As Congress stalls on regulation, the payments industry initiates its own governance structure to shape AI-driven finance.
As the U.S. Congress grapples with the intricacies of AI security/">thailand-launches-new-framework-for-bitcoin-etfs-to-benefit-local-markets/">regulation in finance, the private sector is stepping up to fill the gaps. A notable initiative is the recent establishment of the Agentic Trust and Commerce Forum by the Secure Technology Alliance, aimed at navigating new frontiers in AI-initiated transactions.
The mounting complexities surrounding AI and finance cannot be overstated. With the ongoing work on the GENIUS Act, which mainly focuses on stablecoin issuers while leaving agent-payment regulations on the back burner, the industry now finds itself constructing its own regulatory roadmap. This self-regulation has become urgent in light of the recent 9th Circuit Court ruling that holds users accountable for the actions of their AI agents.
On August 4, 2026, the 9th Circuit's decision in Amazon v. Perplexity AI reshaped perceptions of liability in the context of AI transactions. The ruling classified AI agents as browsers, indicating that users are responsible for their actions under the Computer Fraud and Abuse Act. However, this classification leaves a significant legal vacuum when it comes to intent verification and authorization of machine-initiated transactions.
This ruling has opened a Pandora's box of questions about how liability should be managed in agentic commerce, where there is no cohesive framework to provide guidance. The Agentic Trust and Commerce Forum is strategically addressing these issues by focusing on four key questions:
1. How is intent determined in machine transactions? 2. In what manner is consent conveyed? 3. Who bears accountability when AI transactions deviate from expected outcomes? 4. What identity verification mechanisms can ensure trust in these interactions?
Itai Sela, Chair of the Secure Technology Alliance Board, highlighted the pressing need for clarity, stating, "A robust understanding of intent and consent is pivotal. Without these cornerstones, we risk opening the floodgates to fraud and liability issues." The Forum's initiation represents the industry's proactive stance in filling the regulatory void.
The move towards self-regulation is not unprecedented. The new Forum’s approach recalls the collaborative efforts seen a decade ago during the EMV migration, which successfully mitigated card-present fraud through industry-wide cooperation. Today, the same spirit of collaboration is evident as key players in the payments industry come together to build an effective governance structure.
Visa’s acquisition of BioCatch for $2.4 billion illustrates this direction, as behavioral biometrics will serve as a primary trust layer for machine-initiated transactions, implementing thousands of data points per session to ensure agent behavior integrity. On another front, Mastercard's $1.8 billion purchase of BVNK aims to provide essential stablecoin infrastructure, critical for the settlements of these AI-driven transactions. Furthermore, Mastercard is also enhancing its offerings with the launch of Verifiable Intent, a cryptographic trust layer co-developed with Google to address issues of authentication and verification.
At the foundational level, the x402 Foundation, under the Linux Foundation, is also pushing for protocol-fee-free stablecoin settlements. Its protocol has already processed a substantial number of transactions, yet the overall activity still lags behind the industry’s projected growth as it aims to hit a $300 billion market by 2030.
While advancements in AI-driven finance are significant, consumer sentiment reveals a more cautious outlook. Research indicates that only 14% of consumers trust AI to handle purchases autonomously. Devon Rohrer, Managing Director of the U.S. Payments Forum, noted that the industry's foray into agentic commerce could have long-lasting ramifications for payments, identity systems, and AI deployment. "Now is the time to solidify the foundational elements of this technological ecosystem to ensure stability and security moving forward," he emphasized.
The first in-person meeting of the Agentic Trust and Commerce Forum is set for November 17-18, 2026, in Minneapolis. This meeting aims to gather stakeholders from across the ecosystem, including LLM providers, fraud prevention firms, and more. The urgency of establishing a stable regulatory framework is palpable, especially given that the window for self-regulation may not remain open indefinitely.
The emerging landscape of AI-driven finance is fraught with both promise and peril. The private sector's moves towards creating its own governance structure are critical, especially as it seeks to avoid regulatory bottlenecks that could stymie innovation. However, without a coherent regulatory framework, the potential for failures, fraud, and disputes looms large.
Moving forward, the success of the Agentic Trust and Commerce Forum will depend on its ability to establish effective protocols and standards that nurture trust and accountability within this ecosystem. The industry is standing at a crossroads, where thoughtful governance and proactive measures will determine whether AI in commerce evolves harmoniously or descends into chaos.
As this sector continues to develop, the industry-led governance may either pave the way for a safer and more robust AI-driven financial landscape or could necessitate a reactive regulatory response in the wake of a catastrophic failure. Only time will tell which path will prevail.
What is the Agentic Trust and Commerce Forum?
The Forum is a new governance body established by the Secure Technology Alliance aimed at creating a regulatory framework for AI-driven financial transactions.
Why is consumer trust important in AI transactions?
Consumer trust is critical as it affects the adoption of AI in finance. A lack of trust may slow down the integration of AI technologies in commerce.
What does the 9th Circuit ruling entail for AI agents?
The ruling holds users accountable for the actions of their AI agents, categorizing them as browsers under the law, which underscores the need for clear regulations on AI usage.