Payment Radar
IDEMIA Launches AI-Agent Payment Infrastructure with Tokenization and Passkey Authentication
IDEMIA Secure Transactions has launched a payment infrastructure solution targeting card networks and issuers to facilitate AI-agent initiated purchases.
Payment RadarOriginal source: FIDO Alliance · linked publisher media; native reuse rights require confirmation 
What changed
IDEMIA Secure Transactions has launched a new payment infrastructure designed specifically for purchases initiated by artificial intelligence agents. The system introduces restricted-use payment credentials that replace traditional card or bank account numbers with a stand-in value (a token) that has no value if stolen, defined by EMVCo for cards and by ISO 20022 for account tokens. These tokens can be strictly limited by merchant, transaction amount, product category, or time window. The platform also relies on FIDO2-certified passkeys for cardholder authentication and captures digital evidence of consumer consent to streamline dispute resolution. While the solution targets card networks and issuers, the underlying mechanics directly alter how merchants accept, secure, and dispute automated transactions.
Why a business should care
This development shifts the baseline for security and fraud management in automated commerce. Merchants accepting digital payments will encounter new authentication flows and tokenized credentials that require updated checkout integrations. The preservation of consent evidence offers a tangible advantage in dispute resolution, potentially reducing chargeback friction. However, the introduction of restricted-use tokens means merchants must adapt their systems to verify agent spending limits and consent records, ensuring compliance with these new security protocols.
Who it affects
This change directly impacts merchants processing digital payments, particularly those anticipating or currently handling transactions initiated by AI shopping agents. It also affects payment processors and checkout providers who must support the new tokenized and passkey-based authentication flows.
What to consider doing
Contact your payment processor or checkout vendor this week to ask if they support restricted-use tokens and FIDO2 passkey authentication for AI-agent transactions, and request a timeline for any required integration updates.
Uncertainty and risks
There is a risk of increased friction if consent verification steps are not seamlessly integrated into the checkout experience. Merchants may face integration complexity when supporting these new authentication flows, and the long-term adoption rate by card networks remains unclear. If adoption stalls, the immediate operational impact may be minimal, but merchants should prepare for potential changes as AI-agent commerce scales.
Comments