AI agents are expected to shop and pay on behalf of customers. This raises familiar questions in a new form: how does strong customer authentication work when an agent initiates the payment? Who is liable if the agent buys the wrong thing? And which APIs and permissions will banks open up to agents? Today’s rules assume that a person approves every payment themselves.
Link to my work: Studies on PSD3, PSR and the digital euro, including at Accenture, plus regular exchange with experts from banks and consultancies
Simplified view of typical processes; individual institutions and procedures may differ. Not legal or investment advice. Research as of 9 November 2026.