AI Agents Are Getting Wallets, Security Needs To Follow The Money – OpEd
Payments infrastructure is enabling AI agents to move from advisory roles to economic actors by granting them usable credentials that can authorize real transactions.
The primary near-term control challenge is managing delegated authority—scoped credentials, spending limits, counterparties, step-up approvals, and auditable logs—rather than relying solely on insight into a model’s internal objectives.
The same principle of explicit, bounded, observable, and revocable authority is recommended for defense, government, and critical-infrastructure settings as agents gain access to procurement, logistics, and other high-consequence systems.
Payments are turning agentic AI from advisers into economic actors. The near-term control problem is not what a model wants, but what its credentials allow it to authorize.
The most dramatic AI-safety scenarios begin inside the model: a system develops a dangerous objective, evades its safeguards, and somehow turns intent into action. That possibility deserves serious technical work. But a more immediate change is happening outside the model. AI agents are being given credentials that let them transact.
This year, the payments industry moved that idea from prototype toward infrastructure. Santander and Mastercard completed a live end-to-end payment executed by an AI agent in a controlled banking environment. Visa launched infrastructure for agentic commerce and later announced a partnership with OpenAI to support payments in agent-driven experiences. In June, Mastercard introduced Agent Pay for Machines, designed for software agents to make permissioned transactions at machine speed.
Visa describes agents that can book travel, reorder inventory, buy data, and purchase compute for the people and businesses they serve. Those are useful capabilities. They also change the security problem. A model that recommends a purchase offers advice. A model with a usable credential can create a financial commitment.
That distinction matters well beyond........
