Industry radar

Payments industry news, mapped to the tools you use

What standards bodies, regulators, card networks and the trade press published this week — with a short PayProbe take on the developments that change how you build, test or certify, and links to the decoders, calculators and guides they affect.

Updated 4 Sep 2026 · 19 headlines from 11 sources · refreshed weekly · nothing is fetched in your browser

PayProbe take

Developments that change something for payment engineers, and where on PayProbe to test the impact.

Key date 30 Sep 2026

EMVCo opens its card-based agentic payments framework for comment

EMVCo published the draft "EMV Agentic Payments — Framework for Specifications" on 1 September and is taking feedback until 30 September. The core idea is "Intent Services": a shared, interoperable layer where participants register, reference and manage consumer-authorised intent across a transaction lifecycle — complementing cryptographic schemes such as AP2 mandates and Mastercard Verifiable Intent. EMVCo also flags future Know-Your-Agent capabilities and agentic transaction indicators, which would eventually surface in authorization data.

Key date 9 Sep 2026

ISO 20022 structured-address cutover: Fedwire moves to November 2027, Swift defers, SEPA decides 9 September

The 14 November 2026 "unstructured addresses rejected" milestone has fragmented by rail. Federal Reserve Financial Services rescheduled the Fedwire Funds Service release to November 2027 (announced 27 August). Swift accepted a community request to extend the CBPR+ migration and deferred all SR2026 payments changes, promising a new date by December; non-payments SR2026 items (T+1 support) go live in Q1 2027. The EPC says its 15 November 2026 end-date for SEPA scheme transactions stands until the Payment Scheme Management Board meets on 9 September. Keep building structured-address support — Swift reports over 60% of traffic still carried unstructured addresses in April.

Key date 20 Sep 2026

Verification of Payee rulebook v1.1, API spec 1.1.1 and API Security Framework 2.1 take effect 20 September

The EPC's March updates to the VOP scheme become effective on 20 September 2026: rulebook v1.1 (urgent change requests from the December 2025 consultation), inter-PSP API specification 1.1.1 (no empty API fields, character-set, timestamp and HTTP-header clarifications) and API Security Framework v2.1, which becomes mandatory for VOP, SRTP and SPAA participants using APIs. The v2.0 change-request consultation closed on 30 June; v2.0 is expected around November.

Key date 16 Sep 2026

Circle's Arc mainnet launches 16 September with Visa and Mastercard among the founding validators

Arc is a USDC-native Layer 1 aimed at institutional settlement: USDC is the gas token, consensus is the Tendermint-derived Malachite engine with sub-500 ms deterministic finality, and execution is an EVM built on Reth, so existing Solidity tooling ports directly. The eleven founding validators include BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI, Standard Chartered, Sumitomo and Visa. For processors it is one more settlement rail to map alongside Tempo and the public chains — watch for USDC/EURC contract addresses on Arc once published.

Key date 18 Jan 2027

Treasury proposes the GENIUS Act issuance rules; only permitted issuers may issue payment stablecoins from 18 January 2027

Treasury's notice of proposed rulemaking (Federal Register, 18 August 2026) implements Section 3 of the GENIUS Act — who may issue, offer and sell payment stablecoins in the US — with a 60-day comment period. The statutory timeline stands: from 18 January 2027 only permitted payment stablecoin issuers (or OCC-registered foreign issuers) may issue for the US market, and from 18 July 2028 digital-asset service providers may not offer non-permitted stablecoins to US persons. A separate FinCEN rule (22 June) sets customer-identification requirements for permitted issuers.

Key date 31 Oct 2026

PCI SPoC and CPoC give way to MPoC; the standalone 3DS SDK standard sunsets 31 October

Two PCI SSC consolidations land this autumn. Software-based PIN Entry on COTS (SPoC) and Contactless Payments on COTS (CPoC) are being retired in favour of Mobile Payments on COTS (MPoC), which covers both PIN entry and contactless acceptance on off-the-shelf devices. Separately, the PCI 3-D Secure SDK Security Standard has a formal sunset from 1 May to 31 October 2026 and becomes a module of the PCI Secure Software Standard. New SoftPOS and 3DS SDK evaluations should target the successor standards.

Agentic payments infrastructure consolidates: Agentic Payments Alliance and AWS AgentCore Payments GA

On 18 August stablecoin-card company Rain announced the Agentic Payments Alliance with Visa, Mastercard, Fiserv, Circle, Solana and Remitly among the founding members — a member-run coalition rather than a spec body. The same day AWS made Amazon Bedrock AgentCore Payments generally available; built with Coinbase and Stripe, it wraps wallet authentication, HTTP-402-style payment execution and spend governance so agents can pay for APIs, MCP servers and content. Together with the x402 Foundation (Linux Foundation, April) and Stripe/Tempo's Machine Payments Protocol, most agent-to-service payments now converge on the 402 handshake PayProbe's decoders already parse.

EMVCo Q2 bulletins: Kernel 2 mag-stripe mode removed, new TRMD bits, EMV 3DS 2.4 and Tokenisation 2.4 drafts

The Q2 2026 EMVCo newsletter lists the specification bulletins that matter for kernel and issuer teams: SB 317 removes the Mag-stripe Mode implementation option from Kernel 2 (Book C-2), SB 314/319 extend Terminal Risk Management Data with Deferred Authorisation and Transit Gate bits plus a payment-system byte, SB 325 corrects Book C-8 (Kernel 8), and GB 60 v3.0 details Phase 1 of the contact-chip feature sunset. Drafts of EMV 3-D Secure 2.4 and Payment Tokenisation 2.4 (PAR use-cases) are with Associates, and TTA Bulletin 293 confirms approved kernels must keep processing after the 2038 date rollover.

Headlines

Aggregated from public RSS feeds and tagged by topic. Each link opens the publisher's article.

  • EMVCoEMVCo Newsletter: Q2 2026

    Message from the Chair of the EMVCo Board of Managers Another busy quarter saw the EMVCo community come together for both our Technical Meeting in Singapore and the annual EMV® User Meeting in Salt Lake The post EMVCo Newsletter: Q2 2026 appeared first on…

  • EMVCo InsightsDefining an EMV® Digital Payment Credential

    In this EMV® Insights post, Sami Tikkala, Chair of the EMVCo Digital Identity and Payments Task Force, provides an introduction to EMVCo’s Digital Payment Credential (DPC) initiative and explains how all industry stakeholders can get The post Defining an EMV®…

    🔑 Tokenization Tester🔍 BIN Lookup