Payments industry news, mapped to the tools you use
What standards bodies, regulators, card networks and the trade press published this week — with a short PayProbe take on the developments that change how you build, test or certify, and links to the decoders, calculators and guides they affect.
Updated 15 Sep 2026 · 101 headlines from 11 sources · refreshed weekly · nothing is fetched in your browser
PayProbe take
Developments that change something for payment engineers, and where on PayProbe to test the impact.
Key date 30 Sep 2026
EMVCo opens its card-based agentic payments framework for comment
EMVCo published the draft "EMV Agentic Payments — Framework for Specifications" on 1 September and is taking feedback until 30 September. The core idea is "Intent Services": a shared, interoperable layer where participants register, reference and manage consumer-authorised intent across a transaction lifecycle — complementing cryptographic schemes such as AP2 mandates and Mastercard Verifiable Intent. EMVCo also flags future Know-Your-Agent capabilities and agentic transaction indicators, which would eventually surface in authorization data.
Passed 9 Sep 2026
ISO 20022 structured-address cutover: Fedwire moves to November 2027, Swift defers, SEPA decides 9 September
The 14 November 2026 "unstructured addresses rejected" milestone has fragmented by rail. Federal Reserve Financial Services rescheduled the Fedwire Funds Service release to November 2027 (announced 27 August). Swift accepted a community request to extend the CBPR+ migration and deferred all SR2026 payments changes, promising a new date by December; non-payments SR2026 items (T+1 support) go live in Q1 2027. The EPC says its 15 November 2026 end-date for SEPA scheme transactions stands until the Payment Scheme Management Board meets on 9 September. Keep building structured-address support — Swift reports over 60% of traffic still carried unstructured addresses in April.
Key date 20 Sep 2026
Verification of Payee rulebook v1.1, API spec 1.1.1 and API Security Framework 2.1 take effect 20 September
The EPC's March updates to the VOP scheme become effective on 20 September 2026: rulebook v1.1 (urgent change requests from the December 2025 consultation), inter-PSP API specification 1.1.1 (no empty API fields, character-set, timestamp and HTTP-header clarifications) and API Security Framework v2.1, which becomes mandatory for VOP, SRTP and SPAA participants using APIs. The v2.0 change-request consultation closed on 30 June; v2.0 is expected around November.
Key date 16 Sep 2026
Circle's Arc mainnet launches 16 September with Visa and Mastercard among the founding validators
Arc is a USDC-native Layer 1 aimed at institutional settlement: USDC is the gas token, consensus is the Tendermint-derived Malachite engine with sub-500 ms deterministic finality, and execution is an EVM built on Reth, so existing Solidity tooling ports directly. The eleven founding validators include BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI, Standard Chartered, Sumitomo and Visa. For processors it is one more settlement rail to map alongside Tempo and the public chains — watch for USDC/EURC contract addresses on Arc once published.
Key date 18 Jan 2027
Treasury proposes the GENIUS Act issuance rules; only permitted issuers may issue payment stablecoins from 18 January 2027
Treasury's notice of proposed rulemaking (Federal Register, 18 August 2026) implements Section 3 of the GENIUS Act — who may issue, offer and sell payment stablecoins in the US — with a 60-day comment period. The statutory timeline stands: from 18 January 2027 only permitted payment stablecoin issuers (or OCC-registered foreign issuers) may issue for the US market, and from 18 July 2028 digital-asset service providers may not offer non-permitted stablecoins to US persons. A separate FinCEN rule (22 June) sets customer-identification requirements for permitted issuers.
Key date 31 Oct 2026
PCI SPoC and CPoC give way to MPoC; the standalone 3DS SDK standard sunsets 31 October
Two PCI SSC consolidations land this autumn. Software-based PIN Entry on COTS (SPoC) and Contactless Payments on COTS (CPoC) are being retired in favour of Mobile Payments on COTS (MPoC), which covers both PIN entry and contactless acceptance on off-the-shelf devices. Separately, the PCI 3-D Secure SDK Security Standard has a formal sunset from 1 May to 31 October 2026 and becomes a module of the PCI Secure Software Standard. New SoftPOS and 3DS SDK evaluations should target the successor standards.
