This presentation examines how agentic commerce can be designed to comply with the EU strong customer authentication requirements, including for autonomous agent-initiated transactions.
Agentic cardholder-initiated transactions can be SCA-compliant by design where the cardholder remains in session and authenticates the transaction. Autonomous agent-initiated transactions may also comply where the merchant and maximum amount are known in advance, an existing exemption applies, or the cardholder is brought back into session to complete SCA.
Further regulatory solutions may emerge, including an approach analogous to merchant-initiated transactions or a specific exemption in the revised regulatory technical standards on SCA. This is a developing area at the intersection of payments, artificial intelligence and consumer protection.