Visa Just Put Payments Inside OpenAI: What the Agentic Commerce Land Grab Means for Payment Providers
TL;DR
Visa’s 6 October 2026 collaboration with OpenAI matters because it puts tokenised credentials, permission controls and fraud monitoring inside agentic commerce.
The contest is not only about which agent finds the product or which wallet completes checkout. It is about who can prove that a human authorised an agent to act, under which conditions, and who should route the resulting transaction.
That matters for issuers, acquirers, Payfacs, ISOs, POS companies and merchants because the counter, terminal and mobile wallet still matter, but the payment decision is shifting into a machine-readable policy layer before checkout appears.
Agentic commerce is real, but still early: Stripe’s Link wallet reportedly saw agentic purchases rise 38-fold in the month to late September, yet from a small base, and agentic commerce remains below 1% of US e-commerce today.
What did Visa and OpenAI actually announce?
Visa and OpenAI announced a strategic collaboration at the Visa Payments Forum in San Francisco on 6 October 2026. Visa will provide its global network, credentialing capabilities, tokenisation and security infrastructure to support payments across OpenAI experiences.
The arrangement forms part of Visa Intelligent Commerce, Visa’s broader effort to make its network available to AI agents and other machine-led commerce environments.
The proposed transaction model is permission-based. Users can establish controls such as:
Spending limits
Approved merchant categories
Required approvals
Tokenised Visa credentials
Real-time authorisation
Fraud monitoring
Visa’s Jack Forestell described AI as a force that could transform commerce “more profoundly than the internet or mobile technology ever did”. OpenAI’s Marco Mahrus similarly positioned agents as participants in purchases, payments and more complex transactions.
The immediate commercial implication is straightforward: a user may instruct an OpenAI-powered agent to complete a task, while Visa supplies the payment network and trust infrastructure underneath.
However, this is not merely a distribution deal. Visa is attempting to become part of the identity, authorisation and dispute architecture for agentic commerce.
Why is the trust layer more important than the agent?
The winning agent will not necessarily be the most intelligent one. It will be the one whose decisions can be trusted by the customer, merchant, issuer, acquirer and network.
That requires answers to three questions:
Who is the agent?
Which human authorised it?
Did the transaction stay within those permissions?
This is the emerging proof-of-intent problem.
Mastercard is developing an Agent Pay trust and intelligence layer, including a probability score that identifies whether a transaction was agent-initiated, while Mastercard and Google have open-sourced Verifiable Intent, a cryptographically tamper-resistant record of user authorisation designed to align with protocols such as Google’s Agent Payments Protocol and Universal Commerce Protocol.
These developments matter because a card authorisation response alone may not prove what happened. A transaction can be technically valid while still sit outside the user’s actual instruction, which is why the provider that can prove authority will influence routing, approval decisions, fraud controls, chargebacks and liability allocation.
Why does the merchant counter become less important?
The payment decision is moving from the point of sale to the point of policy.
At a physical terminal, a merchant can influence payment choice through branding, loyalty incentives, contactless payments, tap to pay prompts and least-cost routing options. In an e-commerce checkout, the merchant still controls much of the interface.
An agent changes that balance. It may compare products, merchants, delivery terms and payment costs before presenting the user with a recommendation, or complete a permitted purchase without another interaction.
The terminal becomes a sensor and fulfilment endpoint rather than the primary decision point.
That has direct consequences for retail payment strategy. A merchant’s payment proposition must become legible to machines, including:
Price and availability
Delivery and returns
Payment acceptance options
Cost of acceptance
Refund and dispute rules
Loyalty or rewards value
Authentication requirements
A closed loop wallet, mobile wallet adoption strategy or Google Pay acceptance programme does not disappear. These remain important payment instruments. But agentic checkout is the layer above wallets and terminals. The agent may decide whether to use a card, wallet, account-to-account rail or stablecoin settlement method based on policy and economics.
