European Agentic Commerce Moves From Pilots to Live Transactions

In the week of 29 June to 3 July 2026, European agentic commerce crossed from single, first-of-a-kind demonstrations to controlled live transactions, and almost all of it landed at one event: the Visa Payments Forum in Paris on 1 and 2 July. Visa and more than 30 European issuing banks said AI agents are now making real purchases at independent merchants, and a set of acquirers, processors and merchant enablers published their own proof points the same day. The through-line is that the visible work was done by the payments ecosystem, not the AI labs, and that the organizing constraint has moved from whether an agent can pay to how you identify the agent and prove which one acted.

The shift is easier to see against the prior milestones. Earlier in 2026, the European headlines were individual production payments, such as the first agentic payment completed at Money20/20 in June. This week the framing changed from a first transaction to a rollout across an issuer base. The transactions all ran on payment rails that already exist: tokenization, passkeys and issuer authorization. Every announcement assumed an agent can pay and focused instead on the authorization and trust layer: consent, authentication, and agent verification.

Visa: live transactions across more than 30 issuers

At the forum on 2 July, Visa announced the execution of live agentic commerce transactions across Europe, with AI agents browsing products, selecting items and initiating purchases at participating merchant websites within parameters set in advance by the cardholder. Visa said the transactions run through Visa Intelligent Commerce, using existing tokenization, identity verification and real-time fraud monitoring, with explicit cardholder consent and issuer oversight, in line with European regulatory requirements.

Visa named more than 30 participating issuers, among them Abanca, Alpha Bank, Bankinter, Barclays, BBVA, CaixaBank, Commerzbank, HSBC UK, ING, Klarna, Lloyds Banking Group, NatWest, Nordea and Revolut, with merchants including lastminute.com, Frasers, Cleverbridge and BrickDepot across travel, retail and e-commerce. Visa described it as the next phase of its Agentic Ready program in Europe.

The significance sits on the issuer side. A single production transaction shows a path is possible; more than 30 issuers and a set of named merchants is closer to the start of a market. The issuing bank is the party that authorizes the payment and carries the fraud liability, so when that many issuers agree to recognize and authorize agent-initiated transactions on existing rails, the binding constraint stops being the technology and becomes the commercial and governance agreement across the ecosystem. For a merchant selling online in Europe, the practical read is that accepting an agent-initiated payment is starting to look like a capability an acquirer or bank enables, rather than something the merchant builds. What it means for a given business is the subject of what agentic commerce means for your business.

Three proof points, three layers of the same stack

Alongside the Visa announcement, three partners published transactions the same day, each demonstrating a different layer.

Worldline, ING and Visa: bank authorization. Worldline and ING said they completed a live, end-to-end agent-driven payment in Europe with Visa. In the scenario, completed in Germany, a consumer set the conditions for a purchase and instructed a merchant AI agent to act within them; the agent identified the product, the consumer authenticated the intent using Visa Payment Passkeys with biometric confirmation, and ING authorized the transaction under existing Strong Customer Authentication rules. This is the same shape as the June Mastercard transaction, now completed on Visa rails, which suggests the two networks are converging on one design for Europe rather than competing on different ones. The design keeps the issuing bank in the authorization seat and keeps a verifiable record of what was authorized, by whom, and under what conditions, which for a regulated market matters more than the novelty of the agent. The mechanics of that record are covered in agent payment authorization, and the standing conditions a cardholder sets in advance are the “mandate” idea explained in AP2 mandates in practice.

Nuvei: a merchant-led execution layer. Nuvei said it completed a live proof of concept with Visa, merchant technology provider Arvato Systems and fashion brand Kings and Priests, in which a merchant’s AI agent initiated a purchase and paid inside the agent, with no hand-off to a separate checkout, settling on Visa rails across several European issuers with a tokenized credential and shopper-set spend caps and approved categories. What stood out is where the payment completed: inside the agent rather than on a merchant checkout page, which is the harder version of the problem. Nuvei used the transaction to introduce Nuvei Agentic, described as a protocol-agnostic execution layer any AI agent can call to pay, with a Protocol Compatibility Layer covering the ACP, AP2 and MCP standards, a Know Your Agent registry and agent risk scoring, targeting initial availability in the second half of 2026. Nuvei also stated its order of priority plainly: first-party agents, meaning a merchant’s own agent, now, and third-party agents when the market demands them. For a merchant, an execution layer that accepts multiple agent protocols through one integration lowers the cost of not knowing which standard wins.

