Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
AI Agents Use Card Rails But Who Verifies Permission
Apr 17, 2026 | NCFA Fintech Market Activity | Payments And Money Movement, Artificial Intelligence And Data
Payments Run On Existing Rails With New Controls
On April 16, 2026, Lobster.cash announced an integration with Mastercard Agent Pay that lets AI agents complete purchases using a person’s existing Mastercard. The change is simple on the surface. An agent can now move from decision to payment. What matters is who controls that payment.
Until now, agents could recommend, compare, and even initiate checkout, but the user still handled the final step. This integration removes that break in the flow. It doesn't introduce a new wallet or payment method. It uses the card people already have, which lowers friction and keeps the transaction inside existing issuer controls.
Let's break it down. Each layer solves a different problem, and none of them work on their own.
- Mastercard handles authorization, fraud controls, and merchant acceptance
- Lobster.cash works with Crossmint to define what the agent is allowed to do
- Base Theory protects the underlying payment data so the agent never handles raw credentials
Alfonso Gómez-Jordana Mañas, Co-Founder, Crossmint:
“They can put the card they already have to work for their agent, with the security and control they expect from Mastercard.”
The key addition isn't access to payment rails but a record of permission. Transactions use Verifiable Intent, a standards-based approach co-developed by Mastercard with Google and aligned with AP2 and UCP. It creates a record of what the user approved before the payment happens. Issuers, merchants, and platforms can check that record after the fact.
This changes the question payment systems need to answer. It's no longer only whether a transaction is valid. It's whether the user actually allowed the agent to make it. It's a different problem and requires clear rules, auditability, and a way to prove that those rules were followed.
There are early signs this is moving into real systems. Mastercard completed a live agent-driven transaction with DBS and UOB in Singapore in March 2026, and said agentic AI could handle up to 20% of e-commerce tasks in 2025, while 39% of U.S. consumers have already used generative AI for online shopping and 53% plan to do so.
See: AI Payments Challenge Consent Rules And Liability
Those numbers explain why payment networks are building now. Companies are attaching agent payments to existing card infrastructure, with new layers for permission and security.
Talking Point
Agent payments are not just about enabling transactions. They are about proving that those transactions were allowed. That keeps issuers in the transaction, gives users control over how agents act, and lets developers build without replacing the payment stack.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
Leave a Reply