Visa, Mastercard, and Ant Just Made Know Your Agent Real
Visa, Mastercard, and Ant International launched a Know Your Agent interoperability push for AI agent verification across payment networks. What KYA means now.
Know Your Agent just moved from conference slide to payment infrastructure. On September 9, Ant International, Mastercard, and Visa announced a collaboration on KYA interoperability, aligning Visa's Trusted Agent Protocol, Mastercard's Verifiable Intent, and Ant's Agentic Mobile Protocol so that an AI agent verified on one network does not start from zero on the next. The work runs through the SAFR framework, Safeguards for Agentic Finance at Runtime, and the BuildFin.ai platform convened by Singapore's Monetary Authority.
The announcement is the clearest signal yet that agent identity is becoming a first-class verification workload. Every card network had been building its own agent registration scheme, which threatened agentic commerce with the same fragmentation that plagued early digital identity: an agent trusted here, a stranger there, and duplicate onboarding everywhere. The three-network alignment, in Mastercard's words, treats interoperability as "essential to making agentic commerce work at scale."
For verification teams, the message is blunt. The non-human side of the customer base now has its own KYC regime, and it is being standardized by the largest payment brands on earth.
What the networks actually agreed to
The collaboration coordinates how agents are onboarded, identified, and held accountable across the three ecosystems while each network keeps its own verification process. Practically, that means common approaches to agent credentials, delegation evidence, and risk signals, so a merchant or issuer receiving an agentic transaction can rely on a verification performed elsewhere, with consistent meaning.
Visa framed the stakes directly: as agents proliferate, "trust must scale with them." The unglamorous engineering underneath is credential interoperability, the same problem the human identity world is solving with verifiable digital credentials and wallet attestations, now applied to software actors that transact at machine speed.
Why KYA stopped being optional
The volume math settled this. Enterprise environments already track 144 non-human identities for every human one, and agentic commerce pushes that ratio into consumer payments: shopping agents, subscription managers, treasury bots, and procurement systems all initiating transactions on someone's behalf. Every one of them is either a verified actor with a delegation chain or an anonymous script indistinguishable from fraud tooling.
The fraud side has noticed too. An unverified agent is the perfect wrapper for automation abuse: card testing, bonus farming, and synthetic account operation all look like legitimate agent traffic until something proves otherwise. KYA is that something, and the networks' framework makes it enforceable at the rail.
What this means for verification stacks
Agent verification lands on the same architecture human verification did, just faster. An agent presents credentials; the credentials need issuer validation, revocation checking, and delegation-chain verification back to an accountable human or business; and the whole exchange needs to complete at machine latency. deepidv's Arc gateway runs exactly that workload today, registering agents, validating delegation chains, and routing agentic calls with escalation to Arbiter when a risk threshold trips, with the core platform anchoring the human at the top of every chain.
The interoperability push raises the bar for everyone downstream. Once the rails speak a common KYA language, merchants, platforms, and financial institutions will be expected to consume it, and the operators who already treat agents as a verified population will plug in first.
Know Your Agent FAQ
- What is Know Your Agent (KYA)?
- Know Your Agent is the verification discipline for AI agents: registering an agent's identity, validating the credentials and permissions it carries, verifying the delegation chain back to an accountable human or business, and monitoring its behavior in transactions. It is KYC's counterpart for non-human actors.
- What did Visa, Mastercard, and Ant International announce?
- On September 9, 2026, the three initiated a collaboration to make their agent-verification schemes interoperable: Visa's Trusted Agent Protocol, Mastercard's Verifiable Intent, and Ant International's Agentic Mobile Protocol, coordinated through the SAFR framework and Singapore's BuildFin.ai platform, so agent verification travels across networks.
- Why does agentic commerce need agent verification?
- Because agents transact autonomously at machine speed, and an unverified agent is indistinguishable from fraud automation. With non-human identities already outnumbering humans in enterprise environments, payment networks need to know which agent is acting, for whom, and with what authority before money moves.
- How do businesses verify AI agents today?
- Through an agent gateway: agents register with credentials, each invocation validates the credential and its delegation chain, and behavior is risk-scored continuously. deepidv's Arc performs this natively, applying the same evidence standards to agents that the platform applies to human verification.
- Does KYA replace KYC?
- No, it extends it. Every legitimate agent chain terminates in a human or business that must be verified conventionally. KYA adds the layers above: agent identity, authority, and runtime accountability, so institutions can serve agentic traffic without treating it as anonymous automation.
Relevant Articles
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds, catch deepfakes that liveness checks miss, and let honest users through while keeping bad actors out.
Learn More