Mara ReyesGoogle launched a protocol for agent payments with support from more than 60 organizations in September 2025. Six months later, Bloomberg described little existing demand even as Circle, Stripe and Coinbase built infrastructure for it. PayPal, meanwhile, says its wallet will enter ChatGPT in 2026. The screen loses a checkout step just as the payment stack must make identity, intent and liability more explicit. Removing the human gesture exposes how much the click had carried.
Key takeaways
- Agent-led purchasing shifts payments competition from checkout convenience to governance: proving user identity and intent, enforcing spending limits, detecting fraud and assigning responsibility when automation fails.
- PayPal’s strongest opportunity is to become the permission layer beneath multiple AI interfaces, using its wallet, merchant relationships and risk systems to carry buyer limits and preserve evidence for disputes.
- Google’s AP2 initiative and the FIDO Alliance’s standards work show coordination around authorization and security, but the cited reports do not establish a common liability framework for failed agent transactions.
- PayPal has a financial incentive to own transaction controls rather than remain only a payment option: Q2 transaction-margin-dollar growth of 1% lagged revenue growth of 5%.
- Removing the checkout button does not remove human control; it requires that identity, merchant, category, amount, duration, overrides and dispute paths be encoded in an auditable mandate.
Removing the click unbundles the authority behind it
An agent can recommend a product without spending authority, but buying one requires it. As AI agents move from finding a product to buying it, the payment system no longer receives one bundled event in which a person chooses an item, presents a credential and approves a charge. It receives separate claims: this is the user, this agent acts for that user, this purchase falls within the agent’s instructions, and this record shows what happened if any claim is contested.
The checkout button was a crude control, but it compressed those claims into a moment merchants and issuers could record. Agent execution pulls them apart. A user may authorize an agent without authorizing every merchant, price, product category or later substitution it encounters. A valid payment credential may show that funds can move; it does not encode every condition the buyer placed on the purchase.
Google and the FIDO Alliance began standards work while Bloomberg still described little existing demand. In September 2025, Google launched its Agent Payments Protocol to facilitate agent-led payments across platforms; ZDNET reported support from more than 60 organizations. In April 2026, the FIDO Alliance formed two working groups to establish standards for securing AI-agent transactions, with Google contributing AP2.
A useful control model is a mandate: an auditable link between a principal, an agent and a bounded action. The user’s instructions must survive after the person leaves the interaction, with accountable moments for a grant, exception, override and dispute. The cited AP2 and FIDO reports establish coordination around security and authorization; they do not establish a shared rule for liability when those controls fail.
A wallet gains power when it stops being a destination
PayPal was built as a place where consumers could carry a payment relationship across merchants. Agent interfaces invert that design. The consumer may never open the wallet; the agent presents it beneath a conversation, and the wallet’s value lies in what it can prove and constrain.
CNBC reported on October 28, 2025, that PayPal’s digital wallet will be embedded in ChatGPT beginning in 2026, allowing users to pay for items found through the interface. OpenAI retains the conversation and discovery while PayPal remains the payment option. The report provided no adoption target or expected purchase volume.
In 2015, PayPal agreed to acquire cybersecurity company CyActive for $60 million and payment platform Paydiant for $280 million. When checkout centered on a person pressing a button, security and merchant infrastructure were adjacent capabilities. An agent purchase makes both part of the same control problem.
The ChatGPT announcement does not say PayPal will enforce detailed agent limits or preserve an agent’s decision path. If PayPal wants to become the control point, it would need to accept limits on price, category and merchant, pass those terms to the seller, and retain evidence for human review. A support team could then compare the final order with the original instruction.
Inside ChatGPT, customers may see less of PayPal’s brand even as the company maintains the payment record. The 2025 announcement establishes distribution, but it does not say how OpenAI, PayPal, merchants and card networks would divide a disputed loss.
Slower transaction-margin growth raises the stakes
The Wall Street Journal reported on July 29, 2026, that PayPal’s second-quarter revenue reached $8.68 billion and transaction margin dollars reached $3.9 billion. Profit fell to $1.1 billion from $1.26 billion a year earlier, even as the company raised its profitability guidance.
As one payment option among many, PayPal remains exposed to the economics of acceptance. Its wallet could build a more defensible role by reducing authorization failures, distinguishing fraud from agent error and producing clearer evidence for disputes. The cited Q2 results do not show whether PayPal can deliver those benefits across competing agent interfaces. With transaction-margin-dollar growth trailing revenue, the company has more reason to own the controls around a transaction instead of only the route through which it travels.
