Mastercard and Rabobank announced on April 30, 2026, that they had completed the first AI agent-initiated payment in the Netherlands - a live transaction in which an AI assistant booked a coffee tasting experience on Priceless.com using a Rabobank Mastercard credit card, without the consumer navigating to a web shop or clicking through a checkout flow.

The transaction used Mastercard Agent Pay, the payment infrastructure Mastercard introduced publicly at the National Retail Federation's annual conference on January 11, 2026. That initial launch established the broad architecture for AI-executed payments, and the Dutch pilot marks the first time the system has been used in a live consumer-facing payment in the Netherlands.

What happened in the transaction

According to the announcement from Mastercard, a consumer issued a simple text prompt to an AI assistant - the press release specifically names ChatGPT, Claude, and Perplexity as examples of the type of AI environment in question - asking the assistant to find and book an experience. The AI agent then located a coffee tasting through Priceless.com, Mastercard's platform for curated experiences, and completed the payment autonomously using the consumer's Rabobank Mastercard credit card.

Under the Agent Pay architecture, the AI agent does not gain access to the card number or other payment credentials. According to Mastercard, the agent operates exclusively within permissions granted in advance by the consumer. Purchase confirmation is secured through Mastercard Payment Passkeys, an authentication mechanism that keeps the transaction verifiable and traceable without exposing sensitive card data to the agent itself.

The significance of the sequence is technical. In the current standard flow for AI-assisted shopping, an agent can surface options and narrow choices, but the consumer must still click a link, navigate to the merchant's website, and complete payment in the conventional way. The April 30 transaction eliminated that step. The consumer set parameters, the agent acted, and the payment settled - all within the AI environment, without a redirect.

Agent Pay: how the infrastructure works

Mastercard built Agent Pay around four specific problems that arise when software, rather than a human, initiates a financial transaction. The first is identity: traditional payment systems verify cardholders using credentials like CVV codes and billing addresses. When an AI agent shops on someone's behalf, those verification mechanisms do not straightforwardly apply. Agent Pay addresses this by requiring agents themselves to register with Mastercard's network using cryptographic tokens that prove their legitimacy. Only registered agents can initiate transactions, and Mastercard network tokens create audit trails showing which agent executed which purchase.

The second problem is fragmentation. Each AI agent developer who wants to build shopping functionality currently has to create custom integrations with individual merchant platforms. Agent Pay introduces a universal data exchange protocol enabling any registered agent to communicate with any merchant that supports the standard - removing the need for one-to-one integration work.

Third is intent verification. Payment systems have historically treated the act of clicking "buy" as authorization. An AI agent that places an order in response to a broad prompt - "book me a coffee experience" - introduces ambiguity about what exactly the consumer authorized. Agent Pay's architecture is designed to make that authorization explicit rather than assumed.

The fourth is consumer consent. According to Mastercard, the consumer's permission is formally recorded before any transaction takes place, and that record remains available for audit or dispute resolution.

The use of Mastercard Payment Passkeys in this transaction connects the Dutch pilot to Mastercard's broader strategic direction toward 2030, which the company has described as centering on tokenisation as the foundation for secure and scalable digital payments. Passkeys replace static card credentials with cryptographic keys tied to the device and the user. When an AI agent completes a purchase under Agent Pay, the confirmation step uses that passkey mechanism rather than transmitting full card details.

This design addresses one of the structural concerns in agentic commerce: the question of what happens to card credentials when they are delegated to software systems operating with degrees of autonomy. By ensuring the agent never sees card numbers, and by anchoring the transaction confirmation to a passkey authentication event, Mastercard keeps the authorization chain intact from consumer to merchant without requiring the agent to handle raw payment credentials at any point.

In March 2026, Mastercard and Google introduced Verifiable Intent, an open cryptographic trust standard that builds directly on top of Agent Pay. Co-developed with Google and endorsed by eight industry partners including IBM, Worldpay, Fiserv, Getnet, Checkout.com, Basis Theory, and Adyen, Verifiable Intent creates a tamper-resistant record linking the consumer's identity, their specific instructions, and the agent-merchant interaction. The April 30 Dutch transaction sits within that same technical lineage, though Mastercard's announcement describes it using the Agent Pay and Payment Passkeys framing rather than explicitly referencing Verifiable Intent.

