AI Agent Payments: How Mastercard Agent Pay and Visa Keep AI Shopping in Check

AI agent payments are the part of AI shopping most people worry about. After all, letting a chatbot suggest a pair of shoes is easy. However, letting it spend money while you aren’t watching is another matter. So now the two largest card networks, Mastercard and Visa, are racing to set the rules for how that works.

This guide explains how AI agent payments work in plain English, what Mastercard and Visa have built, which protections exist and which questions remain open. It is based on company announcements and reputable reporting checked in September 2026. We haven’t tested these services for this article. For the bigger picture, see our explainer on what agentic commerce is.

What are AI agent payments?

An AI agent payment is a purchase that software completes for you, within rules you agreed to. For example, you might ask an assistant to buy printer ink when the price falls below $30, or to reorder the same coffee each month.

The problem with AI agent payments is trust on both sides. First, you need to know the agent can’t overspend or buy the wrong thing. Meanwhile, the shop needs to know the agent is legitimate and not a fraudulent bot using stolen card details.

So card networks tackle this with three main tools:

• Tokens: a stand-in for your real card number that works only under set conditions.
• Controls: limits on amount, merchant type, location or the need for your approval.
• Proof of intent: a record showing what you authorized, when and under what conditions.

How Mastercard Agent Pay works

Mastercard first announced Agent Pay on April 29, 2025. It introduced what it calls Agentic Tokens, which extend the same tokenization technology used for mobile wallets and saved cards. In September 2025, Mastercard said it planned to enable all US cardholders for Agent Pay by that holiday season, with Citi and U.S. Bank cardholders among the first.

According to Fortune’s September 18, 2026 report, Mastercard then rolled out a consumer version that lets people give AI agents virtual cards. Those cards can carry spending limits, restrictions on which retailers the agent can use and requirements for your approval.

In addition, a key part is what Mastercard calls Verifiable Intent. Fortune describes it as a digital audit trail that records what you authorized and the conditions of the purchase. Mastercard has also worked with the FIDO Alliance, the group behind passkeys, on standards for confirming transaction details such as amount, merchant and product.

In September 2026, Mastercard added Agent Connect, a single integration point for merchants, AI agents and payment providers. It said more than 17 companies were exploring it, including Samsung and Trip.com, with operations starting in the US.

How Visa Intelligent Commerce works

Visa calls its system Visa Intelligent Commerce. According to Visa, it brings payment credentials, authentication and automated buying controls into AI-initiated purchases. Visa describes features such as spending limits, approval workflows and clear consumer authorization. Visa also notes that the product is still deploying, so final details may change.

Similarly, a central piece is the Trusted Agent Protocol, which Visa introduced on October 14, 2025, with Cloudflare. It uses cryptographic signatures so that a shop can tell a genuine AI agent from a malicious bot. Early partners giving feedback included Adyen, Checkout.com, Microsoft, Shopify, Stripe and Worldpay.

On December 18, 2025, Visa said partners had completed hundreds of secure, agent-initiated transactions. It also said more than 100 partners were working with it, and it predicted that millions of consumers would use AI agents to buy things by the 2026 holiday season. Later, on April 8, 2026, Visa launched Intelligent Commerce Connect, which it says works with several agent standards, including the Universal Commerce Protocol.

Mastercard vs Visa: AI agent payments compared

Both networks aim at the same goal, so their AI agent payments approaches overlap more than they differ.

	Mastercard	Visa
—	—	—
Main program	Agent Pay	Visa Intelligent Commerce
Credentials	Agentic Tokens and virtual cards	Tokenized credentials from Visa’s network
Proof of consent	Verifiable Intent audit trail	Consumer authorization and authentication
Spotting real agents	Agent registration and tokens	Trusted Agent Protocol with Cloudflare
Merchant tool	Agent Connect (September 2026)	Intelligent Commerce Connect (April 2026)
Consumer controls	Limits, retailer restrictions, approvals	Spending limits and approval workflows

In short, either network aims to keep your real card number away from the AI and to limit what the agent can do. However, what you actually see depends on your bank, your card and the AI app you use.

