{"id":29004,"date":"2026-07-31T11:34:33","date_gmt":"2026-07-31T11:34:33","guid":{"rendered":"https:\/\/bilnex.io\/en\/ai-agent-payments-eu-rules\/"},"modified":"2026-07-31T11:38:02","modified_gmt":"2026-07-31T11:38:02","slug":"zasady-ue-dotyczace-platnosci-agentow-ai","status":"publish","type":"page","link":"https:\/\/bilnex.io\/pl\/zasady-ue-dotyczace-platnosci-agentow-ai\/","title":{"rendered":"Czy agent AI mo\u017ce dokonywa\u0107 p\u0142atno\u015bci dla Twojej firmy? Co tak naprawd\u0119 zezwalaj\u0105 przepisy UE w 2026 roku?"},"content":{"rendered":"<article class=\"article-content-section article-content article-single\">\n<div class=\"container content-area\">\n<div class=\"text-content ce-answer\">\n<h3 id=\"in-short-tl-dr\">In short (TL;DR)<\/h3>\n<p>Not autonomously \u2014 not today. EU payment rules (PSD2) and Strong Customer Authentication require a human to authorise a payment, and <a href=\"https:\/\/www.osborneclarke.com\/insights\/agentic-payments-new-challenge-europes-payments-ecosystem\">there is currently no mechanism for an AI agent to be treated as an equivalent payer<\/a>. What&#8217;s both legal and useful right now is a clear division of labour: the AI prepares, checks and flags; a person reviews and approves. Meanwhile the card networks are building protocols that could change the picture within a few years.<\/p>\n<h2 id=\"what-does-the-law-say-today\">What does the law say today?<\/h2>\n<p>Authorising a payment in the EU is a personal act. PSD2 and the SCA rules expect the payer (a human authenticating with at least two factors) to approve the payment order. <a href=\"https:\/\/www.taylorwessing.com\/en\/insights-and-events\/insights\/2026\/02\/agentic-ai-in-payments\">Taylor Wessing&#8217;s analysis<\/a> sums up the current state: there&#8217;s no special regime for agent-based payment models, so the ordinary rules apply.<\/p>\n<p>In practice that means three things:<\/p>\n<ul>\n<li>An AI agent can&#8217;t be the &#8220;payer&#8221; \u2014 that role belongs to a person or a mandate a person has explicitly granted.<\/li>\n<li>Standing bank mandates (direct debits, standing orders) are fine, because behind them sits a human-granted, bounded and revocable authorisation.<\/li>\n<li>Handing an AI your online-banking credentials doesn&#8217;t make its payments authorised: it breaches your bank&#8217;s terms and leaves the liability with you.<\/li>\n<\/ul>\n<h2 id=\"what-are-the-card-networks-and-tech-firms-building\">What are the card networks and tech firms building?<\/h2>\n<p>The interest is enormous because the stakes are: McKinsey estimates agentic commerce could influence $3\u20135 trillion in global commerce by 2030. In September 2025 Google announced the Agent Payments Protocol (AP2) with more than 60 collaborators, including Mastercard, PayPal, Adyen and American Express; Visa is developing its Intelligent Commerce programme. The shared idea: give an agent a cryptographically verifiable mandate with human-set limits that every party in the chain can check.<\/p>\n<p>The <a href=\"https:\/\/www.elibrary.imf.org\/view\/journals\/068\/2026\/004\/article-A001-en.xml\">IMF&#8217;s 2026 note on agentic AI in payments<\/a> is honest about the open questions: who is liable when an agent errs, how to trace an agent&#8217;s action back to a human authorisation, and what happens when thousands of agents behave the same way at once. Until those questions have answers, the human stays in the approval seat. <a href=\"https:\/\/www.finextra.com\/blogposting\/30920\/agentic-ai-in-payments-in-2026-whats-real-whats-pilot-and-whats-still-hype\">Finextra&#8217;s practitioner view<\/a> draws the same line between what&#8217;s live and what&#8217;s pilot.<\/p>\n<h2 id=\"what-division-of-labour-works-already-today\">What division of labour works already today?<\/h2>\n<p>The pattern the market calls human-in-the-loop is simple and compliant for a small business:<\/p>\n<ul>\n<li>The AI reads incoming invoices, verifies the details and matches them against orders.<\/li>\n<li>The AI drafts the payment-day list and highlights anomalies: a new bank account, a duplicate invoice, an unusual amount.<\/li>\n<li>A person reviews the list and approves the payments in the bank themselves.<\/li>\n<li>Every step leaves an audit trail, so you can always see who decided what.<\/li>\n<\/ul>\n<p>You capture the automation benefit without bending authorisation rules. We describe what this looks like across a finance workflow in <a href=\"https:\/\/bilnex.io\/agentiline-finantsjuhtimine\/\">agentic financial management<\/a> and, on the invoicing side, in <a href=\"https:\/\/bilnex.io\/en\/mcp-accounting-ai-assistant\/\">MCP for accounting AI assistants<\/a>.<\/p>\n<h2 id=\"a-checklist-before-you-delegate-anything-financial-to-ai\">A checklist before you delegate anything financial to AI<\/h2>\n<ol>\n<li>Never share online-banking credentials or authentication devices with any tool.<\/li>\n<li>Keep approval human: the AI proposes, you sign.<\/li>\n<li>Set amount limits and a dual-approval threshold, for example two approvers above \u20ac1,000.<\/li>\n<li>Demand an audit trail: what the agent did, based on what, and when.