Rabobank's role and the pilot framing

Rabobank is one of the Netherlands' largest financial institutions, operating across retail banking, wholesale banking, leasing, and real estate in multiple countries. According to Mastercard's announcement, Rabobank Group had 48,000 full-time equivalent employees as of December 31, 2025, and operates in 34 countries. Its international focus is food and agribusiness banking, though the Dutch pilot positions it in consumer payments infrastructure.

Suzan van Eeten, Tribe Lead Payments and Savings at Rabobank, described the April 30 transaction in terms of incremental testing rather than full deployment. According to the announcement, van Eeten said: "With this pilot we show how Rabobank, together with partners, looks ahead to the future of payments. We test step by step what is possible with AI-driven services. We always do this with a focus on safety, transparency and control for our customers."

The framing as a pilot is notable. The announcement presents the transaction as a proof of concept demonstrating feasibility, not as the launch of a consumer product. Rabobank is testing the infrastructure, not rolling it out. That distinction matters when assessing timelines: the gap between a controlled first transaction and a broadly available consumer service involves regulatory requirements, fraud management at scale, and consumer education - none of which are trivial in the European financial services context.

Jan-Willem van der Schoot, Country Manager Mastercard Netherlands, addressed the trust dimension directly. According to the announcement, he said: "AI can make consumers' lives a lot easier, but only if trust and safety remain paramount. This first AI-driven payment in the Netherlands shows how innovation and responsible payment can go hand in hand."

Context: Europe and agentic commerce infrastructure

The April 30 announcement lands in a period of concentrated infrastructure development across the agentic commerce space. Mastercard's Cloudflare partnership announced in October 2025 established authentication protocols for AI shopping agents built on Web Bot Auth, using HTTP Message Signatures with public key cryptography to help merchants distinguish legitimate agents from malicious bots. That groundwork directly precedes what Mastercard and Rabobank demonstrated in Amsterdam.

European markets face specific regulatory constraints that make the Dutch pilot particularly relevant. PSE Consulting research published in November 2025 noted that the Agentic Commerce Protocol was expected to reach Europe within six to nine months from late 2025 - specifically because of Strong Customer Authentication requirements under the EU's revised Payment Services Directive. Those requirements demand that payment authentication be traceable to the consumer, which is precisely the design objective of Mastercard Payment Passkeys in the Agent Pay architecture.

The Netherlands itself has been active in AI governance. According to a report published July 15, 2025, the Dutch Data Protection Authority, known as the Autoriteit Persoonsgegevens, confirmed plans for a regulatory sandbox for AI systems to become operational by August 2026, providing a supervised testing environment under the European AI Act. The Mastercard-Rabobank pilot predates that sandbox, but the institutional attention to AI governance in the Netherlands creates context for why the country is positioned as a testing ground for this kind of transaction.

UK regulators have also moved to formally address agentic AI in financial transactions. A foresight paper published March 31, 2026 by the Digital Regulation Cooperation Forum - comprising the Competition and Markets Authority, the Financial Conduct Authority, the Information Commissioner's Office, and Ofcom - mapped a five-level autonomy spectrum for agentic AI and identified consumer commerce as one of the primary areas requiring active regulatory attention.

What this means for merchants and advertisers

For the marketing community, the structural implications of the Mastercard-Rabobank transaction go beyond payment processing. If AI agents complete purchases within AI environments rather than on merchant websites, the consumer journey that advertisers currently optimize for - click, browse, add to cart, checkout - compresses or disappears. A consumer who asks a trusted AI assistant to book an experience and has it done in seconds does not visit a product page, does not encounter retargeting pixels, and does not generate the behavioral signals that programmatic advertising has been built to interpret and monetize.

Adobe Analytics documented traffic to US retail websites from generative AI sources jumping 1,200 percent during the first quarter of 2025, suggesting that AI is already reshaping how consumers reach merchants even before transactional capabilities mature. The April 30 transaction represents the next step: AI not just routing consumers to merchants, but completing the commercial act itself.

