Visa and Mastercard Have Set New Agentic Payment Standards
New security protocols aim to limit AI agent risks as autonomous software begins performing financial transactions.
Updated on Oct. 14, 2026 in Artificial Intelligence
Live Poll
Do you trust banks to protect your finances from unauthorized actions by AI agents?
Visa and Mastercard have released new tools and security standards for agentic commerce, designed to secure AI agents performing autonomous tasks. This development addresses growing concerns from financial institutions regarding unauthorized spending by AI.
Why it matters
Financial institutions are currently grappling with the lack of clear regulatory frameworks like Reg Z and Reg E for autonomous agent liability. These standards aim to mitigate risks of noncompliant AI agents exceeding spending limits or executing unauthorized actions.
Bot tokenization is utilized to generate limited credentials that authenticate an AI agent for specific tasks within a $500 threshold. These protocols aim to improve upon the prior state of uncontrolled agent access.
The players
Visa
A global payments technology company providing digital infrastructure and security standards for financial transactions.
Mastercard
A global financial services corporation focused on payment processing and the development of secure transaction protocols.
JPMorganChase
A multinational financial services firm that has publicly identified risks in autonomous AI banking tasks.
Amazon
A technology conglomerate currently involved in a dispute with Meta regarding access to the Muse AI assistant.
Meta
A technology company developing the Muse AI assistant, currently in a dispute with Amazon over platform access.
The details
Financial institutions are implementing least privilege data access to restrict how much authority an AI agent can wield during a transaction. By using multifactor authentication and tokenization—the process of replacing sensitive card information with unique digital identifiers—these firms can authorize agents to perform limited banking tasks securely. This approach ensures that if an agent acts outside of predefined parameters, the scope of financial damage is technically contained.
Timeline
October 14, 2026: Visa released its blog post on agentic commerce security standards.
The Tech Race
The push for interoperable standards marks a shift in how financial networks compete to define the security architecture of autonomous commerce. This follows the broader struggle to reconcile existing financial regulations like Reg Z and Reg E with the realities of AI-driven spending.
Users should expect platforms to begin requiring stricter authentication and tokenization when enabling AI agents to manage their accounts. These tools are the first step toward standardizing how agents handle financial tasks securely across different payment ecosystems.
The takeaway
The race to define agentic commerce security will likely dictate which AI assistants can reliably conduct consumer payments. Monitor future industry consensus on interoperable standards to see if current liability gaps in consumer banking regulations are closed.
Further reading
For more on the challenges of securing autonomous software, see the latest updates in Artificial Intelligence.
Source note: This article includes information reported by American Banker.
Live Poll
Do you trust banks to protect your finances from unauthorized actions by AI agents?