<\/li>\n<li>Verify bank-account changes through a separate channel every time; it&#8217;s also the single best defence against invoice fraud.<\/li>\n<\/ol>\n<h2 id=\"summary\">Summary<\/h2>\n<p>An AI agent can&#8217;t make payments on its own in the EU today: PSD2 requires human authorisation and no agent-specific regime exists. What you can do, and benefit from, is let AI prepare, match and flag while a person approves. That model works now, keeps liability clear, and positions you for the moment protocols like AP2 make mandated agent payments real in Europe. This is a general overview, not legal advice.<\/p>\n<p>Try Bilnex&#8217;s free invoice processing \u2014 the AI reads and prepares, you decide.<\/p>\n<h2>FAQ<\/h2>\n<h3>Can an AI agent initiate payments in the EU?<\/h3>\n<p>Not autonomously. PSD2 and Strong Customer Authentication require a human payer to authorise payment orders, and EU law currently has no mechanism for treating an AI agent as an equivalent payer. AI can prepare payments; a person must approve them.<\/p>\n<h3>What is agentic commerce?<\/h3>\n<p>A model where an AI agent finds products, compares offers, assembles the order and initiates payment within human-set limits. McKinsey estimates it could influence $3\u20135 trillion in global commerce by 2030; Google&#8217;s AP2 protocol and Visa&#8217;s Intelligent Commerce are the first large attempts to standardise it.<\/p>\n<h3>Are direct debits an example of AI payments?<\/h3>\n<p>No. A direct debit or standing order rests on a human-granted, bounded and revocable mandate registered with your bank. That&#8217;s precisely the kind of verifiable mandate the new agent-payment protocols are trying to create for AI.<\/p>\n<h3>How can a business use AI around payments today?<\/h3>\n<p>Let AI read incoming invoices, verify details, match them to orders and draft the payment-day list with anomalies highlighted \u2014 a new bank account, a duplicate, an odd amount. A person reviews and approves in the bank, keeping authorisation legal and the audit trail intact.<\/p>\n<p><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Can an AI agent initiate payments in the EU?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not autonomously. PSD2 and Strong Customer Authentication require a human payer to authorise payment orders, and EU law currently has no mechanism for treating an AI agent as an equivalent payer. AI can prepare payments; a person must approve them.\"}},{\"@type\":\"Question\",\"name\":\"What is agentic commerce?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A model where an AI agent finds products, compares offers, assembles the order and initiates payment within human-set limits. McKinsey estimates it could influence $3\u20135 trillion in global commerce by 2030; Google's AP2 protocol and Visa's Intelligent Commerce are the first large attempts to standardise it.\"}},{\"@type\":\"Question\",\"name\":\"Are direct debits an example of AI payments?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. A direct debit or standing order rests on a human-granted, bounded and revocable mandate registered with your bank. That's precisely the kind of verifiable mandate the new agent-payment protocols are trying to create for AI.\"}},{\"@type\":\"Question\",\"name\":\"How can a business use AI around payments today?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Let AI read incoming invoices, verify details, match them to orders and draft the payment-day list with anomalies highlighted \u2014 a new bank account, a duplicate, an odd amount. A person reviews and approves in the bank, keeping authorisation legal and the audit trail intact.\"}}]}<\/script><\/p>\n<\/div>\n<\/div>\n<\/article>\n<style>.ce-answer{max-width:760px;margin:0 auto;padding:8px 20px 48px;line-height:1.65}.ce-answer h2{margin:1.5em 0 .55em;line-height:1.3}.ce-answer h3{margin:1.1em 0 .45em}.ce-answer p{margin:0 0 1em}.ce-answer ul,.ce-answer ol{margin:0 0 1em;padding-left:1.4em}.ce-answer li{margin:.25em 0}.ce-answer table{border-collapse:collapse;width:100%;margin:0 0 1.2em}.ce-answer th,.ce-answer td{border:1px solid #ddd;padding:8px 10px;text-align:left}.ce-answer blockquote{border-left:3px solid #ccc;margin:1em 0;padding:6px 14px}.ce-answer sup a{text-decoration:none}.ce-answer-title{margin:.6em 0 .4em}<\/style>\n","protected":false},"excerpt":{"rendered":"<p>PSD2 wymaga autoryzacji p\u0142atno\u015bci przez cz\u0142owieka \u2014 agent AI nie mo\u017ce legalnie p\u0142aci\u0107 samodzielnie w UE. Oto, co opracowuj\u0105 Visa, Mastercard i Google i co dzia\u0142a ju\u017c dzi\u015b.<\/p>","protected":false},"author":8,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-29004","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/pages\/29004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/comments?post=29004"}],"version-history":[{"count":1,"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/pages\/29004\/revisions"}],"predecessor-version":[{"id":29065,"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/pages\/29004\/revisions\/29065"}],"wp:attachment":[{"href":"https:\/\/bilnex.io\/pl\/wp-json\/wp\/v2\/media?parent=29004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}