EMVCo Unveils Groundbreaking Draft Framework to Secure and Standardize Card-Based Agentic AI Payments
The global payment technical organization EMVCo has officially released a draft framework aimed at establishing a secure, interoperable, and scalable foundation for card-based agentic payments. As artificial intelligence systems rapidly evolve from passive digital assistants into active participants capable of executing financial transactions on behalf of human users, the financial services ecosystem faces a monumental shift. The newly proposed framework addresses a critical vulnerability in the emerging landscape of autonomous commerce: the management of consumer intent over time. By introducing a centralized coordination model known as "Intent Services," EMVCo seeks to harmonize how financial institutions, merchants, and digital wallets verify, track, and execute AI-driven purchases without compromising security or user autonomy.
The rapid commercialization of generative artificial intelligence and autonomous software agents has fundamentally altered the digital commerce horizon. Until recently, consumer interaction with financial technology was direct and immediate—humans authenticated transactions using credentials like passwords, biometrics, or one-time passcodes at the precise moment of purchase. However, agentic commerce introduces asynchronous workflows. An AI agent might be tasked with monitoring inventory, negotiating prices, optimizing utility bills, or executing recurring subscription renewals across days, weeks, or months.
This asynchronous nature creates profound structural challenges, chief among them being the lifecycle management of consumer authorization. When an AI agent initiates a transaction hours or days after receiving initial instructions, merchants and issuers must have absolute confidence that the underlying authorization remains valid, that spending caps have not been exceeded, and that the consumer’s original intent has not been revoked or altered. Existing payment protocols, designed primarily for immediate, human-in-the-loop interactions, struggle to maintain a continuous, verifiable chain of custody for intent.
EMVCo’s proposed framework directly tackles this complexity by introducing the concept of a shared intent "state." In scenarios involving cumulative budgets, subscription models, or multi-step post-transaction activities, multiple ecosystem participants need a consistent, real-time mechanism to evaluate what the consumer authorized, how much of that authorization has already been consumed, and whether the permission remains active.
At the heart of this architecture lies "Intent Services." Rather than forcing every payment network or merchant to build proprietary solutions for tracking AI authorization, EMVCo’s framework establishes a standardized, neutral layer. This layer enables authorized participants to register, retrieve, reference, and update consumer-authorized intent seamlessly before, during, and after a transaction occurs.
Crucially, the framework is designed to complement existing cryptographic verification tools rather than replace them. While advanced cryptographic methodologies—such as Verifiable Intent protocols—can mathematically prove that a consumer initially granted an agent permission to act, they often lack a mechanism for managing the dynamic evolution of that permission over time. EMVCo’s Intent Services bridge this gap by offering a common coordination point. The draft outlines specific ecosystem roles, standardized data fields for intent registration, robust lifecycle and state management protocols, and strict access controls allowing only authorized parties to retrieve intent-related data.
The initiative is being spearheaded by EMVCo’s dedicated Agentic Payments Task Force. Recognizing that the standardization of agentic commerce cannot be achieved in a vacuum, EMVCo is actively collaborating with a broad coalition of prominent industry standards organizations, including the FIDO Alliance, the OpenID Foundation, the OpenWallet Foundation, and the World Wide Web Consortium (W3C). This cross-industry cooperation is vital to ensuring that payment protocols align with broader digital identity, authentication, and web standards.
Industry leadership has underscored the necessity of this collaborative approach. "Card-based agentic payments require a globally interoperable foundation that consumers, merchants and issuers all trust," said EMVCo Executive Committee Chair Junya Tanaka. "This publication marks an important step forward by outlining a consistent approach for establishing and communicating intent alongside payment-related information, and we encourage participants from across the industry to share their feedback to shape its ongoing development."
The release of the draft framework is part of a deliberate, phased chronology designed to gather rigorous industry feedback before final specifications are codified. EMVCo opened the formal comment period following the publication of the draft, establishing a strict deadline of Wednesday, September 30, for stakeholders, EMVCo Associates, Subscribers, and broader financial technology participants to submit their critiques, suggestions, and technical modifications.
Following the close of the comment period, the Agentic Payments Task Force will review submissions and refine the specifications. Looking further ahead, EMVCo anticipates that establishing this common baseline for card-based agentic payments will pave the way for strategic enhancements across its entire suite of established payment technologies. Potential integration targets include EMV 3-D Secure (3DS) for enhanced authentication, EMV Payment Tokenization for data security, EMV Secure Remote Commerce (SRC) for streamlined checkouts, and the EMV Digital Payment Credential (DPC).
Furthermore, EMVCo is already evaluating advanced capabilities for subsequent iterations of the framework. Among these are "Know Your Agent" (KYA) protocols and specialized "Agentic Transaction Indicators." KYA standards could function similarly to traditional Know Your Customer (KYC) regulations, enabling payment networks and issuing banks to vet, recognize, and categorize the specific software agents operating within the ecosystem. Meanwhile, Agentic Transaction Indicators would provide clear signaling throughout the payment processing chain, instantly notifying merchants and issuers whenever a transaction is being driven by an autonomous AI agent rather than a direct human consumer.
The implications of EMVCo’s draft framework extend far beyond technical standardization; they touch upon the core legal, financial, and operational structures of global commerce. As liability remains one of the most contentious topics in AI-driven commerce—specifically regarding who bears financial responsibility when an autonomous agent makes an erroneous, unauthorized, or fraudulent purchase—having a standardized, auditable trail of consumer intent is an absolute prerequisite for market adoption.
For issuing banks, the framework offers a standardized method to govern credit and debit exposure to AI agents, mitigating the risk of runaway transactions or unforeseen liabilities. For merchants, it provides clarity and security, reducing the likelihood of costly chargebacks stemming from disputed AI-driven purchases. For consumers, it establishes a safety net, ensuring that their autonomous digital assistants operate within tightly bounded, verifiable parameters.
As the September 30 comment deadline approaches, the global fintech community is closely scrutinizing the draft specifications. The ultimate success of EMVCo’s initiative will depend heavily on widespread industry consensus and adoption. If successful, the framework could serve as the foundational bedrock upon which the entire future economy of autonomous, AI-driven retail and corporate finance is built, transforming agentic payments from a theoretical frontier into a secure, scalable reality.
