AI agents are no longer shopping in Visa’s sandbox. At its Payments Forum in Paris on 2 July, Visa announced that live agentic commerce transactions are now running across Europe, with AI agents browsing products, selecting items and paying at real merchant websites on behalf of cardholders.
The rollout spans more than 30 European issuers and a first wave of merchants including lastminute.com, Frasers, Cleverbridge and BrickDepot, across travel, retail and ecommerce. Transactions run through Visa Intelligent Commerce and are explicitly authorised by the consumer, with agents acting inside user defined limits rather than free roaming with a stored card.
The Trusted Agent Protocol makes some bots your best customers
The merchant side is the part worth reading twice. Participation runs on Visa’s Trusted Agent Protocol (TAP) and its Agent Directory, which give a merchant site a consistent signal that the automated visitor at checkout is a verified agent, not a scraper or a carding bot. Cloudflare and Akamai are embedding the protocol into the infrastructure most merchant sites already sit behind, and Visa says TAP requires no new merchant infrastructure.
“We’re now seeing AI agents buy on behalf of people directly with independent merchants,” said Mathieu Altwegg, Visa’s head of product and solutions in Europe, comparing the scaling playbook to the one that took contactless mainstream.
At a glance
- Programme
- Visa Agentic Ready, via Visa Intelligent Commerce
- Issuers on board
- 30+ across Europe
- Live merchants
- lastminute.com, Frasers, Cleverbridge, BrickDepot
- Merchant-side rails
- Trusted Agent Protocol (TAP) + Agent Directory
- Infrastructure partners
- Cloudflare, Akamai
The underwriting rulebook has not caught up
For years, merchant fraud stacks have treated all automation as hostile. TAP inverts that: some bots are now paying customers, and blocking them means declining revenue. The harder questions have not moved since Stripe put AI agents at the checkout: who is the merchant of record when an agent buys the wrong thing, and how does a dispute play out when the cardholder never saw your site? Authorisation itself stays inside Europe’s SCA rules, but underwriting policy for agent traffic is still being written.
Why it matters
Agent traffic is about to show up in your analytics. High-risk merchants should ask their acquirer two questions now: does agent initiated volume get coded differently at underwriting, and do agent disputes count against chargeback ratios the same way as cardholder ones. The networks are moving faster than the rulebook.
- Visa, “Visa and Banks Across Europe Reach the Next Phase of Agentic Commerce, Unlocking Secure Access to Merchants,” press release, 2 July 2026.