How well do you know your agent?

For years, the payments industry rested on a simple comfort: a human thumbprint on every purchase. A tap of a card. A biometric scan. A 2FA prompt. That pattern held through contactless, digital wallets, and one-click checkout. Agentic commerce breaks it.

The human is no longer at the glass, authorizing in the moment. Authority is delegated in advance to an AI agent that can discover, decide, and attempt to transact on a consumer's behalf.

The question is no longer whether a payment can be processed. It is who, or what, is authorizing it, what that actor is allowed to do, and who is liable when something goes wrong.

That gap has a name: Know Your Agent, or KYA. And it points to a larger shift. The control point of commerce is moving away from the checkout page and toward the layer that can verify an agent, enforce what it is allowed to do, and route its transaction through the right rails. Whoever operates that layer operates agentic commerce.

Agentic commerce is already here

In 2026, agentic commerce is no longer a thought experiment confined to conference panels. AI sits inside the shopping journeys of hundreds of millions of consumers, who use general-purpose models and retailer assistants to search, compare, and narrow purchase decisions. In some cases they already let AI help at checkout.

Consumers have invited AI into the decision layer and are hesitating at the transaction layer. Nuvei's How Agents Pay research shows that 58% of consumers find AI useful for researching products and comparing prices, and 39% say they are using AI while shopping more often than they were only three months ago. Yet only 27% would feel comfortable storing payment credentials on an AI platform, and 28% would feel comfortable letting it complete a purchase automatically.

The buyer of record at checkout is now, more often, an agent acting on behalf of a person, and adoption is moving faster than the infrastructure built to govern it. McKinsey estimates that agentic commerce could drive trillions of dollars in global retail spend by 2030, which turns today's gaps in trust, liability, and standards into an urgent problem rather than a theoretical one.

Knowing your customer is no longer enough

Traditional payment systems were built for a human buyer. A person sees the transaction, recognizes it, authorizes it, and can dispute it later. Fraud controls, dispute rules, and liability frameworks were all designed around that pattern. When the buyer is an AI agent, the pattern breaks.

The control point in commerce is shifting. It is no longer the checkout page. It is the layer that can interpret an agent's intent, verify its mandate, and route the transaction through the right rails with the right controls.

That layer has to answer a different set of questions.

• Is this agent what it claims to be?
• On whose behalf is it acting?
• What has the consumer authorized, in amounts, categories, time windows, and named merchants?
• And what evidence survives a dispute when no human ever pressed pay?

Know Your Customer has been foundational in financial services for decades. It verifies the human behind the account. In an agentic world that work remains necessary, and it is no longer sufficient. The system now needs a way to verify the agent itself, its identity, its mandate, and its behavior, before it touches the payment flow. That is what KYA is for. It extends the compliance logic of KYC from humans to the non-human actors entering commerce, and it establishes an agent's identity, authority, and behavioral boundaries before the agent can initiate or complete a transaction.

Early work is underway. New protocols are starting to carry trust signals about agents, including their provenance and capabilities. The market is still defining what production-grade agent identity, mandate handling, and reputation scoring should look like, and how that information should move between AI platforms, merchants, payment providers, and issuers. Until KYA is built into the infrastructure, agentic commerce stays promising and incomplete.

When standards multiply

The identity problem would be hard enough on its own. The protocol landscape is multiplying at the same time. Several agent frameworks are emerging to define how AI agents talk to merchants, payment providers, and one another in order to discover, negotiate, and complete transactions. Each speaks a slightly different dialect. From a merchant or PSP's point of view, the picture is familiar and uncomfortable: no one wants to rebuild a payment flow five times to keep pace with the latest protocol.

What the market lacks is an execution layer that sits between agents and payment rails. One that abstracts the protocol differences, enforces mandates and limits, and translates an agent's intent into trusted, local transactions. That layer cannot be a cosmetic patch or a single line on a roadmap. It has to be operational, certified, and connected to the places where commerce already happens: gateways, acquirers, local payment methods, and issuer rails.

This is where the control point sits: at the execution layer that brings agent identity, mandate enforcement, and local routing into one place. It belongs at the PSP, gateway, and acquirer level, because that is where trust signals and money movement already meet, below the model and beneath the checkout page.

Local still wins, even for agents

The medium is new. Customer preference is not. A consumer in São Paulo who asks an AI assistant to reorder groceries still expects to pay with Pix. A voice-driven booking in Mumbai still needs UPI. A Perplexity-assisted purchase in the United States still has to work with the method the buyer prefers. Agentic commerce is global by design. Commerce stays stubbornly local at the point of payment.

If the acquiring path is wrong, the preferred method is missing, or local risk rules are ignored, the transaction fails as fast as it would for a human shopper. In agentic commerce that failure costs more, because the promise of the model is speed and delegation. When the agent cannot complete the purchase on the right rail, it does not wait. It moves to the merchant that can.

Por eso la confianza y la ejecución local van de la mano. Son el mismo problema visto desde dos perspectivas diferentes. La confianza sin ejecución no funciona, porque un agente verificado que no pueda pagar por el canal adecuado acaba perdiendo la venta. La ejecución sin confianza es peligrosa, porque una transacción que se completa sin un mandato verificado es un riesgo a la espera de salir a la luz. El comercio basado en agentes requiere que ambos aspectos se resuelvan en el mismo lugar, mediante la misma capa.

De la aceptación a la confianza

En la última era de los pagos, el reto principal era la aceptación: recibir, canalizar y liquidar pagos desde cualquier tarjeta o método, independientemente de dónde empresas una empresas . En la era de los agentes, el reto principal es la confianza. ¿Quién es responsable si el agente compra el artículo equivocado? ¿Qué pasa si se duplica una transacción? ¿Cómo se aplican los límites por usuario cuando un agente reserva un viaje para todo un equipo? ¿Cómo se manifiesta el fraude «amigable» cuando el consumidor nunca ha pulsado el botón?

Hoy en día, pocos proveedores tienen una respuesta completa. Conectarse con un agente es la parte fácil. La ventaja la tienen los proveedores que pueden verificar la confianza, garantizar la intención y llevar a cabo la transacción a través de los canales locales adecuados, todo en un mismo sitio. Un proveedor como Nuvei, que ya gestiona adquirencia local adquirencia más de 50 países, con conectividad en más de 200 y más de 720 métodos de pago, parte de los canales que el agente necesitará al otro lado de la decisión. Si a ese alcance le sumas la verificación del agente y el cumplimiento del mandato, la pregunta central del comercio cambia. Pasa de «¿podemos aceptar este pago?» a «¿podemos confiar en este agente, en este mandato y en estos canales?».

La primera etapa del comercio digital se centró en la aceptación. La siguiente etapa girará en torno a la confianza delegada. La infraestructura que se imponga no solo se limitará a mover dinero. Decidirá cuándo debe moverse y bajo la autoridad de quién.

‍