📊 Full opportunity report: The rails. Why European agentic commerce is co-defined by two converging regimes. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
European agentic commerce is being shaped by two regulatory regimes—PSD3/PSR and the AI Act—simultaneously rebuilding payment rails and imposing AI guardrails. This approach creates a slower but more durable foundation compared to the US’s private, commercial rails.
European law is currently defining the infrastructure for agentic commerce through two regulatory regimes—PSD3/PSR and the AI Act—that are being developed simultaneously. This convergence is shaping how AI agents can operate in payments and financial decision-making, with significant implications for market speed and durability.
In Europe, the ability of AI agents to make payments is constrained not by technological capability but by legal frameworks. The PSD3 and Payment Services Regulation (PSR), agreed in November 2025 and expected to be implemented by 2028, are rebuilding the payment rails with mandates for API parity and direct access for nonbank providers. These reforms aim to create open, non-exclusive infrastructure that no single entity controls, contrasting sharply with the US’s private, proprietary payment networks.
Simultaneously, the European AI Act, with high-risk obligations scheduled for 2026, classifies AI systems involved in financial decision-making—such as credit scoring and fraud detection—as high-risk, requiring conformity assessments, human oversight, and registration. These guardrails are designed to ensure responsible AI deployment but also impose constraints that influence how AI agents can interact with financial systems.
These two regimes were not designed in coordination but are converging to shape a complex, statutory infrastructure. The key difference from the US is that European rules are statutory, built into law, and enforceable, whereas the US relies on private networks and decision-based extensions. This results in a slower, more deliberate process but potentially more durable and open infrastructure.
The rails.
Why European agentic
commerce is co-defined by
two converging regimes.
SCA needs a human payer
first-class third-party interfaces
(Omnibus may slip it to 2027)
the clock agentic commerce runs on
choose the best deal — capability is here
authentication
required
as the equivalent of a human payer
- Mastercard Agent Pay, Visa Intelligent Commerce, Plaid
- The rail’s owner sets the rule — extend to agents by product decision
- Fast — moves at product speed
- Concentrated — a few firms control access
- PSD2/PSD3, PSR, SCA, FIDA
- The legislature sets the rule — no network can grant payer status
- Slow — moves at legislative speed
- Open — mandatory API parity, public data substrate
within
limits
Europe is betting that durable, open, publicly-owned rails produce a better agentic-commerce market than fast, concentrated, privately-owned ones — even at the cost of arriving later. Which foundation an agent economy actually prefers is the genuine open question.Thorsten Meyer · The Rails · Agentic Commerce 04
Implications of Dual Regulatory Regimes for European AI Commerce
This convergence means European agentic commerce will develop on a foundation that prioritizes legal robustness and openness over speed. The statutory nature of the reforms ensures that no single entity controls the infrastructure, fostering a more level playing field. However, the process is slower, and market deployment may lag behind the US, which benefits from private, decision-driven networks. The outcome will influence which model—European’s open, regulation-driven system or the US’s private, network-controlled system—becomes more dominant in global AI commerce.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Reforms Reshape Payment and AI Frameworks
The European Union’s approach to AI and payments is characterized by a deliberate, regulatory-driven process. The PSD3 and PSR reforms, announced in late 2025, aim to overhaul the payment infrastructure with mandates for API parity and open access, aligning with broader goals of open finance. Concurrently, the AI Act, also scheduled for 2026, introduces high-risk classifications for AI systems involved in financial decision-making, requiring compliance assessments and oversight.
This dual reform effort is part of Europe’s broader strategy to build a resilient, transparent, and open digital economy. Unlike the US, where private firms control the rails and extend capabilities by decision, Europe’s statutory approach involves multiple authorities and legislative processes, which inherently extend timelines but aim for a more inclusive and durable infrastructure.
“The European approach is simultaneously the harder path and the more durable one. It’s slower, but built into law, making it less susceptible to unilateral control.”
— Thorsten Meyer
AI compliance software for financial services
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in Implementation Timelines and Market Impact
While the legislative frameworks are clear, it remains uncertain how quickly the regulations will be implemented and how effectively they will integrate with existing systems. The PSD3/PSR reforms are expected to be finalized by 2028, but delays are possible, especially with the AI Act’s high-risk obligations potentially slipping into 2027. Additionally, the actual impact on market speed and innovation is still evolving, as industry players adapt to the new legal landscape.
payment regulation compliance tools Europe
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Regulatory and Market Development
The next milestones include the formal adoption of PSD3/PSR regulations, expected in mid-2026, followed by their phased implementation leading up to 2028. The AI Act’s high-risk provisions are also likely to be clarified and enforced during 2026-2027. Industry stakeholders are closely monitoring these developments to adapt their AI and payment strategies accordingly. The evolving regulatory environment will shape the competitive landscape of European agentic commerce for years to come.
high-risk AI assessment software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How will the European regulations affect AI agents’ ability to make payments?
The regulations require AI agents to operate within a statutory framework that mandates human oversight and secure authentication, which may slow deployment but ensures legal compliance and openness.
What is the main difference between the European and US approaches to agentic commerce?
Europe relies on statutory, law-based infrastructure with mandated API access and open finance, while the US depends on private, decision-driven networks controlled by a few firms.
When will these regulations be fully in effect?
The PSD3/PSR reforms are expected to be implemented by 2028, with the AI Act’s high-risk obligations possibly coming into force by 2027.
Will European regulations slow down innovation?
While the process may delay market entry, the regulations aim to create a more durable, fair, and open infrastructure, which could foster sustainable innovation in the long term.
How do these reforms impact global competitiveness?
European reforms may position the EU as a leader in secure, open AI and payment ecosystems, but the slower pace could impact early market advantage compared to the US.
Source: ThorstenMeyerAI.com