Payment companies are preparing for trillions of dollars in purchases in which the customer may never visit the merchant, inspect the final offer or press “buy.” Their instructions will arrive through software that has already exercised some judgement on their behalf. The merchant must decide whether to accept that judgement as permission to charge.
It is expected that agent-assisted consumer spending will fall between $3 trillion to $5 trillion by 2030, including assistance rather than exclusively autonomous purchases, an important qualification: influencing a sale and having authority to complete it are commercially different propositions (Mastercard, 2026). Set against Statista’s projection of close to $9 trillion in global retail e-commerce sales that year, the upper end would be equivalent to more than half of the market, although the forecasts use different methodologies (Statista, 2026)
That is the scale Visa, Mastercard and Ant International are designing for with their new Know-Your-Agent framework. The initiative would let card networks, wallets, marketplaces and agent platforms recognize verified AI agents across payment ecosystems while retaining their own approval and risk controls (Reuters, 2026). Well, the technical problem behind it is more fundamental than identifying legitimate bots. Existing payment infrastructure assumes that identity, intent and authorization remain closely connected. An AI agent can separate them by hours and across several systems. A customer might tell software to find the best flight below €500, after which the agent can compare options, wait for prices to change, choose a merchant, and eventually initiate payment without another human action.
The agent’s identity may be beyond doubt while its authority to make a particular purchase remains unclear. Valid payment credentials do not resolve that uncertainty. A customer may have authorized a spending limit without agreeing to the refund conditions or substitutions the agent later accepts. What matters at checkout is whether permission for the original task extends to the deal the software has actually negotiated. Google’s Agent Payments Protocol, developed with more than 60 payments and technology companies, uses cryptographically signed mandates to make that permission traceable through the transaction (Google Cloud, 2026). Mastercard’s Verifiable Intent similarly links the cardholder, the instruction given to the agent, and the resulting merchant interaction, creating evidence that can be examined later if the transaction is challenged (Mastercard, 2026).
Retailers have good reasons to distrust bots, but increasingly those bots are doing someone’s shopping. AI-driven traffic to US retail websites has increased 4,700% year-on-year, according to the company, while merchants have spent years training their security systems to reject automated traffic (Visa, 2026). Visa’s Trusted Agent Protocol gives approved agents cryptographic credentials so retailers can distinguish software representing an actual customer from scraping, fraud or hostile automation.
Customers appear less eager to delegate than the spending forecasts might suggest. Mastercard found that only 10% currently feel comfortable letting an agent complete a purchase autonomously, despite broader use of AI for discovery and recommendation (Mastercard, 2026). That leaves payment providers with a problem familiar from earlier forms of digital commerce: the transaction may be technically possible before people are willing to trust it.
Know-Your-Agent could help close that gap, but recognition will have to work alongside enforceable spending limits, records of consent and clear dispute procedures. Otherwise, participants may agree that an agent is legitimate while disagreeing over who should bear the cost of its decision.
When agents eventually mediate a third or even half of online retail spending, the decisive payments innovation may have little to do with making checkout faster. It will be making autonomous decisions auditable. The actual test will come with an ordinary customer complaint: “That isn’t what I asked it to buy.” A payment system built for agentic commerce will need a better answer than “The credentials were valid.”