The future of agentic transactions: what changes for payments by 2030

Where things stand in October 2026

An agentic transaction is a payment an AI agent starts and completes for a person or a business, inside limits that person sets. Eighteen months ago that was a demo. By October 2026 the main pieces were in place:

• Card networks. Visa launched Intelligent Commerce in April 2025, which places a tokenised card inside an AI agent, authenticated by passkey.¹ Mastercard launched Agent Pay with "agentic tokens" the same month.⁷ In July 2026, 31 European card issuers, Barclays, HSBC UK, Lloyds Banking Group, Nationwide and NatWest among them, completed live agent payments on Visa.²
• Standards. Google published the Agent Payments Protocol (AP2) in September 2025 and gave it to the FIDO Alliance in April 2026.^{8, 9} Google and Shopify launched the Universal Commerce Protocol (UCP) in January 2026.¹⁰ OpenAI and Stripe published the Agentic Commerce Protocol in September 2025.³
• Payment companies. Stripe launched an Agentic Commerce Suite in April 2026, including single-use cards issued to agents and limits on what they can spend.¹¹
• The UK. GoCardless made the UK's first live agentic bank payment in September 2026, inside the FCA's AI testing programme.¹²

Not everything stuck. OpenAI moved its Instant Checkout out of ChatGPT in March 2026, sending shoppers to retailers' own apps and sites to pay.¹³ Daily payment volume on Coinbase's x402 protocol fell from about $800,000 in January 2026 to about $40,000 in September.¹⁴

What the forecasts say

The forecasts measure different things, so they do not line up. Read them as a range of opinion, not one number.

The gap between the last row and the others is the story of the next four years. Stripe's John Collison said in October 2026 that agentic activity had started to climb steeply from September, without giving figures.¹⁷

Seven changes on the way

1. Checkout leaves the browser

Agents do not click through a basket page. UCP, the Agentic Commerce Protocol and Shopify's agentic storefronts all let a merchant expose its products and checkout directly to agents.^{3, 10} Walmart opened an invitation-only gateway for agents in October 2026, with shopper-set caps of $50, $100 or $200.¹⁸ For merchants, the product feed an agent can read starts to matter as much as the page a person sees.

2. Cards turn into tokens issued to agents

The agent never sees a card number. Visa tokenises the card into the agent, Mastercard issues agentic tokens, and Stripe's shared payment tokens are limited to one merchant and one basket total.^{1, 3, 7} Walmart's terms go further: agents never receive card data at all.¹⁸ The more narrowly a token is scoped, the less a leak is worth.

3. Agents need an identity

A merchant has to tell a real shopping agent from a malicious bot. Visa's Trusted Agent Protocol, built with Cloudflare, has agents sign their requests so merchants can check them.¹⁹ Several rival schemes for "Know Your Agent" exist, Trulioo's Digital Agent Passport among them, and lawyers warn that competing schemes risk splitting the market.^{20, 22} Expect the major merchants to block agents that cannot prove who they are and who they act for, as Walmart already does.¹⁸

4. Authentication moves from codes to passkeys and mandates

UK and EU payment rules assume a person starts each payment and can supply a second factor, such as a fingerprint. An agent cannot.²¹ The answers emerging are passkeys, which Visa used to secure its live European agent payments, and signed mandates, which AP2 uses to record what the person asked for, what went in the basket and what was paid.^{2, 8} Version 0.2 of AP2 adds payments where the person is not present at all.⁹ Law firm Pinsent Masons describes a likely two-stage model: the person authorises the agent's limits once, then each payment is checked against them.²¹

5. Liability gets written down

Today there is no legally recognised framework for handing payment authority to an AI agent, according to a Clifford Chance roundtable in 2026, and no card network rule clearly splits the blame when an agent buys the wrong thing.²² The market is filling the gap piece by piece: American Express has announced, but not yet launched, protection for purchase errors made by registered agents.²³ Expect written rules on who pays when an agent misreads an instruction, or is tricked.

6. Fraud models get rebuilt

Fraud systems are trained to treat automated traffic as suspect. In agentic commerce the bot is the customer. Palo Alto Networks' Unit 42 has shown how hidden text on a web page can make an agent add a gift card to its basket.²⁴ Detection has to move from "is this a bot" to "is this agent acting within its mandate".

7. Machines pay machines

Some agents will pay other software directly, by the request, for data or computing. Coinbase's x402 revives the web's old "payment required" code for this, and Stripe and Tempo launched the Machine Payments Protocol in 2026.^{11, 25} Volumes are still small and, in x402's case, falling.¹⁴ This is the least proven of the seven.

What it means for the UK

The UK is moving early. The FCA said in March 2026 that it will work with the Treasury on whether payments regulation needs to change to support agentic AI payments.²⁶ In October 2026 it set out plans for a framework covering agent identity, delegated authority, accountability and execution.²⁷ Its sandbox cohort from July to December 2026 focuses on agentic payments.²⁸ And the large UK card issuers were among the first in Europe to complete live agent payments.²

What could slow it down

• Shoppers may not want it yet. OpenAI's retreat from in-chat checkout and the sub-1% order share both point that way.^{6, 13}
• Banks are wary of outside agents. Major US banks were reported in October 2026 to be blocking third-party agents from customer accounts.²⁹
• Security. The PHP2Shell flaws in October 2026 took bank and merchant websites offline in several countries, and agents depend on those same front ends. See PHP2Shell explained.
• Too many standards. Five competing protocols and several identity schemes make life hard for merchants who must support them all.²²

Our view

The infrastructure question is close to answered: the card networks, the big payment companies and UK banks have shown agent payments work. The open questions are trust and law. When a person can set a limit, see what their agent did and get their money back when it goes wrong, adoption follows. That points to 2027 and 2028 as the years the rules are written, and to the forecasts above being tested against a much smaller starting point than they assume.

This site's own domain, agentictransactions.ai, is for sale by open auction. See the live auction.