Who Pays When the Agent Errs: Agentic Commerce Ships Without Its Dispute Layer
Card networks activated agent-initiated payments in 2026, but no rule yet decides who absorbs the loss when an AI agent buys the wrong thing. The gap lands on merchants first, then issuers, agent platforms and regulators across the US, EU and UK.
The agent-commerce story of 2026 is rails going live: Visa, Mastercard and American Express have each activated agent-initiated card payments, and EMVCo, keeper of the specifications behind card acceptance, has stood up a task force on agentic payments (Worldpay, 30/07/2026). Beneath the build-out sits an absence. Every payment system rests on one rule: who absorbs the loss when a transaction is contested. For purchases an AI agent gets wrong, that rule exists in no network rulebook, statute or consumer-law regime (CERRE, 16/07/2026). The window in which it gets written runs from this autumn's shopping season to roughly mid-2028, and the parties writing it are not legislatures. The question for sellers is what they can prove when the first agent-error dispute wave arrives.
Signal Identification
A structural gap rather than a capability shift. What is observable is narrow: live network programmes, a standards task force, one legislative discussion draft, one state regulator on the record as undecided, and consumer-law analysis finding no liability architecture. Reading these as a single missing layer that will set the pace of agentic commerce is this scan's inference; several sources argue parts of it independently.
What's Changing
The rails went live this spring. Visa's Intelligent Commerce Connect launched in April 2026; American Express followed the same month with its ACE developer kit; Mastercard's Agent Pay is already integrated into processor platforms, and the processor's own survey found 45% of consumers ready to let an agent complete a purchase (Worldpay, 30/07/2026). One consumer-law estimate puts 10% to 20% of e-commerce transactions in agent hands by 2030 (CERRE, 16/07/2026).
The dispute rule did not ship with the rails. When an agent authenticates properly, fraud liability follows existing tokenized-transaction rules; a shopper who claims the agent misunderstood an instruction is making a dispute claim, not a fraud claim, and the live protocols have no clean answer for who absorbs it (Worldpay, 30/07/2026). Regulation E assumes a transaction was either authorized or it was not. Akoya's policy head told a June panel that liability is “wide open right now and being negotiated company to company” (Fortune, 12/06/2026).
The bodies that could write the rule are at the study stage. New York's Department of Financial Services has not settled its expectations for allocating agentic transaction liability (Ashurst Perkins Coie, 28/07/2026). Senator Warner's AI AGENT Act exists only as a discussion draft released for feedback (Office of Senator Mark R. Warner, 29/06/2026), and Bank of England staff are “currently undertaking deep dives on agentic payments and agentic trading” (Bank of England, 07/07/2026).
2026: the rails shipped before the rules
Milestones as reported by Worldpay, CERRE and the Warner press office.
Disruption Pathway
Stage one runs through the 2026 holiday season: the first meaningful volume of agent-initiated orders meets dispute processes designed for human cardholders, and issuers resolve claims under rules that never contemplated a software buyer. Stage two, across 2027, is private rule-writing. EMVCo's task force and the network rulebooks are the only instruments that can allocate agent-error losses at scale, and precedents set in bilateral platform-merchant contracts harden into defaults. Stage three, from 2028, is statutory catch-up: EU and US answers arrive to find the commercial allocation already set.
Stress concentrates first on merchants, who remain merchant of record in the live protocols and absorb disputes they cannot evidence: without a logged mandate showing what the shopper authorized, an agent-error claim is close to unwinnable. Second, on issuers, whose chargeback economics assume human friendly-fraud rates, not a new excuse category of “my agent went rogue” (Worldpay, 30/07/2026). Adaptations follow at two levels: operational, as intent records and agent reputation scoring become checkout infrastructure; and contractual, as agent platforms and merchants pre-allocate the losses that network rules leave open.
Why This Matters Now
Chief financial officers, heads of payments and general counsel at consumer-facing firms hold the exposure, because the default in the live protocols leaves the seller answering for the agent's mistakes; New York's regulator expects the entity offering the product, not the software that arranged it, to answer for the outcome (Ashurst Perkins Coie, 28/07/2026). Two revisions belong in this planning cycle. Dispute architecture: whether the firm can produce, for any agent-initiated order, a record of what the customer actually authorized. And contract posture: which agent platforms the firm admits to checkout, on what indemnity terms, before network rules set the answer for it. Boards should treat the 2026 peak season as the live test of both.
