Visa says it has moved AI agent purchases from sandbox demos to four named merchants and 30+ European issuers, but consumer protection and dispute rules are still undefined.
AI shopping agents can now complete real card purchases at independent European merchants, moving from sandbox demos to live transactions, according to Visa's announcement at its Paris Payments Forum. The change is narrow in scope but consequential in plumbing: the same network that carries a tap-to-pay can now carry a software agent's purchase, with the agent operating inside limits the cardholder set.
Until this week, the public demonstrations of agentic commerce, payments completed by AI on a shopper's behalf, ran on closed test storefronts that Visa or its partners controlled. The open question had been whether the existing card plumbing, including issuer authentication, network routing, and merchant acceptance, could carry an agent's transaction the same way it carries a person's, without bespoke workarounds. Visa's Paris announcement says yes, in Europe, with 30-plus European card-issuing banks and four named merchants: lastminute.com for travel, Frasers for retail, Cleverbridge for digital goods, and BrickDepot.
The capability sits inside Visa Intelligent Commerce, the company's portfolio of initiatives for AI-driven commerce at scale. In the flow Visa demonstrated, a cardholder authorizes the agent, sets spending rules, and lets the agent browse, select, and check out on a real merchant site rather than a sandbox. The agent operates inside what Visa calls "consumer-defined parameters," which is Visa's phrasing for the cap-and-rule settings cardholders would set in their banking app or with the issuer, rather than a defined industry standard.
The visible limits are large. Only four merchants are named. Visa has not disclosed transaction volume, success rates, average ticket, or dispute behavior. The phrase "in line with European regulatory requirements" is Visa's framing, not a regulatory approval, and the company has not said which specific jurisdictional regimes, such as PSD2, PSD3, the UK's Payment Services Regulations, or EEA equivalents, the transactions have been mapped against. The agentic-commerce lane is also one of several competing for agent-initiated checkout: card networks, wallet providers, browser-level assistants, and merchant-side agents are all building parallel paths. "Live in Europe" is a deployment claim, not a scale claim.
What the announcement does change is the surface where three unresolved questions will now actually be tested.
Who is liable when the agent buys the wrong thing? Chargeback and dispute frameworks were written for human cardholders, not for software acting on their behalf. Visa's framing implies the cardholder authorizes the agent and accepts the consequence, but the dispute path has not been described publicly.
Can merchants opt out, or flag agent traffic at the integration layer? Right now, an agent-initiated transaction looks like a normal card transaction to the merchant. If a merchant wants to refuse agent traffic, for instance because the agent is testing SKUs the merchant considers a conversion problem, there is no obvious switch.
Can cardholders actually audit the controls? "Consumer-defined parameters" is meaningful only if a cardholder can see and change them in their banking app, and if the agent's actions are auditable after the fact. The breadth claim of 30-plus issuers and four named merchants addresses scale of participation, not the consumer-side audit problem.
What to watch in the next ninety days: whether any European regulator publishes guidance on agent-initiated card payments under existing consumer-protection rules; whether any of the four named merchants publishes its own read on the experience, a sign that the lane is operational rather than staged; whether a non-Visa network, wallet, or merchant-side agent runs a comparable live transaction in the same window; and whether any of the 30-plus issuers surfaces agent controls inside its consumer app in a way a normal cardholder can find and change.
The Paris announcement is real, but narrow. The plumbing for AI shopping agents is now live in Europe's card network. The rules that decide whether consumers trust it, merchants accept it, and regulators bless it are still being written.