Visa and Mastercard Are Betting That the Bots Buying for You Still Pay With Cards

Last Thursday in São Paulo, Visa, Mastercard and Ant International said they would build a common "Know Your Agent" framework so the AI agents that shop on a person's behalf can be verified once and accepted everywhere. The companies are careful to call it a starting point, not a product. The reason it matters is the number sitting behind it: McKinsey projects AI agents will orchestrate somewhere between $3 trillion and $5 trillion of global consumer commerce by 2030.

That last sentence is why you should care. The only two names in the announcement you can actually own are Visa and Mastercard. Ant International, the third signatory and the one whose technology raises the hardest questions for them, is a private company — spun off from Ant Group in 2024 — so there is no Ant ticker to buy. The American retail route into this story runs through the card networks, and this deal tells you something useful about how they plan to survive it.

What "register once" actually buys

The whole pitch of the interoperability framework is that an agent that registers its identity with one network does not have to register again with the others. Ant International's chief innovation officer put it plainly: if an agent registers with Ant, it does not need to re-register with Visa or Mastercard. Agents, platforms, wallets and marketplaces would all recognize the same trusted identity, while each participant keeps its own approval and fraud controls.

This is the layer that has been quietly blocking everything. Bots can already browse, compare and recommend. What stops them from actually paying is that nobody has a trustworthy way to confirm who an agent is and what it is allowed to spend. That is the barrier the three frame as the "identity wall" of agentic commerce, and this framework is their attempt to make it usable at scale instead of leaving it fragmented.

Each side brings its own prior attempt into a common tent. Visa's Trusted Agent Protocol, out since October 2025, already counts Adyen, Shopify and Stripe among a dozen partners. Mastercard answered with Verifiable Intent, an open protocol developed alongside Google. Ant contributed its Agentic Mobile Protocol, released open-source this April. The collaboration is, in effect, the three incumbent builders deciding that a single, interoperable identity standard beats three rival ones.

The tension the networks are managing

Here is where the map gets interesting, and where the card networks' motives come into focus. See, the three proposals do not sit on the same rails. Visa's and Mastercard's protocols assume cards. Ant's protocol assumes mobile wallets.

That is a genuinely different world. Ant's wallet network sits inside Alipay+, which connects more than 40 e-wallets, roughly 1.8 billion accounts and 150 million merchants — among the 4.4 billion digital-wallet users the world had in 2025. Digital wallets already handle the majority of global e-commerce value. Many of those users in Asia hold little to no plastic. Ant's protocol can settle agent-to-agent payments down to fractions of a cent, and it was built for phones, watches and car dashboards, not card readers.

So the honest read of this announcement is that the card networks are pulling a wallet-native, card-optional protocol into their own interoperable world rather than letting it grow up outside it. By agreeing that one verified agent works on every network, they keep the trust flow — and, importantly, the settlement that follows — inside their own systems instead of watching the money route around them on wallet rails.

A framework is not a toll booth

But hold that excitement in check, because the discipline of this story is separating a real development from a captured one. What was announced is a framework built on shared principles, with each participant preserving its own risk decisions. That is a governance agreement, not infrastructure that charges a toll. Nobody has licensed a monopoly on agent identity; the three are explicitly cooperating, and even the collaboration is being run through a Monetary Authority of Singapore platform rather than an exclusive club.

That difference matters for what this is worth. A concentrated, indispensable position is only valuable if whoever holds it can actually convert it into revenue. Standards-setting — even standards-setting that makes everyone safer — establishes strategic interest, not a rent contract. And the networks' real economics, when agentic commerce eventually arrives, will come from payment volume moving over their rails, not from the trust layer itself. None of that volume exists here yet.

The market seems to grasp that. The announcement produced a press release, not a repricing. Visa finished essentially flat on the news, Mastercard a touch lower, at market caps near $655 billion and $495 billion and trailing price-to-earnings ratios in the high 20s. These are expensive, well-followed businesses paid for cash flow they already have, not for hypothetical agent volume.

There is a genuine chokepoint buried in this story: no agent spends a dollar until someone verifies who it is. But the three parties just chose to make that chokepoint a shared utility rather than a private toll, which is precisely the arrangement that separates an important development from a lucrative one. The identity layer will not mint a fortune for anyone. The live question for a Visa or Mastercard holder is whether the transactions that eventually follow run over their rails — and that answer is measured in years and in actual settlement volume, not announced in a single press release.