Visa, Mastercard, and Ant International Are Trying to Agree on What an AI Agent Is

On September 9, Ant International, Visa, and Mastercard announced they're collaborating on something called Know-Your-Agent (KYA) — a framework meant to let their separate systems for verifying AI shopping agents recognize each other's trust signals instead of each demanding its own. If you run a business that's been quietly dreading the integration work of supporting three incompatible agent-verification schemes at once, this is the first real sign that dread might be premature. It's not a finished technical standard yet, but it's a notable admission from three companies that normally compete on exactly this kind of infrastructure.

The problem it's responding to

Each company had already built its own way to answer a basic question: when a request hits a merchant's server claiming to be an AI agent acting on a real customer's behalf, is that true? Visa has the Trusted Agent Protocol, attaching a cryptographically signed identity to an agent's requests that a merchant checks against a Visa-run directory. Mastercard has Verifiable Intent, tokenizing a specific purchase so a merchant can confirm what an agent was authorized to do. Ant International, which runs Alipay and a large share of digital payments across Asia, has its own Agentic Mobile Protocol built for that ecosystem. Each does a similar job — separate real agents from bots and impersonators — but a merchant, wallet provider, or agent platform working with all three has to integrate three different schemes and duplicate the identity-vetting behind each one.

That duplication isn't hypothetical. Research cited alongside the announcement, reported by PYMNTS, found that nearly 90% of enterprises already struggle with bot management, and that outdated identity controls cost businesses roughly $100 billion a year through fraud, false declines, and abandoned transactions. Business Wire's release quotes Ant International's chief innovation officer describing a path toward sharing "richer signals — capabilities, behavior, execution performance and risk data" across the three networks, not just a one-time identity check.

What KYA actually is right now

It's worth being precise here, because "framework" is doing a lot of work in the press release. This is a collaboration to establish common principles for agent verification — not a published technical specification, and not a working interoperability layer a developer can integrate against today. It's the equivalent of getting three competitors to the table, before the harder work of agreeing on shared rails. That's a meaningfully earlier stage than shipping code, and coverage reading this as agent-commerce infrastructure "arriving" is ahead of what's actually been delivered.

Why it's worth tracking anyway

AI agents are projected to orchestrate somewhere between $3 trillion and $5 trillion of global consumer commerce by 2030, per the same announcement — a projection, not a measured outcome, worth real skepticism at that scale. But even a fraction of it arriving would make today's fragmented verification landscape untenable. A merchant deciding now whether to build against Visa's protocol, Mastercard's, Ant's, or some combination is making an infrastructure bet with real switching costs later, similar in shape to the earlier scramble around Google's AP2 and OpenAI and Stripe's Agentic Commerce Protocol covered here in July — a landscape KYA is trying to reconcile rather than add a fourth competitor to.

The part worth watching

Interoperability of trust signals is a narrower promise than it sounds. Recognizing that an agent is genuinely who it claims to be across three networks doesn't settle who's liable when a verified agent still completes a fraudulent or mistaken purchase — that's a separate negotiation about risk allocation between issuers, merchants, and agent platforms, not something shared identity signals alone resolve. The three companies do have an incentive to move fast regardless: none wants to be the holdout network that agent platforms route around because integrating with it is disproportionately harder than the alternatives. Whether "common principles" becomes an actual interoperable standard, and on what timeline, is the detail to watch for in whatever Ant, Visa, and Mastercard publish next.