Six banks propose voluntary principles for AI shopping agents to declare who they work for at payment

The commercial content of the paper is in two lines. One asks that an agent disclose how it ranks options, sponsored ones included ^[6]. The other is a finding: the authors say some providers ask consumers for their card details and then key them into websites, and some prioritise payment methods that offer less protection ^[14]. The paper's own explanation of why ranking matters is commercial. An agent may promote a product or a payment method because it gives its provider a larger cut, such as a higher commission, even when that is not the best value for the consumer ^[7].

Disclosure at the point of payment is a request for a data field. The banks want every party to a purchase to know that an agent is involved and who it is acting for ^[3]. When a provider types a card number into a checkout page, the authorisation that reaches the bank does not include that identification ^[21]. The safety principle asks that agents enter payment credentials in a secure, auditable manner, and that consumers be able to view and manage the delegations they have granted ^[8].

The dispute principle is the costliest one. The banks ask that every party take part in the dispute process and that liability sit where the risk or error was introduced ^[9]. The paper does not quantify the transfer. It says merchants fear disputes and chargebacks rising for reasons outside their control ^[15].

Enforcement is the open question. The principles are voluntary ^[4], all six co-authors are banks ^[19], and the six have invited other banks and payments firms to apply them and help build a blueprint for implementation ^[18]. Robinhood, which turned on credit card spending for AI agents in May while most finance companies were still in pilot mode, according to Cryptopolitan ^[17], is not one of the six ^[20]. Agentic commerce has moved from closed trials to live pilots and early scaling faster than formal governance, the banks said ^[16].

"Consumers are unclear if AI agents will act in their interests," the paper said ^[13]. "But for that potential to be realised, customers need to trust that they remain in control of how payments are made and that their money is safe," NatWest Chief Payments Officer Mark Brant said ^[12].

In my view transparency is the principle that gets diluted first, because it is the one that moves money: the safety and data lines cost the agent layer engineering work ^[8][10], while disclosing a commission changes who gets paid ^[7]. The other way this goes is that a large agent provider adopts an identification field because carrying the dispute cost is dearer than declaring itself, and the ranking disclosure travels with it. A named agent provider signing the ranking line, or a second paper that arrives with a field specification providers actually implement ^[4], would be evidence against me.