Digital Euro AI Payments: ECB Trails Live Private Agent Rails

What the ECB announced

The European Central Bank wants to find out whether software agents, not just people, could spend a future digital euro. On September 28, it invited companies, payment firms, fintechs, merchants, public institutions and researchers to apply for the next phase of its digital euro innovation platform. That phase will explore AI-agent payments, micropayments and machine-to-machine transactions 5. Applications close November 9, and selected participants start work in early 2027 5.

Participants are expected to build prototypes for e-receipts, conditional payments, multiparty transactions and new app features 5. A separate twelve-month pilot with thirty-six payment providers will also begin in 2027 5. None of this guarantees a digital euro will exist. Issuance still depends on EU legislation and a later decision by the ECB 5.

The private sector is already transacting

The central bank's timeline stands out against what card networks and tech platforms have already deployed. In late 2025 and early 2026, several competing agentic-commerce standards launched almost at once:

• Google's Agent Payments Protocol (AP2)
• Visa's Trusted Agent Protocol (TAP)
• Mastercard's Agent Pay
• The Agentic Commerce Protocol (ACP), a joint OpenAI and Stripe effort 1

These are not just research projects. In March 2026, Banco Santander and Mastercard said they had completed Europe's first live end-to-end payment executed by an AI agent on production infrastructure 2. Visa reported that hundreds of agent-initiated transactions had been completed with partners by late 2025 2.

The build-out sped up through spring 2026. Visa launched Intelligent Commerce Connect on April 8, a single integration point for merchants and agents. Its pilot partners include AWS, Highnote and Mesh, and it connects to Visa's Trusted Agent Protocol work with Anthropic, Microsoft, OpenAI and Perplexity 4. Mastercard built a trust layer called Verifiable Intent into its payment flow and says live agentic transactions are running in Latin America and ASEAN 4. American Express released a developer kit, which means all three major US networks now have dedicated agentic tooling 4. Stripe introduced an agent wallet through Link, and Mastercard has issued Agentic Tokens built for non-human buyers 3.

The commercial forecasts are large. One cited McKinsey estimate puts agent-driven consumer transactions at $3 trillion to $5 trillion globally by 2030 2. Another account says 47% of US shoppers already use AI for some shopping tasks 3. Like any forecast, these numbers should be treated cautiously. They do explain why incumbents are moving quickly.

Where security fits, and where it doesn't yet

The private systems have put a lot of effort into trust and authorization. AP2 relies on cryptographically signed "Intents," "Cart Mandates" and "Payment Mandates." In effect, the user signs bounded digital contracts that limit what an agent can buy, and the design emphasizes end-to-end auditability 1. Google later donated AP2 to the FIDO Alliance 1, which places it within an established authentication standards body. Mastercard, FIS and Visa have also partnered on "Know Your Agent" authentication for issuing banks, extending identity verification to AI-initiated purchases 4.

The ECB's published scope, as reported, focuses on use cases such as receipts, conditional logic and multiparty flows. It does not lay out a threat model for agents acting with delegated spending authority 5. The underlying problems are not new to cybersecurity. They include:

• Compromised or hijacked agents
• Prompt manipulation that redirects purchases
• Credential theft at machine speed
• Disputes over whether an agent really acted within its mandate

Private networks are already handling these issues in production through tokenization, signed mandates and agent identity checks. If a public digital euro supported agentic payments without equally explicit controls, it would be the weaker link in that environment.

To be fair, the reporting does not say the ECB has dismissed security. An innovation sandbox is usually not where safeguards are finalized, and the legislative process will likely address them. The concern is about sequencing. Security assumptions built into early prototypes tend to stay in later designs.

The reading

The private sector is moving faster and has built safeguards with it. Several overlapping standards are live, cryptographic mandate schemes have shipped, and agent-authentication partnerships cross competitor lines 134. One analysis argues the bottleneck has already shifted away from payment rails toward product data quality, because agents can only buy what they can find 4.

The ECB is trying to keep a public, sovereign option relevant in a market that is forming without it. Opening experimentation to AI agents is a sensible move. To compete credibly, though, the digital euro will need security and agent-identity standards that match or interoperate with schemes like AP2 and Verifiable Intent, rather than being added later. With work not starting until 2027 and issuance still uncertain 5, European payments may well settle on private agentic standards before a public alternative is ready.