First Autonomous AI Agent Payment: CaixaBank and Visa Set New Milestone

Summary

CaixaBank in Spain, in collaboration with Visa, has successfully completed the first real-world payment transaction initiated entirely by an AI agent acting autonomously on behalf of a human cardholder. Utilizing Visa’s new credential delegation frameworks, this pilot establishes a critical benchmark for the financial agency of autonomous systems in real-world commerce.

What happened?

First Autonomous Transaction: An AI agent successfully browsed, selected, and completed a real-world purchase on behalf of a customer without manual user intervention during the transaction flow.
Visa Agentic Ready Program: The pilot was conducted under Visa’s new initiative aimed at validating the security, user control, and compliance of AI-initiated payments.
Credential Delegation & Tokenization: Instead of exposing raw card data to the AI agent, the framework uses secure, cryptographically protected digital credentials (tokens) linked to the cardholder.
Visa Payment Passkeys: To satisfy European Strong Customer Authentication (SCA) requirements, the system leverages Visa Payment Passkeys, letting users authorize transactions biometrically on their own devices.
No Infrastructure Changes: The transaction was processed seamlessly over existing merchant and payment network infrastructures, requiring no special integration or upgrades from the merchant’s end.

Why it matters

This milestone marks a shift from informational AI assistants to fully functional economic actors (“Agentic Commerce”). Allowing AI agents to perform financial transactions within user-defined constraints unlocks significant efficiency for both B2C and B2B workflows. Security protocols like tokenization and passkeys resolve the critical trust, authorization, and liability hurdles of autonomous purchasing.

Evidence

Official Announcement: Press releases and reports from CaixaBank and Visa detailing the mechanics and success of the live transaction.
Visa Infrastructure: Visa’s documentation on its Agentic Ready framework and payment credential delegation standards.

Analysis

Integrating credential delegation solves the primary roadblock for autonomous AI agents: secure access to funds. Storing static card details or raw credentials in agent databases is a massive security risk. By tokenizing credentials and introducing biometrics via Visa Payment Passkeys, financial institutions can grant agents transaction-level delegation. Since this architecture runs on existing card networks, it requires no adjustments from merchants, paving the way for rapid merchant adoption.

Practical Takeaways

Leverage Tokenization: Developers building agentic applications must avoid storing raw financial details, opting instead for delegated token frameworks like Visa’s Agentic Ready standards.
Implement Hybrid Authorization: Combine autonomous agent transaction staging with biometric user verification (SCA/Passkeys) to comply with regulations and mitigate risk.
Minimize Friction: Use payment interfaces compatible with standard checkout flows to ensure compatibility across all digital storefronts without requiring merchant-side upgrades.

Open Questions

Transaction Limits: What guidelines and default limits will banks establish for autonomous delegated payments?
Liability Frameworks: How will consumer protection and financial liability shift if an authorized agent executes an undesired purchase?