AI agents paid for real things this week in Denmark, Canada and the UK, but all three were first transactions in pilots or showcase flows, not features you can switch on in your own banking app yet. Also this week, the Federal Reserve and the European Banking Authority moved on stablecoin rules, and the FTC asked whether social media platforms should share the blame for impersonation scams.
Here is the AI money news from September 21 to 27, 2026, and what each item means for your money. Every short item we publish is also listed under AI money news this week.
AI agents made first payments in three countries
Denmark, September 21. Danske Bank and Mastercard completed what they call Denmark’s first payment made by an AI agent. A customer asked an agent to book a coffee tasting on Mastercard’s Priceless.com, and the agent paid with a Danske Bank Mastercard. The purchase ran on Mastercard Agent Pay and was secured with Mastercard Payment Passkeys; PayOS orchestrated the transaction (Finextra, Danske Bank release; FinTech Futures).
Canada, September 21. Mastercard, Rogers Bank and Flybits announced Canada’s first agentic commerce transaction. An AI assistant acting for a Rogers Red cardholder picked and bought an eligible product within “clearly defined parameters, including validated consumer instructions and predefined spending limits,” using Mastercard Agent Pay (Mastercard Canada).
UK, September 22. GoCardless processed what it calls the UK’s first agentic account-to-account payment: a monthly donation to the charity Trussell, set up entirely in a chat with an AI agent. The donor picked £5, £10 or £15 a month and gave bank details, and the agent set up a Direct Debit mandate without sending the donor to a separate form. GoCardless says it built and launched the checkout inside the FCA’s AI Live Testing programme, and the Trussell flow is live on its website as a public example (GoCardless; GoCardless and Trussell).
What it means for you. Card networks are building agent payments on existing card rails, with spending limits and passkeys, while GoCardless shows the same idea on a bank-to-bank rail. The UK example keeps a familiar protection: under the Direct Debit Guarantee you are entitled to “a full and immediate refund” if a payment is taken in error, and you can cancel a Direct Debit at any time through your bank (Direct Debit Guarantee). For how each network’s agent program works and who supports which protocol, see our agentic commerce protocol tracker and our explainer on Visa Trusted Agent Protocol and Mastercard Agent Pay for cardholders.
Six banks agreed on rules of the road for shopping agents
On September 22, Bank of America, ING, NatWest, Commonwealth Bank of Australia, ASB Bank and Capital One published five joint principles for “trusted agentic commerce”: transparency, safety, privacy and data, choice, and interoperability (NatWest Group). The principles are not binding rules. Our full story covers what each one asks for.
A free AI financial planner from the former PayPal CEO
Bill Harris, former CEO of PayPal and Intuit, launched Evergreen.ai on September 21. The app is offered by a Registered Investment Adviser, links accounts through Plaid, and is free through January 1, 2028 for people who register during the beta (Business Wire). Read the launch story and our Evergreen.ai review.
Stablecoin rules moved in the US and the EU
The Federal Reserve Board asked for public comment on September 24 on two proposals under the GENIUS Act, covering reserves, capital and the application process for banks it supervises that want to issue payment stablecoins (Federal Reserve). The same day, the European Banking Authority set out its priorities for the review of MiCA, the EU crypto law, including multi-issuer stablecoins and crypto lending (EBA). Neither changes anything for stablecoin holders today. Details: the Fed proposals and the EBA’s MiCA priorities.
In Canada, six banks (BMO, CIBC, National Bank of Canada, RBC, Scotiabank and TD) said on September 22 that they are jointly exploring Canadian-dollar digital money, starting with tokenized deposits moved between Canadian financial institutions (joint release). It is at an exploratory stage, with nothing for customers yet.
Revolut piloted paying with your face
From September 24 to 26, Revolut piloted “Pay with Smile” at selected Kiss the Hippo cafés in London. Customers who opted in through the Revolut app paid by looking at a terminal; Revolut says the check compares your face against the selfie ID check you completed when you signed up, and that personal data is never stored by merchants (Revolut). It was a three-day pilot, not a general launch. If it comes to your app, the opt-in screen is where to read what is kept and for how long.
The FTC asked whether platforms enable impersonation scams
On September 24, the FTC voted 2-0 to publish an advance notice of proposed rulemaking asking whether its Impersonation Rule should cover how platforms’ ad tools help scammers reach victims. The FTC says people filed more than 1 million imposter scam reports in 2025 and reported $3.5 billion in losses, and that $2.1 billion was lost by people first contacted on social media (FTC). Comments open for 60 days once the notice appears in the Federal Register. Nothing changes yet for users, so the usual defenses still apply: our AI scams catalog and the new guide to toll text scams cover the most common lures.
