It is no understatement that the world as we think we know it is not the world as it is, or as it is becoming. Few truly understand how AI works; even fewer see what it is becoming. I have attended five conferences on digital assets this past month, and each took the time to mention the weight agentic finance will have on the economy. One speaker even went so far as to say that 2027 will be defined by agentic finance.

The numbers suggest that the speaker may be early, but not wrong. A Chainalysis report published on October 14 found that AI agents have made more than 138 million payments through x402, a Coinbase-incubated payments protocol, up from roughly 1,500 in mid-2025. More than 87% of those payments were under 10 cents, amounts where a card fee can cost more than the purchase itself. Agents are buying compute, data, and code review, and some are paying other agents. The incumbents are already drawing lines: on JPMorgan’s October 13 earnings call, Jamie Dimon said the bank will not let outside agents interact with customer accounts.

To understand agentic finance and what it will become, we need to understand the ecosystem it operates in. A growing share of agentic transactions occur onchain, through agents that have authority to use funds deposited by their principals, most often stablecoins. These markets operate 24/7, and assuming the agent has gas and makes the right decisions, the principal’s engagement can be limited. The complication, thanks to modern blockchain technology that permits mixers, is that these transactions can be, for all intents and purposes, opaque; hidden from the public. Who are AI agents and who are human actors? What is illicit activity and what are the actions of rogue agents? One of the central risks in all transactions is counterparty risk, but how can we account for the decision-making of agents we cannot identify and which are not guided by the same operating principles that we are? Game theorists call this a game of incomplete information: you cannot see who you are playing, so you assign odds to who they might be and play accordingly.

That game just got harder. On October 5, Treasury withdrew two long-pending proposals: one targeting crypto mixing, and a 2020 rule that would have required identity verification for transfers involving self-hosted wallets. Many agent wallets are self-hosted. Whatever you think of the policy, the regulatory default just moved toward less visibility, not more.

In 1970, George Akerlof showed that when buyers cannot judge quality, the honest sellers leave and the lemons stay. Markets survive by building warranties. Agentic finance is building its own. In an a16z crypto conversation published October 17, Circle CEO Jeremy Allaire described a project coming to Arc that builds arbitration for AI work, because AI will hire other AI, and someone has to decide who gets paid when the work goes wrong. Early versions of these systems are already live, and they work in four steps:

  1. Escrow. Instead of paying the seller directly, the buyer agent’s stablecoins go into an onchain escrow with a dispute window. If no one objects, the funds are released.
  2. Terms. The agents sign a contract that is both a legal agreement humans can read and a set of terms software can check, so there is something to measure delivery against.
  3. Jurors. If a dispute is raised, it goes to a pool of AI jurors who have staked tokens to participate. Each votes privately. Jurors who side with the final ruling earn fees; those who don’t lose part of their stake. Being wrong costs money.
  4. Appeal. A party that disagrees can pay to escalate to a larger panel or to human arbitrators. Most disputes end early; only the hardest reach people.

What makes this interesting is that it does not answer the counterparty question; it routes around it. You do not need to know who the other agent is, because the money is held by code and released only on a ruling. Whether a ruling by AI jurors would hold up in court, and whether an agent can agree to arbitration on behalf of its principal, are questions no one has answered yet.

If you run a business, the first opportunity is to make yourself readable to machines. Agents do not browse your homepage or admire your design; they call commerce APIs directly and pull price, stock, and return terms from structured data. If an agent cannot find or parse your products, you do not exist to it. This is not a future problem: nearly half of merchants already report tracking visits or purchases from AI agents, and the largest retailers have already picked sides. Amazon is blocking prominent outside agents, Target is admitting approved ones, and Walmart is partnering with AI companies outright. Whoever agents can transact with early will capture the volume.

If you are a builder, agents still lack three things humans take for granted: a verifiable identity, a way to undo a bad payment, and a forum to resolve disputes. At least five competing protocols are racing to bind agent identity to human authorization, and none has become the standard. Escrow and arbitration for agents are in their earliest days. As infrastructure is unsettled, why not take the leap and design it yourself?

And if you are a lawyer or a law student, employers report they cannot find enough lawyers with experience in AI, privacy, and compliance, and AI governance specialists are among the hardest roles to fill. Agentic payments sit where those fields meet payments law, and very few people know all three. Learn how an agent authorizes a payment, what Regulation E does and does not cover, and how an onchain escrow releases funds. That combination is rare today; it will not be rare for long.

Capturing value means little if you leave yourself exposed, and here most people are more exposed than they realize. Your fraud protection may not cover your own agent. Regulation E caps your liability when a stranger steals your card, but if you give someone authority to make transfers, you can remain liable even when they exceed that authority. The banking industry itself has warned that the rule limiting consumer liability may not apply when agents are involved. In the eyes of the law, your agent looks less like a thief and more like a friend you handed your card to.

So set the controls before you delegate. Regulators, banks, and consultants have converged on four: a mandate limiting what the agent may buy, how much, from whom, and when; a check at the moment of payment, not only at setup; a human approval step above a set amount; and a clear answer to who is accountable when something goes wrong. If your agent platform does not offer spending caps and instant revocation, think twice before funding it. And when you want an agent stopped, tell your bank, not just the agent; liability generally ends when the bank is notified that the delegation is over. Businesses face the mirror image of this risk. Merchants who do not capture enough context on agent-initiated transactions to fight a dispute will absorb the loss by default, and any contract with a vendor whose AI can spend your money should define liability for AI-initiated actions and include indemnification.

Is there a point to hedging? Yes, though not in the way most people mean it. I will not tell you which stocks or tokens to buy. But there are structural hedges, choices about how you participate, that limit how much you can lose. The first is the rail you choose. Visa and Mastercard maintain zero-liability policies that go beyond federal law, and on October 6 American Express announced an initiative to protect cardholders and merchants from errors by registered AI agents, though that program is an announced intent, not yet a live product. If you let an agent spend, a credit card is likely a safer instrument than a debit card or a funded wallet with no backstop at all. The second is evidence. On October 15, Proof launched x401, an agent identity wallet that lets a person approve, on their own device, exactly what their agent may do, with a signature the receiving business can verify. When a dispute comes, the party who can prove what was authorized wins. The third is regulatory. The rules governing agents and wallets are moving quickly and can reverse with an administration; what Treasury withdrew in October could be re-proposed. Even the Fed, OCC, and FDIC left agentic AI out of their April 2026 model risk guidance because they consider it too novel to pin down. Anyone building on today’s rules should assume they will change.

Finally, what to watch. Money20/20 opened October 18 in Las Vegas, and its October 19 panel titled “Know Your Agent” includes J.P. Morgan’s Frank Medrano, days after his CEO closed the door on outside agents. If the largest bank in the country names an identity standard it would accept, that door could open. Watch too whether American Express turns its announcement into a live product, and whether regulators begin to rewrite Regulation E for a world where the one authorizing payment is not a person.

Now you know.