Kantar research published in January 2026 found that 24 percent of AI users already deploy AI shopping assistants, with 74 percent of AI assistant users seeking AI-driven product recommendations. Those figures were compiled before any live agentic payment infrastructure existed in the Netherlands. The question that follows from the April 30 pilot is how advertising and commerce infrastructure adapts when a growing share of purchase decisions are executed by agents operating within consumer-set parameters, rather than through the conventional discovery and checkout flows.

The Priceless.com dimension

The choice of Priceless.com as the merchant in this transaction is not incidental. Priceless.com is Mastercard's own platform for unique experiences, which gives Mastercard direct control over the merchant side of the integration for testing purposes. Using a proprietary platform reduces the complexity of establishing the agent-merchant technical handshake and removes the variable of a third-party merchant's systems from the initial demonstration.

In the example the press release provides, a consumer asks a ChatGPT, Claude, or Perplexity assistant to find red trainers up to 50 euros. The AI presents ten options. Today, the consumer must follow a redirect to the retailer's website to complete the purchase. In the envisioned future, the consumer chooses within the AI environment and payment settles there. That future requires merchant-side infrastructure - specifically, support for the Agent Pay protocol and integration with payment passkey authentication. Priceless.com already has that integration because Mastercard built it. Scaling to third-party merchants is a separate, larger project.

Timeline

  • May 2025 - Cloudflare shares the Web Bot Auth proposal, establishing the technical foundation for HTTP Message Signatures used in AI agent authentication
  • September 2025 - Google launches Agent Payments Protocol, a payment-agnostic protocol using cryptographically signed mandates to link intent, cart, and payment
  • October 24, 2025 - Cloudflare announces partnerships with Visa and Mastercard to develop security protocols for agentic commerce, with Agent Pay and Trusted Agent Protocol both built on Web Bot Auth
  • November 2025 - PSE Consulting research finds 49 percent of UK adults use AI tools regularly; McKinsey projects $3-5 trillion global agentic commerce opportunity by 2030; Agentic Commerce Protocol expected to reach Europe within six to nine months
  • January 11, 2026 - Mastercard introduces Agent Pay at the National Retail Federation conference; Google launches Universal Commerce Protocol simultaneously; Visa endorses UCP alongside Mastercard
  • March 5, 2026 - Mastercard and Google introduce Verifiable Intent, a cryptographic trust standard co-developed with Google and endorsed by IBM, Worldpay, Fiserv, Getnet, Checkout.com, Basis Theory, and Adyen
  • March 31, 2026 - UK Digital Regulation Cooperation Forum publishes agentic AI foresight paper mapping a five-level autonomy spectrum and identifying consumer commerce as a priority regulatory area
  • April 30, 2026 - Mastercard and Rabobank announce completion of the first AI agent-initiated payment in the Netherlands, using Agent Pay, Mastercard Payment Passkeys, and Priceless.com

Summary

Who: Mastercard and Rabobank, with Jan-Willem van der Schoot (Country Manager Mastercard Netherlands) and Suzan van Eeten (Tribe Lead Payments and Savings at Rabobank) as named representatives.

What: The first AI agent-initiated payment transaction completed in the Netherlands. An AI assistant booked a coffee tasting on Priceless.com using a Rabobank Mastercard credit card, secured through Mastercard Agent Pay and Mastercard Payment Passkeys, without the consumer navigating to a web shop.

When: The transaction was announced on April 30, 2026, in Amsterdam. The broader Agent Pay infrastructure was introduced by Mastercard on January 11, 2026.

Where: The Netherlands, with the pilot conducted using Priceless.com as the merchant platform and a Rabobank-issued Mastercard credit card as the payment instrument.

Why: Mastercard and Rabobank are testing the technical and consumer-facing feasibility of AI-initiated payments in a European market context, where Strong Customer Authentication requirements under EU payment regulation create specific constraints on how agent-executed transactions can be authenticated. The pilot is framed as a step toward a future in which AI assistants complete purchases on behalf of consumers within AI environments, rather than directing consumers to external web shops to complete checkout.

Share this article
The link has been copied!