The private sector is racing to build its own rulebook for AI agent payments before a catastrophic failure forces Congress to act. On August 4, 2026, the Secure Technology Alliance launched the Agentic Trust and Commerce Forum, a new body designed to establish standards for machine-initiated transactions in what experts project will become a $300 billion U.S. market by 2030.

The timing reflects an urgent gap in the legal and regulatory landscape. That same day, the 9th Circuit Court of Appeals issued a ruling in Amazon v. Perplexity AI that classified AI agents as browsers rather than intruders, effectively holding users liable for their agents' actions under the Computer Fraud and Abuse Act. The court's decision confirmed what many in the industry already knew: the legal system treats autonomous AI entities as extensions of the user, yet offers no guidance on how to verify whether a machine was actually authorized to make a purchase or transfer funds.

What Happens When an AI Agent Makes a Payment Without Clear Rules?

The liability vacuum is real. When an AI agent completes a transaction, there is currently no standardized way to prove the user intended it, no common language for capturing consent, and no clear process for handling disputes when no human was present at the moment of purchase. Congress, meanwhile, remains focused on stablecoin issuers through the GENIUS Act, leaving the mechanics of machine-initiated transactions largely untouched.

The Forum's mandate addresses four core questions that map directly to these gaps:

• Agent Identity: How should AI agent identity be established and verified in a transaction?
• Data Standards: What data standards and interoperability principles are required for capturing intent?
• Consumer Authorization: What constitutes valid consumer authorization for an agentic commerce transaction?
• Dispute Resolution: How are disputes and exceptions handled when no human was at the point of transaction?

These questions represent the practical reality of agentic commerce, where the current lack of a standardized framework creates openings for fraud and systemic failure. Consumer sentiment reflects this caution: only 14% of consumers currently trust AI to execute purchases without human verification.

"We need a clearer understanding of how intent is established, how consent is conveyed and who is accountable when an AI-initiated transaction goes off course. Identity and authentication will be cornerstones in that trust equation," said Itai Sela, Chair of the Secure Technology Alliance Board.

Itai Sela, Chair of the Secure Technology Alliance Board

How Is the Industry Building Trust Infrastructure for AI Payments?

Rather than waiting for legislative mandates, major payment networks are constructing the necessary infrastructure in parallel across multiple fronts:

• Behavioral Biometrics: Visa's $2.4 billion acquisition of BioCatch on August 3, 2026, positions behavioral biometrics as the primary trust layer for machine-initiated transactions, utilizing 3,000 data points per session to verify agent behavior.
• Stablecoin Settlement: Mastercard's $1.8 billion acquisition of BVNK provides the stablecoin infrastructure necessary for these transactions to settle, complementing Mastercard's earlier launch of Verifiable Intent, a cryptographic trust layer co-developed with Google.
• Protocol-Level Standards: The x402 Foundation, launched under the Linux Foundation, is facilitating protocol-fee-free stablecoin settlement and has already processed 200 million transactions, though real volume remains tiny compared to the projected $300 billion market.
• Regional Coordination: The EPAA's AI and Agentic Payments Working Group in the APAC region is prioritizing interoperability over waiting for federal oversight.

This approach mirrors the U.S. Payments Forum's successful work on the EMV migration a decade ago, which reduced card-present fraud through sustained, cross-industry collaboration. The Forum's first in-person meeting is scheduled for November 17-18, 2026, at the Best Buy corporate campus in Minneapolis, with membership open to all organizations with a stake in the ecosystem, from large language model (LLM) providers to fraud prevention firms.

"Agentic commerce is reaching a point where early decisions could have lasting consequences for the payments, identity and AI landscape. This is the moment to make sure the whole technological ecosystem gets the fundamentals right," emphasized Devon Rohrer, Managing Director of the U.S. Payments Forum.

Devon Rohrer, Managing Director of the U.S. Payments Forum

The stakes are high. If the industry-led governance framework succeeds, it could establish a stable foundation for autonomous transactions before the first catastrophic agent payment failure forces a reactive, and likely more restrictive, regulatory response from Congress. If it fails, the regulatory gap will not stay open forever, but the rules that eventually emerge may be far more burdensome than what the private sector is building today.