Introduction
With the rise of Artificial Intelligence (AI) agents in commerce, a significant shift in transaction dynamics is imminent. As predicted by American Express CEO, Stephen Squeri, the advent of AI agents transacting on behalf of consumers and businesses may well represent the most substantial change since e-commerce’s inception. There are, however, challenges that need addressing: identity verification, authorization, fraud risk, and liability. This article explores these issues and offers insight into the roles banks could play in shaping the future of AI agent identity verification. [1]
Rapid Adoption of Agentic Commerce
Major players in the industry, including Visa, Mastercard, Google, OpenAI, FIS, and PayPal, have all launched agentic commerce products or protocols recently. This rapid development attests to the speed at which the payment rails for AI agents are being constructed. The emerging protocols define how AI agents initiate and complete transactions, handling checkout mechanics, payment tokenization, and credential security. However, a critical aspect is not receiving adequate attention – agent identity verification. [2]
The Structural Gap in Agentic Commerce
One of the key challenges in today’s rapidly evolving landscape of agentic commerce is the structural gap between payment acceptance and agent identity verification. Banks and financial institutions are moving faster on the former, reminiscent of the early days of e-commerce when the industry rushed to facilitate card-not-present transactions. Fraud prevention infrastructure was left behind, leading to a surge in card-not-present fraud that cost the industry billions and took years to control. A similar scenario is brewing in the realm of agentic commerce, where the emphasis on payment protocols is superseding the importance of verifying the identity of AI agents initiating transactions. [3]
Identity Verification: The Core Problem
Current fraud detection systems rely on signals that AI agents effectively obliterate. AI agents have no traceable IP addresses or device fingerprints and lack behavioral biometrics. Operating at machine speed from cloud infrastructure, their traffic patterns can appear indistinguishable from a bot attack. This presents a significant challenge to merchants and banks trying to verify the legitimacy of an agent before a transaction begins. [4]
Potential Frameworks for Agent Identity Verification
Several frameworks for agent identity verification are currently undergoing development. Mastercard’s Agent Pay ties agents to individual cardholders through existing tokenization infrastructure. Visa’s Trusted Agent Protocol uses cryptographic signatures to let merchants verify agent legitimacy. FIS and open protocol efforts like KYAPay also propose solutions to address this issue. However, the ecosystem is highly fragmented, and no single solution will suffice. Interoperability across identity frameworks and payment protocols will be crucial, necessitating collaboration among various stakeholders. [5]
The Role of Banks in Shaping Agentic Commerce
Banks have both the most exposure and the most leverage when it comes to identity verification in agentic commerce. They authorize the transactions, bear fraud liability, and manage the cardholder relationship. Banks have a limited window to shape how agent identity verification works before rising transaction volumes force ad hoc solutions that will be harder to standardize later. There is a clear financial incentive for banks to get it right. With nearly half of online shoppers expected to delegate purchasing to AI agents by 2030[6], those that establish a reliable identity and authorization framework will have the opportunity to capture those transactions and the associated interchange revenue. Those that don’t may see that volume go to alternative payment methods and systems that have more robust agent verification.
Conclusion
The advent of agentic commerce is both a challenge and opportunity for banks and financial institutions. The key to making the most of this shift is to prioritize identity verification. Banks must take the lead in collaborating with AI companies, industry associations, and technology vendors to establish identity verification standards. By taking proactive steps now, banks can shape the future of agentic commerce and avoid the costly mistakes of the past. [7]
