cs.CRSep 23, 2026

Issuer-Sovereign Agentic Payments

Authors: Dishant Sharma, Rajneesh Kaushal, Ashu Kanaujia

Organizations: Thales Group

Abstract

AI agents are beginning to make real payments. Current approaches let an agent pay by relying on a credential provider that, in the approaches deployed today, typically sits outside the cardholder's bank. The spending rules are then enforced by the card network or that provider, and not by the bank itself. This leaves the issuing bank, which carries the financial risk, with little direct control at the moment a payment happens. This paper describes Issuer-Sovereign Agentic Payments, a method that keeps that control with the issuer. The cardholder approves a spending rule once, and the bank's own authentication component records it. Later, when the agent pays a specific merchant, the bank checks the merchant against the approved rule and generates the card authentication value only if the merchant is allowed. The payment then travels the normal card rails and is validated by the issuer, with no extra dependency introduced at execution.

Explore similar work

CardsList
  1. Compliance-Aware Agentic Payments on Stablecoin Rails

    Apr 30, 2026Kenneth See, Xue Wen TanFinancial ServicesAI Agent Governance

  2. Approve What, Exactly? Effect Binding and Trusted Rendering for Agent Step-Up Authorization

    Oct 15, 2026Sai Varun Kodathala, Prashanth Pollishetty, Jaylen CargillAI Agent SecurityTool Access Control for LLM Agents