Visa has moved agentic payments out of the lab: AI agents are now completing live purchases at independent merchants across Europe, backed by more than 30 issuing banks, the card network announced at its Visa Payments Forum in Paris on July 2, 2026. The most telling detail is not the banks but the infrastructure partners — Cloudflare and Akamai are helping merchants implement Visa’s Trusted Agent Protocol, which means the same edge networks that spent a decade blocking bots are now being wired to whitelist verified buying agents. Agentic commerce’s first production problem is bot detection in reverse.
The live transactions ran through Visa Intelligent Commerce, the network’s portfolio for AI-driven payments, with agents browsing products, selecting items and initiating purchases within consumer-defined limits at participating merchants including lastminute.com, Frasers, Cleverbridge and BrickDepot (Visa press release, July 2, 2026). Every transaction was authenticated with Visa Payment Passkeys, tying each agent-initiated payment to a verified user instruction and supporting issuers’ compliance with Europe’s Strong Customer Authentication (SCA) requirements. The issuer list spans incumbents and fintechs alike — Barclays, HSBC UK, BBVA, ING, Commerzbank, Nordea sit alongside Revolut and Klarna.
Spain’s CaixaBank put its own marker down the same week, completing its first AI-agent-initiated transaction on real card data and standard merchant systems under Visa’s Agentic Ready programme (CaixaBank, July 2026). For the bank — which claims Spain’s largest digital customer base at more than 12 million — the point was proving that agent-initiated payments need no new rails: tokenisation, identity verification and real-time fraud monitoring carried the transaction end to end.
“We’re now seeing AI agents buy on behalf of people directly with independent merchants,” said Mathieu Altwegg, Head of Product and Solutions for Visa in Europe. “The next step is to scale this by bringing the whole ecosystem together — from standards and infrastructure to partners and enablers — with trust built in from the start. It’s the same approach we took to scale contactless, and it’s how this next wave of commerce will take shape.” (Finextra)
The merchant-side mechanics are the genuinely new layer. Visa’s Trusted Agent Protocol (TAP) and Agent Directory give merchants a consistent signal of agent identity, letting them distinguish verified purchasing agents from unverified scraper traffic while keeping control over how agents surface products and complete checkout. Merchants integrate the signals into existing risk and policy frameworks rather than new infrastructure — which is precisely where the Cloudflare and Akamai involvement matters, since those two networks already sit in front of a large share of European merchant websites. lastminute.com CEO Alessandro Petazzi framed the merchant case bluntly: “Visa’s work on authentication and trust is what makes it possible to pilot this seriously,” noting the travel platform is “already a trusted point in that transaction chain” as AI reshapes how customers search and plan (Visa press release).
The competitive and regulatory context makes the timing significant. Mastercard has been building its rival Agent Pay framework since April 2025, so Visa reaching live, multi-issuer, multi-merchant production in Europe first is a land-grab for the standards layer — the network that defines agent identity wins the routing default, much as contactless standards did. It also lands in a sector already re-tooling for agents at the account level: Backbase’s acquisition of Kasisto put agentic AI inside core banking, while payment service providers court platform-scale flows — see Microsoft’s EMEA payments deal with Checkout.com — and infrastructure players such as Marqeta extend money-movement rails across 30 European markets. Visa is betting the agent layer consolidates on card rails before account-to-account alternatives can stand up an equivalent trust framework.
What happens next: Visa says the model extends to commercial and B2B payments, where agent-initiated purchasing maps naturally onto procurement. The nearer-term test is European scale — 30 issuers is a pilot cohort, not coverage, and SCA-compliant passkey enrolment has to reach ordinary cardholders before agent checkout is more than a demo. Watch whether Mastercard’s first live European merchant transactions follow within the quarter, and whether EU supervisors treat agent-initiated payments as a new authentication category or fold them into the existing SCA exemption regime. If passkey enrolment tracks the contactless adoption curve Altwegg invokes, agent-initiated card spend becomes a reportable line item in issuer earnings by 2027.
This article is informational analysis only and is not financial, investment, or trading advice. Fintech markets and company valuations can change rapidly. Do your own research and consult a regulated financial adviser before making any investment decision.
Rick Steves
Rick Steves has seen business and economics through many lenses. He joined the financial services industry in 2009, and has been a financial journalist since 2011. He holds a degree in Business Administration and has experience producing real-time news, from both buy-side and sell-side, as well as for retail traders, brokers and service providers. Steves' work has appeared in a variety of online publications including FX Street, NewsBTC, FinanceFeeds, and The Industry Spread. Rick has great interest in the dynamics of the trading industry. The never-ending clash between technology, economics, regulation, and more importantly, the people.
