Case file 01
Established a Secure Payment Experience for Agentic Commerce
- Client
- Visa
- Method
- Diary study
- Participants
- 25
- Date
- April 2026
Contribution and impact
Built a multidimensional agentic commerce evaluation rubric, mapped critical Human-in-the-loop safeguards, translated findings to key strategic priorities for Visa — driving adoption by deploying tokenized payments and establishing default user verification.
Challenge
As "agentic commerce"—AI agents discovering and purchasing on a user's behalf—moved from concept to reality, Visa needed to define its role in making autonomous transactions trustworthy enough for adoption.
Approach
A 5-day diary study tracking 25 participants across four AI shopping tools: Amazon, Microsoft Copilot, ChatGPT, and Perplexity. Each shopper completed a live transaction using a primary tool and evaluated a secondary tool, capturing discovery, evaluation, and checkout experience.
Key findings
- Solution. AI agents are helpful research partners, but inability to complete transaction within the AI tool frustrates users.
- Trustworthiness. Concerns about over-automation making some hesitant to share their payment information.
- Accuracy. Displaying accurate product prices upfront was expected, but AI failed to do so.
- Ease. Users want the AI platform to save personal information for easier shopping.
- Perceived security — Payment. Tokenized payments and credit cards are the ideal payment methods for AI platforms.
- Perceived security — Verification. Verification of purchases is required, with biometrics considered the most secure method.
Implementation and influence
- Product Execution. Initiated strategic digital wallet partnerships to deploy tokenized payment within agentic workflows, separating sensitive financial data from AI platforms.
- UX/Design Strategy. Provided Visa brand reassurance during payment entry to reinforce consumer protections and alleviate data-sharing concerns.
- Authentication Standard. Adopted Visa Payment Passkeys (utilizing biometrics) as the default verification, ensures users retain the control.