On 7 September Revolut and Visa completed what they call the first AI-initiated card payment in France under real merchant conditions. Visa’s test agent, My Agent, started a purchase at Cleverbridge with a real Revolut consumer card. Authentication went through Visa Payment Passkey, the biometric layer built to satisfy EU strong customer authentication without a human typing a code or tapping a phone at checkout.
This is still a pilot inside Visa’s Agentic Ready program. Nothing new is live in the Revolut app. The point of the test was narrower: can an agent fire a real authorization on existing card rails, keep issuer controls, and still look like a consented payment under PSD2-style SCA. Visa says the transaction used the normal stack: card security, identity checks, real-time fraud monitoring.
What changes for a shop is the session in the cart. An agent will hit product data, price, stock, and checkout with a tokenized passkey payment and no person in the browser. Your settlement report will not say “customer hesitated on shipping.” It will say an authorized agent completed the buy. Refunds, chargebacks, and ad attribution need a way to tell a human order from an agent order. Dirty product feeds and vague return copy become lost sales, not just messy pages.
If you take cards in the EU or UK, ask your PSP this week whether they are in Visa Intelligent Commerce / Agentic Ready or the Mastercard equivalent, and what a passkey-authenticated agent payment looks like in reports. Do not rebuild checkout yet. Clean the catalog, make the return policy explicit, and tag agent vs human orders when the acquirer exposes the field.
Watch, then test when your PSP turns it on. The first shops that can accept an agent purchase without tripping fraud rules pick up that demand. Everyone else will log those sessions as abandoned carts.