Decision-action posture for this signal: Prepare — the loss-allocation rules are being written now in network rulebooks and bilateral contracts, and a firm that waits for statute will inherit terms set by others.
Counter-Argument
The strongest objection: the gap is smaller than it looks, and the machinery for closing it already exists. Fraud liability on properly authenticated agent transactions follows existing tokenized-card rules today, and American Express has attached a purchase-protection pledge to registered-agent transactions (Worldpay, 30/07/2026). Networks absorbed mail order and contactless by rulebook amendment rather than new law; on this reading agent disputes are one more amendment cycle. Volumes are also still small: ChatGPT returns specific product recommendations only 9% of the time when asked (Fortune, 12/06/2026).
The objection understates what is new. A chargeback regime prices honest disagreement between two humans; an agent adds a third party whose intent is a log file, and the rules for reading that log do not exist. On the available evidence the amendment cycle will eventually close the gap; the signal is who bears the loss in the meantime. The consumer-law analysis lands the same way: without a liability architecture, consumers have little reason to trust delegation and providers little incentive to offer it (CERRE, 16/07/2026).
Implications
This reads as durable, because dispute allocation is a default and defaults persist. The window runs from the 2026 peak season to roughly mid-2028, when network rule cycles, the EU's Digital Fairness Act (expected from the third quarter of 2026 CERRE) and any Regulation E answer settle the terms. Winners are the intermediaries selling the evidence layer, agent identity, intent records and dispute tooling, and merchants who can prove what was authorized; losers are sellers who accept agent traffic without that proof. The IMF's framing holds across scenarios: probabilistic agents meeting the deterministic requirements of payment infrastructures is the tension the whole regime has to price (IMF, 24/04/2026).
Early Indicators to Monitor
- EMVCo's agentic payments task force publishes a specification or liability rule covering agent-initiated disputes.
- A Visa or Mastercard rulebook amendment names agent transactions in its dispute-rights or chargeback reason-code sections.
- The CFPB or Federal Reserve opens rulemaking, or issues an interpretation, on Regulation E and agent-initiated transfers.
- The Digital Fairness Act proposal, due from Q3 2026, contains provisions on contract validity for agent-concluded transactions.
- A published court or arbitration ruling allocates the loss for an agent-error purchase between merchant, issuer and agent platform.
Disconfirming Signals
- Networks extend existing tokenized-transaction liability rules to agent-error disputes by routine amendment, with no new evidence requirements on merchants.
- Agent-initiated orders remain a negligible share of e-commerce through 2027, keeping dispute volumes too small to force rule-writing.
- OpenAI's retreat from Instant Checkout generalises: major platforms drop embedded checkout and revert to referral models.
- The Digital Fairness Act proposal omits agentic transactions entirely.
- Issuer purchase-protection pledges on the Amex model spread across networks and absorb agent-error losses without any dispute-rule change.
Strategic Questions
- Do we accept verified agent traffic at checkout this holiday season, or block it until dispute rules settle?
- What consent record would win us an agent-error chargeback, and whose systems produce it?
- Which agent-platform contracts should pre-allocate dispute losses before network rules do it for us?
- At what share of agent-initiated orders does dispute exposure move from the payments team to the board?
Keywords
Agentic commerce; AI shopping agents; chargebacks; dispute resolution; agent-initiated payments; Regulation E; card network rules; EMVCo; Know Your Agent; Digital Fairness Act; merchant of record; intent verification
Bibliography
Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.
- Tier 1 How Agentic AI Will Reshape Payments, IMF Notes 2026/004. International Monetary Fund (24/04/2026).
- Tier 1 Warner unveils discussion draft of the AI AGENT Act. Office of Senator Mark R. Warner (29/06/2026).
- Tier 1 Financial Stability Report, July 2026. Bank of England (07/07/2026).
- Tier 2 Agentic AI and Consumer Protection, issue paper by Christoph Busch. CERRE (16/07/2026).
- Tier 3 New York's financial regulator turns its attention to agentic commerce. Ashurst Perkins Coie (28/07/2026).
- Tier 3 AI shopping agents are coming. No one is ready for them. Fortune (12/06/2026).
- Tier 4 Agentic commerce liability is still being written. Worldpay (30/07/2026).