Agentic payments infrastructure consolidates: Agentic Payments Alliance and AWS AgentCore Payments GA
On 18 August stablecoin-card company Rain announced the Agentic Payments Alliance with Visa, Mastercard, Fiserv, Circle, Solana and Remitly among the founding members — a member-run coalition rather than a spec body. The same day AWS made Amazon Bedrock AgentCore Payments generally available; built with Coinbase and Stripe, it wraps wallet authentication, HTTP-402-style payment execution and spend governance so agents can pay for APIs, MCP servers and content. Together with the x402 Foundation (Linux Foundation, April) and Stripe/Tempo's Machine Payments Protocol, most agent-to-service payments now converge on the 402 handshake PayProbe's decoders already parse.
EMVCo Q2 bulletins: Kernel 2 mag-stripe mode removed, new TRMD bits, EMV 3DS 2.4 and Tokenisation 2.4 drafts
The Q2 2026 EMVCo newsletter lists the specification bulletins that matter for kernel and issuer teams: SB 317 removes the Mag-stripe Mode implementation option from Kernel 2 (Book C-2), SB 314/319 extend Terminal Risk Management Data with Deferred Authorisation and Transit Gate bits plus a payment-system byte, SB 325 corrects Book C-8 (Kernel 8), and GB 60 v3.0 details Phase 1 of the contact-chip feature sunset. Drafts of EMV 3-D Secure 2.4 and Payment Tokenisation 2.4 (PAR use-cases) are with Associates, and TTA Bulletin 293 confirms approved kernels must keep processing after the 2038 date rollover.
Headlines
Aggregated from public RSS feeds and tagged by topic. Each link opens the publisher's article.
Watch more: Digital Shift With Amir Wain of i2c Companies have embraced generative artificial intelligence, examining where software could help employees. The truly agentic enterprise must examine what happens when the software can do the work itself. An…
The European Central Bank has launched a call for expression of interest inviting e-commerce and mobile commerce merchants operating in the euro area to take part in the digital euro pilot.
Nearly 1000 US merchants have called on a federal judge to reject the proposed settlement of a lawsuit over Visa and Mastercard credit card swipe fees, saying the deal fails to provide adequate relief and is "riddled with loopholes".
Agentic AI is entering healthcare through the work that happens between a medical decision and the care a patient eventually receives. These systems go beyond summarizing records or answering requests. They can collect information, move between software…
The PCI Security Standards Council (PCI SSC) has published a new standard designed for entities involved in the use of cryptographic keys. The Payment Card Industry (PCI) Key Management and Operations (KMO)™ Standard v1.0 defines security requirements, test…
Klarna, the global digital bank and flexible payments provider, today announced in-app Call Status Detection is live in the Nordics, giving consumers a reliable and simple way to check whether someone calling them is genuinely from Klarna.
Incoming Mastercard Chief Financial Officer Ling Hai, who assumed that role Aug. 3, outlined a growth-focused capital allocation strategy that includes frontline sales, targeted acquisition and infrastructure expansion Thursday (Sept. 10) during the Goldman…
Revolut has confirmed that it disclosed sensitive customer information, including passports, after receiving fraudulent requests sent from a legitimate government agency email domain.
Worldline [Euronext: WLN], a European leader in payment services, today becomes one of the first in Europe to launch a payment handler for the Universal Commerce Protocol (UCP), an open standard for agentic commerce co-developed by Google and industry…
Businesses may be able to strengthen their fraud defenses by putting the bank connections they already have to fuller use. The PYMNTS Intelligence report “Payment Protection: Why Firms Still Aren’t Real-Time Ready” found in August that nearly all firms have…
Polish mobile payment network Blik has run its first agentic payment transaction, under which a user authorised an agent to search for a specific product and pay for it when it became available.
