We all accept that agents are a new entity in consumer commerce. We get how technology (AI, MCP and aggregation) can work together to find the best product at the best price. The question for payments is different. What will agents change in payment and risk?
In June I asked Is Know Your Agent (KYA) Really Necessary? and called KYA an orphan signal. Since then the topic has moved into standards work, but only in part. EMVCo’s draft agentic framework “recognizes the emerging need for Know Your Agent capabilities” (EMVCo, “Agentic Payments: Framework for Specifications 1.0,” Draft, Aug 2026). The tools that exist define how an agent identifies itself and acts on behalf of a consumer: AP2 and Verifiable Intent carry the consumer’s credential, the delegated intent (open mandate) and the specific action (closed mandate). KYA itself is far from settled. At the Global Digital Collaboration (GDC) conference in Geneva in September, EMVCo listed Know Your Agent as future work, alongside Intent Services and use cases (EMVCo and FIDO Alliance, “Trusted Agentic Payments,” GDC 2026, Sep 3, 2026). My view has not changed.either banks (In bank owned risk), or merchants (in merchant owned risk) will control what and how the consumer permissioned. The trust in the agent is at a rules level, not a KYC like level.
Continue reading