"We would expect to see new rules around consent and authorisation frameworks for agentic transactions – the existing ‘strong customer authentication’ (SCA) requirements under payment services regulations (PSRs) were designed for human-initiated payments and are not well suited to autonomous agents executing multiple transactions on a consumer's behalf. There will also need to be a clear liability allocation regime for when agentic transactions go wrong – whether through error, hallucination or fraud..."