An AI agent pays with BLIK: Poland's payment scheme puts agent authorisation in the banking app
According to its own statement of 9 September 2026, the Polish payment scheme BLIK has processed the first pilot payment made by an AI agent: 19.99 zloty for a hand cream in the Your KAYA shop, triggered by the agent and processed via PayU. The customer granted permission in advance with a six-digit BLIK code and an approval in their banking app.
What happened
After Visa and Revolut in France, a national payment scheme is now reporting its first agentic payment. On 9 September 2026 the Polish operator Polski Standard Płatności announced that an AI agent had triggered a pilot payment with BLIK without the customer's involvement at the moment of purchase; the report was picked up internationally on 11 September. In the online shop Your KAYA the agent monitored the availability of a product the customer had named in the chat — a hand cream with a coconut and almond scent — and bought it when the variant was back in stock. The amount was 19.99 zloty. The customer had granted permission beforehand: confirmed with the six-digit BLIK code and approved in their banking app, including the conditions under which the agent may continue to act on their behalf. The agent chat in the shop was supplied by the provider Juo, and PayU processed the payment.
Who it affects
Online merchants first, specifically those with repeat-purchase ranges: drugstore goods, spare parts, consumables, anything that sells out and gets reordered. Indirectly it affects every German merchant wondering what agentic payment will look like here — and every bank and every payment network operator that will need an authorisation mechanism for it.
Assessment
What is interesting about this pilot is not the technology but the architecture of the permission. Consent does not sit in the shop interface and not with the agent platform, but in the customer's banking app, with a code they enter themselves and conditions they set themselves. That is precisely the construction that has been missing so far in the European debate about agentic payments: a demonstrable, revocable mandate in a place that both the supervisory authority and the customer know. For girocard and Wero this is a test case, not a side issue from Warsaw.
Two things should nevertheless be seen soberly. First: this was a pilot for barely 20 zloty, not regular operation, and so far there are no substantiated figures on volume or error rates. Second, the question that ultimately hits merchants remains open — who is liable if the agent buys the wrong thing. A mandate in the banking app establishes that the customer consented; it does not establish what happens if they say that is not what they meant. As long as the rulebooks do not name the burden of proof, agentic payment is a revenue promise with an unclear returns risk for merchants.
What to do now
- Check whether an agent could buy in your own shop at all: are availability, price and variants marked up machine-readably, or only visible to humans?
- Look in the contract with your payment service provider at how agent-triggered payments are classified — as a normal customer payment or as a payment without the customer present. The chargeback treatment depends on it.
- Keep an eye on your own return rate for repeat orders. Once agents are buying, it becomes the early indicator of whether the model holds up.