EMVCo is attempting to standardize the technical architecture required for AI agents to execute financial transactions on behalf of human consumers. By releasing a draft framework for card-based agentic payments, the technical body aims to solve the critical challenge of verifying delegated authority across a fragmented ecosystem. This move seeks to move beyond simple transaction processing toward a model where intent is managed, stored, and verified throughout a complex, automated commerce lifecycle.
Establishing Intent via Intent Services
The proposed framework introduces "Intent Services" to act as a shared, interoperable layer for the agentic commerce ecosystem. Rather than relying solely on existing cryptographic solutions like Verifiable Intent, EMVCo is positioning these services as a coordination point to help participants consistently interpret consumer-authorized intent. This architecture is designed to manage intent that persists over time, specifically addressing scenarios such as recurring purchases, cumulative budgets, and various post-transaction activities.
The draft specifications outline specific ecosystem roles and data fields necessary for registering and maintaining the lifecycle of consumer intent. By providing a mechanism to retrieve and manage this data, EMVCo aims to ensure that merchants, issuers, and AI agents can reference a consistent "state" of authorization. This structure is intended to bridge the gap between a consumer's initial command and the eventual execution of a payment by an autonomous agent.
Integrating Agentic Logic into EMV Infrastructure
EMVCo is signaling that agentic commerce will not exist in a vacuum but will instead integrate with established payment technologies. The framework is expected to inform future enhancements to EMV 3-D Secure (3DS), EMV Payment Tokenisation, EMV Secure Remote Commerce (SRC), and the EMV Digital Payment Credential (DPC). This integration suggests a strategy of layering AI-driven autonomy onto existing, highly secure card-based foundations rather than building entirely new rails.
To address the complexities of autonomous actors, EMVCo is exploring the potential inclusion of "Know Your Agent" (KYA) capabilities and "Agentic Transaction Indicators." These features would allow the payments ecosystem to identify the specific agent involved in a transaction and signal when a consumer is not the direct initiator. The organization is currently engaging with the FIDO Alliance, OpenID Foundation, OpenWallet Foundation, and W3C to ensure these developments align with broader identity and credential standards.
Key Takeaways
- EMVCo has released a draft framework for card-based agentic payments, opening it for stakeholder feedback until Wednesday, 30 September.
- The framework introduces "Intent Services" to provide a shared layer for registering, referencing, and managing consumer-authorized intent.
- Future development may include "Know Your Agent" (KYA) capabilities and Agentic Transaction Indicators to identify autonomous actors in the payment chain.
FinanceInsyte's Take
In our view, EMVCo is moving to preempt the chaos of an unregulated AI-driven payment landscape by asserting control over the "intent" layer. By proposing "Intent Services," the organization is effectively attempting to become the source of truth for delegated authority. This is a strategic pivot from securing a transaction to securing the logic behind the transaction. If successful, this framework will force financial institutions to evolve from verifying cardholders to verifying the complex, multi-step authorizations of AI agents. This shift represents a fundamental change in how risk and liability will be assigned in an era of autonomous commerce.
Questions & Answers
How does the proposed "Intent Services" layer differ from existing cryptographic solutions?
While existing solutions like Verifiable Intent provide cryptographic assurance, EMVCo’s Intent Services are designed to act as a common coordination point. This allows multiple participants to consistently interpret and manage a shared "state" of consumer intent over time, particularly for recurring or budget-constrained purchases.
What specific existing EMV technologies could be impacted by this new framework?
The framework is intended to complement and potentially drive enhancements in several core technologies, including EMV 3-D Secure (3DS), EMV Payment Tokenisation, EMV Secure Remote Commerce (SRC), and the EMV Digital Payment Credential (DPC).
What are the proposed mechanisms for identifying autonomous agents in a transaction?
EMVCo is considering the implementation of "Know Your Agent" (KYA) capabilities and "Agentic Transaction Indicators." These would serve to identify the specific agent involved and signal to the ecosystem that a transaction is being conducted by an agent acting on a consumer's behalf.
What is the timeline for the current feedback phase of this framework?
Interested stakeholders and industry participants have until Wednesday, 30 September, to provide feedback on the EMV® Agentic Payments – Framework for Specifications.
Source: Businesswire
