The New Frontier of AI-Powered Shopping
A quiet but profound transformation is underway in digital commerce. Artificial intelligence assistants from OpenAI, Google, Perplexity, and a growing roster of technology companies are competing to become the shopping agents of choice for everyday consumers. The pitch is compelling: delegate your purchasing decisions to software, and let AI handle everything from product discovery to checkout. But beneath the excitement around these AI-driven experiences lies a critical, largely unspoken challenge — how does anyone in the payment chain know that an AI agent is actually authorized to spend your money?
The answer, increasingly, points to tokenization. And the companies controlling that infrastructure — most notably Visa and Mastercard through their token service provider networks — are quietly becoming some of the most strategically important players in the next era of commerce.
What Is Agentic Commerce and Why Does It Matter?
Agentic commerce refers to the use of AI agents — autonomous software systems — to complete commercial transactions on behalf of a human user. Rather than visiting a website, comparing prices manually, and typing in payment details, a consumer might simply instruct an AI assistant to "order more coffee" or "book the cheapest flight to Chicago next Friday," and the agent handles everything else.
This model has enormous appeal. It reduces friction, saves time, and can be personalized in ways that traditional shopping interfaces cannot match. However, it also introduces a new category of risk. When a purchase is initiated by software rather than a human, how does a merchant verify authenticity? How does a card issuer confirm that the transaction was genuinely authorized? How does the payment network ensure the integrity of the entire flow?
These are not hypothetical concerns. According to recent PYMNTS Intelligence research conducted with Worldpay, 45% of consumers say they are comfortable allowing AI agents to complete purchases on their behalf. Yet a striking 95% of those same consumers express at least one concern about agentic commerce. Half of U.S. consumers surveyed stated they would place greater trust in AI-driven purchasing if fraud protections were clearly established. Consumer interest exists, but confidence in the underlying payment infrastructure has not yet caught up.
Tokenization: From Background Process to Central Infrastructure
For most of its history, tokenization has operated invisibly. When you save a card to a digital wallet or a merchant's website, your actual card number is replaced by a token — a randomized string of characters that can be used to process a payment without exposing your real account details. Merchants appreciated tokenization primarily as a fraud-reduction mechanism. Consumers rarely thought about it at all.
Agentic commerce is changing that calculus entirely. In a world where AI agents initiate transactions without any direct human interaction at the point of sale, the token is no longer just a safer stand-in for a card number. It becomes the primary mechanism for establishing identity and authorization across a chain of parties who may never directly interact with one another.
Think of it this way: when an AI agent attempts to complete a purchase, the merchant needs to know the agent is authorized. The card issuer needs to confirm the transaction aligns with the cardholder's intentions. The payment network needs to validate that the credentials being used are legitimate and have not been compromised. A well-structured token, issued and managed by a trusted token service provider, can carry all of that contextual information in a standardized, verifiable way.
The Strategic Role of Token Service Providers
Token service providers, or TSPs, sit at the heart of this emerging architecture. Visa and Mastercard have operated as the dominant TSPs in the payments ecosystem for years, issuing and managing the tokens that flow through their respective networks. In the context of agentic commerce, their role is becoming significantly more complex and more consequential.
A TSP doesn't simply replace a card number. It establishes a trusted credential that can be scoped to specific use cases, merchants, or transaction types. In an agentic environment, this scoping capability becomes critical. A token issued to an AI shopping agent could be configured to allow only certain categories of purchases, up to a specified spending limit, within a defined time window. If the agent attempts to step outside those boundaries, the token can be declined or flagged — all without requiring the consumer to intervene manually.
This kind of programmable, permissioned credentialing is precisely what agentic commerce requires. It transforms the token from a static security credential into a dynamic authorization layer that reflects the consumer's intent in real time.
Building Consumer Trust Through Transparent Infrastructure
The PYMNTS Intelligence data makes clear that the technology is only part of the challenge. Consumer trust must be earned and maintained, and that requires the payment industry to communicate clearly about how protections work. When half of U.S. consumers say they would feel more comfortable with agentic commerce if fraud protections were explicit, they are signaling a need for visibility — not just security, but the perception of security.
Token service providers, card networks, issuers, and merchants will all need to collaborate on how that transparency is delivered. Whether through clearer user interfaces, real-time transaction notifications, or simplified consent frameworks, the goal must be to give consumers confidence that their AI agents are acting within the boundaries they have set.
What Comes Next for AI and Payments
The infrastructure battle for agentic commerce is still in its early stages. AI companies are competing on the intelligence and usability of their agents, but the payment networks and token service providers are competing on something equally vital: the trust layer that makes those agents commercially viable in the first place.
Visa and Mastercard's investments in tokenization infrastructure position them well for this shift. As agentic commerce scales, the ability to issue, manage, and revoke tokens at the speed and volume that AI-driven transactions demand will separate capable infrastructure from insufficient ones.
For businesses, the implication is straightforward: embracing tokenized payment credentials and working with established token service providers is not simply a fraud-prevention decision. It is a strategic prerequisite for participating in the next generation of digital commerce. The AI shopping agents are coming. The tokens that authorize them are already here — and they are about to become far more powerful than anyone expected.