Other AI agent payments tools

Meanwhile, other firms are building consumer AI agent payments products on top of these networks. On September 17, 2026, Alchemy launched AgentCard with Mastercard. According to Alchemy, it gives an AI agent one-time-use Mastercard credentials, with limits on amount, merchant categories and locations. It also lets the agent prove authorization through Mastercard’s Verifiable Intent.

Commerce standards also connect to payments. For instance, Google’s Agent Payments Protocol (AP2) focuses on proving that a person approved a purchase, and it works alongside the Universal Commerce Protocol. So several layers may sit behind a single “Buy” button.

Do shoppers actually want AI agent payments?

Not yet, at least not without supervision. Fortune cited a survey of US and UK fashion shoppers in which only 7% would let AI buy without approval, even under set conditions. More than 50% said they were uncomfortable with AI making purchases for them.

Instead, the same survey found shoppers valued simpler features more. For example, 35% picked price-drop alerts and retailer comparisons as most useful, while 18% chose personalized suggestions.

That caution makes sense for AI agent payments today. After all, the tools are new, and the rules on who pays when an agent gets it wrong are still unclear.

Who is liable if an AI agent buys the wrong thing?

This is still the biggest open question. Fortune reported that Mastercard didn’t clarify who is ultimately responsible if an agent makes an unauthorized purchase outside your instructions.

Even so, that doesn’t mean you have no protection. Card purchases still carry standard dispute rights, and Fortune reported that protections for agent purchases mirror traditional card safeguards. Still, a dispute is easier when you can show exactly what you authorized, which is why audit trails such as Verifiable Intent matter.

Therefore, until rules settle, keep your own records. Save any instructions you gave the agent and check your statements closely.

How to use AI agent payments safely

If your bank or AI app offers AI agent payments, a few settings reduce the risk. These steps reflect the controls both networks describe.

1. Start with approval required for every purchase, then relax it only for small, routine buys.
2. Set a low spending limit per transaction and per month.
3. Restrict the agent to specific retailers or merchant categories where possible.
4. Use a virtual or one-time card instead of your main card details.
5. Turn on instant purchase notifications in your banking app.
6. Review and revoke agent access you no longer use.

Also, watch for fake “AI shopping assistants” that ask for your full card details. A real agent payment system shouldn’t need you to paste a card number into a chat. Our guide to AI agent scams covers the warning signs, and our explainer on Alexa’s Buy for Me feature shows how one retailer handles agent purchases.

What to watch next

Three things will decide how fast AI agent payments spread. First, watch whether banks switch on the consumer controls widely, since they decide what cardholders see. Second, watch whether regulators set clear liability rules for agent mistakes. Third, see whether the big AI assistants adopt both networks’ systems or favor one.

As one ACI Worldwide executive told Fortune, this is “a land grab for infrastructure standards”. For shoppers, the practical goal is simpler: agents that can pay without ever seeing your real card number, and only within limits you choose.

AI agent payments: FAQs

Sources

• Fortune, “Mastercard and Visa race to set AI shopping payment standards” (September 18, 2026)
• Mastercard, “Mastercard unveils new tools and collaborations to power smarter, safer agentic commerce” (September 10, 2025)
• Visa, “Visa Intelligent Commerce” (accessed September 2026)
• Mastercard, “Mastercard launches Agent Connect” (September 9, 2026)
• Visa, “Visa Introduces Trusted Agent Protocol” (October 14, 2025)
• The Fly via TipRanks, “Mastercard launches Mastercard Agent Pay” (April 29, 2025)
• Visa, “Visa and Partners Complete Secure AI Transactions, Setting the Stage for Mainstream Adoption in 2026” (December 18, 2025)
• Alchemy via PR Newswire, “Alchemy Unlocks AI Agent Purchases Anywhere Mastercard is Accepted Online via AgentCard” (September 17, 2026)
• Visa, “Visa Opens the Door to AI-Driven Shopping for Businesses Worldwide” (April 8, 2026)