Santander's AI-powered payment trial signals new front in regulated agentic commerce

Santander and Mastercard have piloted Europe’s first end-to-end AI-conducted payment within a regulated bank environment, heralding a new era of autonomous transactions subject to strict governance and security safeguards.

An AI program has carried out a live purchase on Santander’s payments rails in Spain, marking what Mastercard and Banco Santander describe as Europe’s first end-to-end payment executed by an AI agent within a regulated bank environment. The ...

trial, run on Mastercard’s Agent Pay infrastructure, was designed to allow an autonomous agent to complete a transaction while keeping banks and customers fully informed and able to set limits and controls.

According to Mastercard’s announcement, the pilot routed the payment through Santander’s live systems to validate that agentic transactions can operate under real-world operational and compliance requirements. The companies said the arrangement enables agents to initiate and finalise payments within predefined permissions, giving issuers and customers visibility into agent activity rather than leaving decisions solely to third‑party interfaces. Santander has said the test was conducted under strict governance and security safeguards and that further internal trials are planned, but it emphasised this is not yet a commercial launch.

The Santander experiment follows a string of earlier Agent Pay pilots that Mastercard has used to broaden the model. Mastercard ran a trial with Majid Al Futtaim in the United Arab Emirates that allowed an agent to buy cinema tickets and has staged multi‑bank, multi‑processor pilots in India to show how the architecture works across a more complex payments ecosystem. Mastercard unveiled Agent Pay in April 2025, framing it as an extension of its tokenisation technology and announcing partnerships with major AI platforms to speed integration into conversational and agentic interfaces. The company also introduced developer tools intended to make its APIs easier for assistants and agent platforms to discover and use, and said U.S. cardholders would be enabled for Agent Pay during the 2025 holiday season with a wider rollout to follow.

Industry descriptions of Agent Pay portray the platform as bringing agents into the payments flow as visible, governed participants: merchants receive authenticated orders flagged as agent‑initiated, and issuers and acquirers retain oversight of card use. Mastercard presents this as building “trust for the agentic era” by combining tokenisation with controls that aim to preserve consumer protection and data privacy across the transaction path.

Nonetheless, scaling agentic commerce from pilots to everyday use raises significant practical and regulatory questions. Analysts and payments specialists point to risks including fraud, unintended or erroneous purchases, and data‑protection challenges if agents are permitted to act on behalf of customers at scale. The pilots illustrate technical feasibility inside existing payment rails, but industry observers say wider deployment will hinge on robust authentication protocols for agents, clearer standards for permissions and liability, and likely regulatory scrutiny to ensure consumer safeguards are preserved.

The companies involved frame the work as incremental: Mastercard is expanding Agent Pay’s geographic reach and partner ecosystem, while Santander plans staged testing of additional use cases before any decision on commercial availability. According to reporting in Spain, Santander executives view the trial as a step toward greater automation in financial services but acknowledge further testing and potential regulatory adjustments are needed before agent‑led payments become commonplace.

As agentic tools move from recommendation to transaction, banks, card networks and regulators will need to align on technical standards and guardrails. The tests with Santander demonstrate a possible path for embedding agentic payments inside regulated infrastructures, but turning that blueprint into routine practice will require concerted work on security, governance and consumer protection across the industry.

Source: Noah Wire Services