Online shopping may be entering a new phase
Online shopping may be entering a new phase—one in which the customer does not personally complete every step of the purchase.
Mastercard reportedly plans to expand its agentic-payment capabilities through a partnership with Alchemy and its AgentCard platform. The technology can allow a consumer to authorize an artificial-intelligence agent to make an online purchase using a virtual payment credential, subject to controls such as spending limits and permitted product categories.
For merchants, this is worth watching. It is also important to separate an emerging payment channel from a new card-network mandate.
At this time, Mastercard has not announced a new merchant fee, interchange category, chargeback liability shift, underwriting requirement or deadline connected with the Alchemy rollout. Most online merchants do not need to change their checkout immediately. However, AI-initiated purchases could create new questions involving customer authorization, transaction identification, fraud screening and dispute evidence.
What Mastercard and Alchemy Are Introducing
The Wall Street Journal reported on September 17, 2026 that Mastercard planned to roll out an agentic-payment option through Alchemy during the week of September 14–20, 2026.
Alchemy’s AgentCard technology is designed to provide an AI agent with a virtual payment credential. A user can establish limits governing how much the agent may spend and what types of products it may purchase. The agent can then act within those boundaries when completing an online order.
This development follows Mastercard’s broader work on Mastercard Agent Pay, which Mastercard describes as infrastructure for secure and traceable AI-driven commerce. Mastercard says registered agents can transact using network tokens and that the system is intended to provide greater visibility into agent-led payments.
Visa and Alchemy had already announced an AgentCard integration in June 2026. Mastercard’s reported participation would make the platform accessible across a broader share of existing card accounts and move agentic commerce closer to ordinary ecommerce activity.
This Is Not a New Mastercard Merchant Rule
Merchants should be precise about what has—and has not—been announced.
The Alchemy rollout is a product implementation. It is not currently:
• A requirement that merchants accept or identify AI-agent transactions
• A new Mastercard registration program
• A new interchange qualification or guaranteed cost reduction
• A merchant liability shift for fraud or chargebacks
• A special dispute-protection program
• A new reserve, underwriting or funding standard
• A published implementation deadline for ordinary ecommerce merchants
That distinction matters. An announcement about payment technology does not automatically change a merchant’s processing agreement or the card-network rules governing disputes, authorization and fraud.
How AI-Agent Purchases May Appear to Merchants
An AI-agent purchase may still arrive at the merchant’s checkout as a familiar card-not-present transaction. Depending on how the network, issuer, gateway and processor implement the transaction, the payment could involve a virtual card number, network token or other delegated-payment credential.
The merchant may not initially receive a clear field stating that an AI agent initiated the purchase. That creates several operational questions:
• Will the gateway expose an AI-agent or delegated-authorization indicator?
• Will the transaction include a network-token assurance value?
• Will existing AVS, CVV, device and behavioral controls function normally?
• What evidence will an issuer accept if the cardholder later disputes the purchase?
• Will an AI agent’s rapid or unusual purchasing behavior trigger fraud controls or false declines?
Until the networks and processors publish more detailed implementation guidance, merchants should not assume that an agent-initiated purchase receives special chargeback protection.
Practical Steps for Ecommerce Merchants
Merchants do not need to rebuild their checkout simply because this technology is entering the market. They should, however, prepare their systems and records for a future in which a person, device and AI agent may all participate in one purchase.
Preserve better transaction evidence
Where available, retain:
• The customer’s authorization for the agent to act
• The authorized spending amount and product restrictions
• Shopping-cart contents and the final amount approved
• Order, device and session identifiers
• Network-token and virtual-credential information
• Delivery address, tracking and proof of fulfillment
• Customer communications, refunds and cancellation activity
• Any indicator identifying the agent or delegated transaction
Good documentation will matter if an issuer, processor or customer later questions whether the purchase was authorized.
Ask the gateway and processor the right questions
Merchants should ask whether their provider plans to expose AI-agent, delegated-payment, token or virtual-card indicators through the gateway, API or reporting portal. They should also determine whether those transactions require different fraud rules or dispute evidence.
Monitor approvals and fraud separately
AI agents may purchase faster and behave differently from human customers. That can create legitimate transactions that look unusual to a fraud model. Merchants should monitor approval rates, issuer declines, fraud reports, refunds and disputes before changing their screening thresholds.
Get approval before materially changing a high-risk business model
High-risk merchants should notify their processor before deliberately launching autonomous purchasing, AI-managed subscriptions or other transaction flows that materially change customer behavior. An unexplained shift in traffic, velocity, average ticket or authorization patterns can prompt a risk review even when the underlying transactions are legitimate.
What This Means for High-Risk Merchants
Agentic commerce could eventually create useful opportunities for subscription services, marketplaces, travel providers, business purchasing and automated replenishment. It could also create added scrutiny for merchants already operating in elevated-risk categories.
High-risk merchants should be especially careful about:
• AI agents purchasing age-restricted or regulated products
• Product-category controls that do not match the merchant’s actual inventory
• Recurring charges created or modified by an agent
• Rapid purchases across multiple accounts or identities
• Incomplete records showing what the consumer authorized
• Marketing that implies guaranteed availability, pricing or results
The central issue is not whether artificial intelligence participated. The issue is whether the merchant can show that a real customer authorized the activity, the transaction followed the applicable rules and the merchant delivered exactly what was promised.
How 2nd Amendment Processing Helps Merchants Prepare
At 2nd Amendment Processing, we monitor emerging payment technology through the lens that matters to merchants: What will it cost? What changes operationally? What creates risk? And what can merchants do now to protect their processing relationship?
For the Mastercard–Alchemy rollout, the immediate answer is straightforward: there is no announced merchant mandate or new fee requiring action today. The right response is preparation—not panic and not unsupported promises.
2ndAP can help merchants evaluate gateway capabilities, tokenization, card-not-present fraud controls, recurring-payment practices, chargeback documentation and processor requirements. For high-risk businesses, we also help identify when a new sales channel or checkout flow should be reviewed before launch.
AI-agent payments may become a meaningful part of ecommerce. As the networks publish additional rules governing authentication, transaction indicators, disputes, liability and pricing, 2ndAP will continue translating those changes into practical merchant guidance.
Need help reviewing your ecommerce payment setup? Contact 2nd Amendment Processing to discuss your gateway, fraud controls and processing strategy.
Sources and attribution
• The Wall Street Journal: “Mastercard Joins Visa in Rolling Out AI Bots That Can Do Your Shopping,” September 17, 2026
• Mastercard: Agent Pay
• Mastercard: Agent Pay for Machines, June 10, 2026
• Alchemy: AgentCard integration with Visa Intelligent Commerce, June 18, 2026
Editorial note: The September 17 rollout details were reported by The Wall Street Journal. At publication, Mastercard had not posted a corresponding public announcement identifying new merchant rules, fees, liability protections or implementation obligations. Network and processor requirements may change. Merchants should confirm current requirements with their acquiring bank, processor and gateway before changing their payment flows.
Comments