What AI agent payments are — how an AI pays without seeing your card number
An AI agent payment is a purchase an AI completes on your behalf within limits you set in advance. On September 21, 2026, an AI agent in Denmark booked a coffee tasting and paid for it with a Danske Bank Mastercard, the country's first such payment. The key is that the AI never sees the card number. Mastercard's Agent Pay issues a stand-in number, an agentic token, that is tied both to that specific agent and to the consumer's consent rules, and payment passkeys confirm the agent is acting within its allowed scope. Similar first payments took place this year in Australia, Spain, the Netherlands and France
The three lines
- Definition — an AI finds, chooses and pays within limits, merchant categories and time windows you set; it uses an agent-specific token, not your card number
- Where — Denmark's first on September 21 (Danske Bank, Mastercard); earlier this year Australia, Spain, the Netherlands and France
- Open questions — who is liable when an agent misreads intent, and how laws written for human-initiated payments adapt
Key questions
- What is an AI agent payment
- **An AI picks a product and pays for it, but only inside boundaries you set.** | Stage | You | The AI | |---|---|---| | Enrollment | set limits, merchant types, expiry, step-up rules | — | | Request | "Book me a coffee tasting next week" | — | | Search and choose | — | finds, compares, selects | | Pay | (extra approval if over threshold) | pays with an agent-specific token | | Review | check the record | — | With one-tap payments **a person presses the button.** With agent payments nobody presses it; rules set in advance do that job.
- Is it safe to let an AI agent pay with my card
- **The AI never sees the real card number; it uses an agent-bound substitute.** | Safeguard | What it does | |---|---| | Agentic token | a stand-in credential tied to **one agent and your consent rules**; the real 16-digit number never leaves the bank | | Payment passkey | public-key authentication (FIDO2) that confirms the agent is acting within scope | | Programmable consent | limits, merchant categories, expiry and step-up thresholds, enforced by the card network at authorization | | Identification | the issuer can see that an agent, not the cardholder, started the payment | A leaked token **cannot be used by another agent or outside its rules**, and anything over the limit is declined. Still unresolved: who pays when an agent misreads what you wanted but stays within the limit.
- Which countries have AI agent payments
- **First live payments have run in at least six countries this year.** | When | Country | Bank or partner | |---|---|---| | January 2026 | Australia | Commonwealth Bank | | March 2026 | Spain | Santander | | March 2026 | South Korea | Shinhan Card (test) | | April 2026 | Netherlands | Rabobank | | June 2026 | France | Worldline, Crédit Agricole | | September 21, 2026 | Denmark | Danske Bank | Competing rails include Visa Intelligent Commerce, Stripe's agent wallets and Alipay's AI Pay. These are pilots and early launches, not mass-market services.
The trick to letting AI press the pay button is making sure it never learns your card number. On September 21, 2026, a consumer in Denmark asked an AI agent to book a coffee tasting. The agent booked it on Mastercard's Priceless experiences site and paid with a Mastercard issued by Danske Bank, the country's largest bank. It was Denmark's first payment made by an AI agent for a consumer.
1. Definition — payments inside a fence you build
An AI agent payment (agentic payment) is an AI finishing search, selection and payment within conditions a person set in advance.
| One-tap payment | Agent payment | |
|---|---|---|
| Who chooses | you | the AI |
| Who starts payment | you (button, fingerprint) | the AI |
| Your control | every purchase | once, at enrollment: limits, categories, expiry |
| What the issuer sees | a cardholder payment | an agent-initiated payment |
Mastercard launched its infrastructure, Agent Pay, in April 2025. In the Danish payment, PayOS orchestrated the path from instruction to settlement.
2. How it stays safe — tokens, passkeys, consent
| Safeguard | Role | Stops |
|---|---|---|
| Agentic token | stand-in credential bound to one agent and your consent | card-number leaks, use by other agents |
| Payment passkey | public-key proof the agent is authorized | fake agents |
| Programmable consent | limits, categories, expiry, step-up thresholds | overspending |
| Network authorization | declines anything outside the rules | out-of-scope payments |
The real 16-digit number never leaves the bank. The agent carries only a token with its own identity baked in. This is the tokenization behind phone wallets, extended to agents.
The unsolved part is intent. If you asked for a coffee tasting and the agent bought something else within your limit, the payment is technically valid. Crowdfund Insider listed three open questions: the scope of agent authority, telling user intent from agent interpretation, and liability for errors.
3. How far it has spread
| When | Country | Institution |
|---|---|---|
| January 2026 | Australia | Commonwealth Bank |
| March 2026 | Spain | Santander |
| March 2026 | South Korea | Shinhan Card (test) |
| April 2026 | Netherlands | Rabobank |
| June 2026 | France | Worldline, Crédit Agricole |
| September 21, 2026 | Denmark | Danske Bank |
Rival rails include Visa Intelligent Commerce, Stripe's agent wallets and Alipay's AI Pay. More than 30 partners joined Mastercard's Agent Pay for Machines program in June. The same week as the Danish payment, Microsoft unveiled Autopilot, an agent that works on long tasks without supervision. As agents take on more work, many of those tasks end in a payment.
4. Where regulation stands
Payment laws in most countries assume a person initiates each transaction. In South Korea, for example, card companies Shinhan and Hana are building agent-payment standards with SK Telecom, KakaoPay has completed a pilot, and the government targets a public service by December 2026, but analysts note that current electronic-finance and real-name laws limit AI-initiated financial transactions. Card networks care because who picks the payment method is changing: today the consumer picks a card; tomorrow an AI platform may pick bank transfers or other rails instead.
5. Quick answers
| Question | Answer |
|---|---|
| Can an agent spend a lot without asking? | not beyond your limit; the network declines it |
| Do I approve every purchase? | you can require approval only above a threshold |
| Can I use it today? | only in pilots and early launches |
| Who is liable for mistakes? | no standard yet |
6. What remains unconfirmed
- Country dates follow one outlet's summary.
- Liability rules for mistaken agent payments have not been published anywhere.
- Technical descriptions come from reporting, not Mastercard specifications.
Sources
- Tech Times — Mastercard and Danske Bank Complete Denmark's First AI Agent Payment on Live Card Rails
- Crowdfund Insider — Danske Bank Completes Denmark's AI Agent Payment With Mastercard
- Finextra — Danske Bank performs AI agent transaction with Mastercard
- Newspim — Card companies race to claim 'Agent Pay'
- Dailian — Google and Visa jump into AI payments; regulatory barriers in Korea