Reuters reported on July 15, 2026, that Stripe and Advent International jointly offered $60.50 a share for PayPal, valuing it at more than $53 billion. On July 17, Reuters reported that PayPal’s board viewed the bid as inadequate and saw regulatory and financing hurdles. Neither report established that a transaction would proceed, but the offer put a price on PayPal’s position between consumers and merchants. A proposed combination would join Stripe’s developer APIs with PayPal’s wallet accounts and merchant relationships. In an agent order, those APIs must carry the buyer’s limits in a form the wallet and merchant can inspect.
A stablecoin transfer cannot explain why an agent bought
Bloomberg reported on March 9, 2026, that Circle, Stripe and Coinbase were building stablecoin infrastructure intended to make microtransactions between agents economical. Mastercard has separately outlined on-chain settlement using regulated dollar stablecoins, including USDC and PayPal’s PYUSD.
Lower transfer costs do not establish who authorized the agent, what it could buy, whether the merchant fulfilled the order or who bears a disputed loss. A support team still needs the instruction, the agent’s actions and the merchant’s response in one traceable record.
Mastercard’s published evidence addresses a narrower part of the problem. The company said nine UK banks adopted its AI-based Consumer Fraud Risk system, which was trained on years of transaction data. Such fraud signals do not show whether an agent obeyed a shopper’s specific instruction.
Bloomberg’s March report described stablecoin-based agent payments as a market with little existing demand. The report did not provide evidence of broad consumer adoption or meaningful transaction volume.
A buyer, for example, could authorize up to $200 from one merchant until Friday. If an agent substitutes a seller or exceeds the limit, the wallet could stop the payment before settlement. If the merchant changes the order afterward, support could identify which term moved and route the dispute to a person.
The human remains because the loss needs an address
By 2026, OpenAI had added native sandboxing and a testing harness to its Agents SDK for long-horizon tasks. Those tools help developers observe agent behavior. They answer a different question from whether a shopper would accept a change in inventory, price, timing or delivery terms during a purchase.
A system that preserves user control needs a way to renew or revoke limits when context changes. The buyer need not approve every automated action, but must be able to intervene when price, merchant, delivery or fulfillment moves outside the original instruction.
The UK Financial Conduct Authority is investigating PayPal, Mastercard and Visa over alleged anti-competitive behavior, with Visa saying the inquiry concerns the PayPal digital wallet. The inquiry addresses alleged wallet conduct rather than agentic checkout, and it is not a finding of misconduct. It does not settle how regulators would treat agent payments, but it shows that a wallet’s control over access can draw scrutiny apart from any individual transaction.
At the old checkout, the buyer’s presence performed several jobs badly but visibly. In delegated checkout, those jobs return as fields in a mandate: identity, merchant, category, amount, duration, override and dispute path. The button disappears from the screen only after its old work has been rebuilt underneath as a limit, a log and a name on the loss.
PayPal’s Q2 growth mismatch
| Metric | Q2 result | Comparison |
|---|---|---|
| Revenue | $8.68B | Up 5% year over year; above the $8.47B estimate |
| Transaction margin dollars | $3.9B | Up 1% year over year |
| Profit | $1.1B | Down from $1.26B in Q2 2025 |
Frequently asked questions
When will PayPal be available in ChatGPT?
PayPal says its digital wallet will be embedded in ChatGPT beginning in 2026, allowing users to pay for products found through the interface. The announcement gave no adoption target or expected purchase volume.
What controls would an AI shopping mandate need?
It would need to connect a verified user and agent to bounded terms such as merchant, product category, spending amount and duration. It should also preserve grants, exceptions, overrides and the agent’s actions for later review.
Do stablecoins solve the main risks of agentic payments?
No. Stablecoins may lower transfer costs, including for agent microtransactions, but they do not prove who authorized a purchase, whether the agent followed instructions, whether the merchant fulfilled the order or who bears a disputed loss.
Who is liable when a purchase made through ChatGPT and PayPal goes wrong?
The cited announcement does not specify how OpenAI, PayPal, merchants and card networks would divide a disputed loss. That unresolved recourse question is central to the emerging payment-governance layer.
Why must people remain involved in automated checkout?
Users do not need to approve every action, but they need a way to intervene when price, seller, delivery or fulfillment moves beyond the original instruction. Human review also provides an escalation path when fraud detection cannot distinguish criminal activity from agent error.