AI shopping agents are starting to pay for things, and banks are scrambling

AI tools that spend money for you are moving from demos to real use. In October, Visa, BILL and Billtrust started a live pilot in which AI agents pay approved business invoices. Google has also expanded AI-powered checkout to Canada. Banks are now asking who is responsible when one of these agents gets it wrong.

What changed

The Visa, BILL and Billtrust pilot lets AI agents start and complete approved invoice payments between businesses, using suppliers' payment portals. Earlier this month, Google let shoppers in Canada buy directly from eligible retailers through AI Mode in Google Search and the Gemini app. In September, Mastercard added new services to its Agent Pay platform. They help merchants and banks judge AI-initiated purchases using identity, behavior and fraud signals.

Why banks are worried

Visa's new Agentic Commerce Benchmark found that AI models failed 42.8% of simulated shopping tasks. The results show how hard it is for an AI to understand what a shopper really wants and then buy the right thing.

Security is another concern. In October, JPMorgan Chase raised concerns about outside AI agents reaching customer bank accounts, pointing to security and data privacy risks. AI tools may increasingly sit between banks and their customers, which raises the question of who controls customer data.

Stablecoin rules

In October, the US Office of the Comptroller of the Currency issued a final rule putting major parts of the GENIUS Act into effect. It sets regulatory and licensing requirements for companies that issue payment stablecoins, a type of digital currency. Banks can partner with these issuers, compete with them, or build their own digital currency systems. That choice is still open.

Who it affects

Anyone who might let an AI tool pay for things is affected, whether for a household or a company. The open questions are who controls the transaction, how payments are secured, and who is responsible when something goes wrong. The source material does not say how those questions will be answered.

What happens next

These themes are on the agenda for FinovateSpring 2027, a financial technology conference set for May 3 through 5 in San Diego. One keynote asks who is liable if there is a problem with AI-driven payments. Another panel asks who owns the banking relationship when a customer has an AI agent. Those are discussions, not rules, so the answers are still unsettled.