What happens to cost of acceptance, disputes and liability?
Cost of acceptance becomes a machine-readable input rather than only a merchant finance metric. An agent could compare total transaction cost, approval probability, rewards, delivery reliability and consumer protection before selecting a route, creating a new opportunity for acquirers, Payfacs and ISOs to offer machine-readable payment optimisation rather than simply a terminal or gateway.
It also creates tension. If an agent systematically selects the cheapest acceptable route, premium card propositions may lose volume, while disputes become harder because providers must prove whether the user authorised the task, whether the agent stayed within limits, whether merchant data was accurate and whether existing purchase protections apply; the first significant agent-originated chargeback cases may set the real precedent.
Why do stablecoins belong in this discussion?
Agentic commerce is not only a card-network story. It is also a treasury, settlement and reconciliation story.
Machine-native payment protocols such as x402 and Stripe/Tempo’s Machine Payment Protocol point towards automated settlement between software systems. Stablecoins are being positioned as a possible settlement layer for machine-to-machine transactions, particularly where agents need to make frequent, low-value or cross-border payments.
That matters for remittance businesses, fintechs and payment companies. The key question is not whether a stablecoin replaces Visa or Mastercard at checkout. It is whether programmable settlement sits underneath an agent’s payment decision while card networks remain one of several funding or consumer-protection options.
The operational challenge will be reconciliation: mapping a human instruction, agent session, tokenised credential, authorisation event, settlement asset, refund and accounting record into one auditable transaction history.
What should payment providers do in the next two quarters?
For fintechs and start-ups, this is a chance to build the trust and orchestration layer. For established providers, it is a warning that a strong terminal, wallet or gateway proposition may not be enough.
RivaTech Consulting’s role is advisory: payments strategy, provider selection, risk and operational readiness, growth planning and stakeholder alignment. We are not a processor, sponsor bank or Payfac. See our payments consulting and risk management services.
FAQ: What does agentic commerce mean for payment providers?
Is agentic commerce real or hype?
It is real, but the current scale should be treated carefully. Stripe Link’s reported 38-fold increase came off a small base, and agentic commerce still sits below 1% of US e-commerce today.
What does the Visa and OpenAI deal actually change?
It gives OpenAI a path to support Visa payments inside agentic experiences and gives Visa a role in tokenisation, credentialing, authorisation and fraud monitoring. It does not mean every ChatGPT interaction becomes a payment, but it does move Visa deeper into the trust layer.
Do merchants and issuers need to rebuild everything now?
No. Merchants should start with structured product data, accessible checkout and reliable APIs, while issuers should test agent indicators, delegated credentials and new dispute scenarios.
Does agentic commerce replace tap to pay, contactless payments and mobile wallets?
No. It sits above them, so an agent may still use a card in a mobile wallet, support Google Pay acceptance, enable tap to pay or complete contactless payments at a terminal.
Conclusion: The payment decision is becoming programmable
Visa’s OpenAI collaboration confirms that agentic commerce has moved from protocol announcements towards production infrastructure.
But the land grab is not really for the checkout button. It is for the trust layer that governs identity, permission, routing, authorisation and liability.
Our analyst call is clear: payment providers should prepare for machine-readable commerce now, but avoid overbuilding around today’s adoption figures. The winners will be those that can make agent activity auditable, payment economics comparable and liability understandable.
In agentic commerce, the agent may make the recommendation. The trust layer will decide who gets paid.
What should the industry watch and read next?
Whether Mastercard’s agent probability score moves beyond US testing and whether the first agent-originated chargeback cases set liability precedent
Whether the Personal Agent Protocol and UCP converge or compete, and whether OpenAI’s reported 4% agentic commerce fee changes merchant economics
How Australia’s cost-of-acceptance disclosure milestones around 30 October 2026, 30 January 2027 and 1 April 2027 interact with agent-readable pricing in retail payment strategy
Mastercard Developer Playbook on Preparing for Agentic Commerce