France’s first agentic card payment: Revolut and Visa let an AI pay in a real checkout
On 7 September 2026, Revolut and Visa completed the first card payment in France triggered by an AI: a real Revolut card, a real merchant (Cleverbridge), authentication via Visa Payment Passkey instead of a PIN. The liability question in agent purchases is not answered by this — it has only just been asked.
What happened
Revolut and Visa announced on 7 September 2026 that, for the first time in France, a card payment had been triggered not by a cardholder but by an AI agent. The purchase was triggered by Visa’s test agent My Agent, paid for with a real French Revolut card, and accepted by the software reseller Cleverbridge. Strong customer authentication ran not via PIN or TAN but via Visa Payment Passkey; the transaction was processed over the regular Visa rails, including issuer controls and real-time fraud checking. The test is running within the Agentic Ready programme, which Visa launched in Europe on 17 March 2026 with 21 named institutions, among them Revolut, Barclays, HSBC UK and Banco Santander. The parties did not name a transaction amount.
Who it affects
First of all online merchants with digital or recurring products, so software, subscriptions, travel, tickets, B2B repeat orders. Indirectly every shop whose checkout will in future be called not only by people but by shopping assistants — and every merchant who pays chargebacks out of their margin.
Assessment
The real news is not that a machine paid, but that it did so over the existing card rails. Visa is not selling a new payment method here, it is defending the old one: tokenisation, passkey and fraud checking stay, only the trigger changes. For merchants that is the more convenient variant — no new procedure, no second integration. That is precisely why it will probably prevail before any open agent payment protocol has been fully debated.
The open question is the one that always determines the bill in payments: who is liable when the agent buys the wrong thing? A passkey proves that a device consented, not that a human wanted the order. As long as mandates, spending limits, merchant approvals and the burden of proof in a chargeback case are not cleanly regulated, every agent purchase is a candidate for a dispute that the merchant has to fight out. I think the test is right and the timetable is honest: it is a pilot, not a rollout. Anyone selling this as solved today is selling a promise, not a product.
What to do now
- Read in the contract with your acquirer or payment network operator how a transaction is treated that was authorised via passkey and without cardholder interaction — and get the answer in writing.
- Break down your own chargeback rate for the last twelve months by product group. Anyone who already has disputes on digital goods will get more of them with agents.
- Make agent traffic in the shop measurable (user agent, session patterns) before allowing or blocking it. Without figures, the decision is gut feeling.