Mastercard shows a payment made by an AI agent instead of a human

Imagine waking up to find that your digital assistant has already bought plane tickets for your vacation, paid for a grocery delivery and renewed your cloud storage subscription, all without a single click from you. That is the future Mastercard sketched out at the India AI Impact Summit 2026, where it carried out what it called the first fully authenticated transaction in the history of "agentic commerce."

During the demonstration, reported by Times of India, a software AI agent completed the whole purchase cycle: it found the product on its own, compared options, picked the best one and paid through Mastercard's payment infrastructure. The human was involved only at the start, to set the task; the agent did everything else. The key word here is "authenticated": this is not just a concept, but a transaction that went through real security and verification protocols.

To grasp the scale, it helps to look at the context. Over the past year and a half, the world's largest technology companies, from OpenAI and Google to Anthropic and Microsoft, have been actively developing the concept of AI agents: autonomous programs that can do more than answer questions and can act in the real world. Agents already book meetings, write code and manage workflows. But one of the most sensitive areas, financial transactions, has remained practically closed to them. The reason is obvious: money demands absolute trust, and neither consumers nor regulators have yet developed that trust in autonomous programs.

Mastercard, it seems, decided not to wait for the industry to reach consensus on its own and chose to set the standard. The choice of venue is no accident: India is one of the world's largest digital payment markets, with the UPI system handling billions of transactions every month. The country is both a testing ground for fintech innovation and a market where agentic commerce could scale fastest, thanks to its huge base of mobile users and a relatively permissive regulatory climate for digital payments.

Technically, Mastercard's demonstration raises a whole set of questions that have no clear answers yet. How exactly is the agent authenticated? Classic two-factor verification involves a human: entering a password, a biometric check, confirmation by SMS. If the agent acts autonomously, it must be delegated cryptographic keys or access tokens, which creates a fundamentally new threat model. Who is liable if an agent makes an erroneous purchase or falls victim to manipulation by another AI? Existing consumer protection law simply was not designed for a situation where the buyer is a program.

There is also an economic dimension. Agentic commerce could change the entire sales funnel. If an algorithm makes the purchase decision, traditional marketing (bright banners, emotional advertising, branding) loses much of its power. An agent does not respond to attractive packaging; it optimizes for price, specifications and ratings. That could radically reshape competition in e-commerce, shifting the focus from emotional loyalty to objective product quality. For some brands this will be a disaster, for others an opportunity.

Still, mass adoption of agentic payments is a long way off. Mastercard's demonstration is more a bid for leadership in an emerging standard than a finished product. Visa, PayPal, Apple Pay and dozens of fintech companies are almost certainly working on similar solutions. The race to define the protocols of agentic commerce has already begun, and the stakes are extremely high: whoever sets the infrastructure standard will control a new layer of the digital economy.

The demonstration at the summit in India is not just a technological stunt. It is a signal that the payments industry is seriously preparing for a world in which a significant share of transactions will happen without direct human involvement. The question is no longer whether the era of agentic commerce will arrive, but who will write its rules, and how well those rules will account for the interests of those whose wallets algorithms ultimately drain.