AI Act’s high-risk obligations could be enforced as early as 2027, depending on legislative progress and regulatory adoption.
What are the advantages of Europe’s statutory infrastructure for agentic commerce?
It promotes openness, interoperability, and durability, reducing control by single networks and enabling broader access to data and payment systems.
Will Europe’s approach slow down innovation compared to the US?
Yes, the slower legislative process may delay deployment, but it aims to create a more stable and equitable foundation for long-term innovation.
What challenges might arise from the dual-regime convergence?
The main challenge is coordinating the implementation and ensuring the regimes work seamlessly together, despite being developed independently and on different timelines.
Source: ThorstenMeyerAI.com