In September 2026, Mastercard rolled out a payment option that lets you give an AI agent a virtual card. You set a spending cap. You restrict where it shops. And then it buys things, online, without checking in first.

Visa is building the same thing. One payments executive told Fortune this is a land grab. Whoever sets the standards for agent checkout keeps the commerce in their house for decades.

Shoppers are not lining up.

In a survey commissioned by ACI Worldwide that same month, just 7 percent of shoppers said they'd let an AI assistant buy without approval. More than half said they were uncomfortable with AI buying for them at all.

What did they want? Price alerts. Comparisons. Help me find it. Let me buy it.

What's the pattern?

In February 1950, a man named Frank McNamara paid for lunch in New York with a piece of cardboard. The first Diners Club card. Within two years it had 42,000 members.

And then it stalled. Banks mailed cards to people who never asked for them. Cards got stolen. And if a thief ran up your card, you paid. Adoption didn't stall on the technology. It stalled on fear.

In 1970, Congress amended the Truth in Lending Act. Unsolicited cards were banned. And your liability for a stolen card was capped at fifty dollars.

That fifty-dollar rule is the reason you hand your card to a waiter without thinking. The card never earned your trust. The rule did.

So back to the agent. Mastercard says it keeps a record, something it calls Verifiable Intent: who authorized the agent, what it was allowed to buy. Fortune asked who pays if the agent buys something it wasn't told to. The answer pointed back at the record. It didn't name who pays.

That's the open seam. And the 1950s had the same seam for twenty years.

What should leaders do now?

If you sell things: build for the agent that browses before the agent that buys. That's where the demand is.

If you move money: the liability answer is the product. The first network that says "you're covered, full stop" wins the trust the others are still measuring.

And if you're anyone else: watch for the rule, not the launch.

We trusted a piece of cardboard once. We can learn to trust this. It'll take a rule, not a demo.

Would you hand your card to a bot?

Related: When your customer is a bot, what is a brand?

Sam Rad, The Change Futurist. Keynote speaker on change, transformation, resilience, and AI adoption. Author of Radical Next. Book a keynote