Cleverbridge: merchant-side agent recognition, in B2B. Cleverbridge, a commerce partner and digital reseller for software and SaaS companies, said it is among the first merchants to enable Visa’s Trusted Agent Protocol and Agent Directory, which let it distinguish verified AI agents from unknown traffic and define how approved agents can access its platform and product information within its existing risk and control frameworks. Most agentic commerce examples so far are consumer retail; this one is a software and SaaS reseller, closer to a B2B setting. The specific work Cleverbridge described was making its catalog and checkout legible and executable by verified agents, and deciding which agents it will recognize. That decision, which agents a business trusts to transact on its platform, is becoming something merchants have to work out now rather than later.

Across the three, one detail is worth drawing out: Visa said merchant participation was enabled through its Trusted Agent Protocol and Agent Directory, with implementation support from infrastructure providers including Cloudflare and Akamai. The agent-identity signal is being pushed down into the systems that already sit in front of merchant websites, rather than bolted on as a separate product.

A regulator moving on agent identity

The private-sector work this week was about proving agents can pay. A parallel signal came from the public side. At a press conference on 26 June, China’s State Administration for Market Regulation discussed making an AI agent identity code a mandatory requirement and accelerating standards for agent auditing and transactions, and in early July the country’s cybersecurity technical committee, TC260, published a non-binding practice guide on deploying AI agents securely. Nothing here is enacted, and it is best read as signaled intent rather than a rule.

China is not alone in asking the question. The Bank of England’s 25 June consultation on next-generation retail payments raised the same issues of accountability and agent authentication, and other jurisdictions have begun to sketch national agent-identity frameworks. The payment networks are building trust into the transaction; regulators are starting to ask who the agent is and who is accountable when it acts. Those are the same problem approached from two directions, and both point at agent identity.

The pattern

Agentic commerce in Europe crossed from demonstration to controlled live transactions this week, and the visible work was done by the acquirers, processors and merchant enablers. Worldline, Nuvei and Cleverbridge each showed a different layer of the same stack: bank authorization, a merchant-led execution layer, and merchant-side agent recognition. All of it ran on payment infrastructure that already exists.

Underneath the transactions, the organizing constraint was trust. Every announcement led with consent, authentication, issuer authorization or agent verification before it described the purchase, which is the same constraint the regulators are now naming from the other side. With the payment itself largely demonstrated, the private proof points and the government standards both now point at the same frontier: agent identity and accountability. The governance and identity questions that raises for a business are the substance of risks and readiness.

What it points to

For a business that sells online in Europe, accepting agent-initiated payments is starting to look like enabling an existing capability through an acquirer, PSP or commerce platform, rather than building something new. The near-term work is commercial rather than technical: which verified agents a business is willing to recognize, and how it will prove which agent acted on a given transaction. Businesses that sell through a reseller or platform may find that readiness arrives through the partner, which makes it worth asking now whether the partner enables verified-agent recognition, on what terms, and how a dispute involving an agent-initiated purchase would be handled. The Cleverbridge example suggests B2B sellers are close behind consumer retail, not years behind it. For how to judge the timing, see when agentic commerce becomes table stakes; for the underlying mechanics, see how AI agents pay and what agentic commerce is.

FAQ

What happened with agentic commerce in Europe in early July 2026? At the Visa Payments Forum in Paris on 2 July, Visa announced live agent-initiated purchases at independent merchants across more than 30 European issuers, and Worldline and ING, Nuvei, and Cleverbridge published proof points the same day covering bank authorization, an in-agent execution layer, and merchant-side agent recognition. China’s market regulator separately signaled it may make an AI agent identity code mandatory.

Does a merchant have to build new infrastructure? Largely no. The transactions ran on existing rails (tokenization, passkeys, issuer authorization, Strong Customer Authentication). The near-term merchant work is deciding which verified agents to recognize and how to prove which agent acted.