Cryptocurrency platform has partnered with fintech firm Moov to boost stablecoin capabilities for community banks ahead of the US Senate votes on the CLARITY Act.
Overview: EPC scheme participants status Version Sept 2026 Robert Saunders Fri, 11/09/2026 - 16:05 Other Adherence This document provides a high-level overview of participation in the SEPA payment schemes, showing how financial institutions across European…
Electric vehicle manufacturer Rivian automated one of the more tedious jobs in corporate finance: tracking how much to set aside for custom manufacturing tools it has ordered but not yet received a bill for. Rivian built an artificial intelligence system on…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
The trillion-dollar question hovering around agentic commerce is why agents would hold money at all. After all, if a multinational eventually operates, say, 10,000 artificial intelligence agents buying software, booking travel, procuring inventory, managing…
Arva AI, backed by Y Combinator and Google's AI Fund, announced the launch of its Research Lab, a research division building the proprietary models and infrastructure that let banks automate highest-risk decisions, already used by global financial…
Welcome to our podcast series, Coffee with the Council . I'm Bryli Muse, Marketing and Communications Analyst for the PCI Security Standards Council. In today's episode, I'm excited to celebrate the 20th Anniversary of the Council.
While consumers are increasingly using AI across the shopping journey, only 23% of US consumers trust GenAI to handle payment transactions on their behalf, according to new Visa research.
EPC delays address format migration timeline Robert Saunders Thu, 10/09/2026 - 06:30 Related Article November 2026 end-date of the unstructured address format for EPC payment scheme transactions The European Payments Council (EPC) has decided to delay the…
HelmGuard has raised $7.3 million in seed funding for its platform that uses AI agents to automate governance, risk and compliance in regulated sectors such as financial services.
As digital assets become an increasingly important part of the payments universe, Nacha's Payments Innovation Alliance is unveiling its newest initiative: the Next-Gen Currency Project Team.
US Bank has executed of a live intrabank pilot transaction between North America and Europe that utilised the bank's proprietary US dollar-backed stablecoin, USBDC.
Which? is warning of a nasty screen-sharing scam where fraudsters pose as banks and the Financial Conduct Authority (FCA) to hack into accounts and steal sensitive information.
With the new no-surcharge rules for card payments in Australia starting on 1 October 2026, the industry has released a source of information for consumers and businesses on what will change, what won’t, and what they need to know ahead of the changes taking…
Block aims to establish a national trust bank that would provide custody and related fiduciary services, including those for bitcoin and stablecoins, the company said in a Tuesday (Sept. 8) press release. Block said in the release that it submitted an…
Broadridge (NYSE: BR) today announced the launch of DLX, a fully integrated, end-to-end tokenization and digital asset infrastructure platform that enables financial institutions to operate across tokenized and traditional markets through a connected…
BVNK and Marqeta, Inc. (NASDAQ: MQ) today announced a partnership to deliver stablecoin-backed card capabilities to crypto-native and non-crypto companies.
Card platform upgrade calendars are getting shorter. The next major deadline may arrive before issuers finish planning for the last one. Card issuers face pressure from several directions. Fraud keeps changing, customers expect faster digital services and AI…
Funding Circle, the UK's leading SME finance platform, today announces that Lisa Jacobs has informed the Board of her intention to step down as CEO, by no later than September 2027. Lisa joined Funding Circle in 2012 and was appointed CEO in January 2022.
IXOPAY, a leader in payment infrastructure enabling fluid commerce, today announced the launch of the IXOPAY Agentic Suite, a flexible set of tools designed to help merchants prepare for both new agentic buying experiences and the growing role of AI in…
L&T Finance Ltd. (LTF), one of the leading Non-Banking Financial Companies (NBFCs) in the country, announced a partnership with Pine Labs Ltd., a leading global payments technology company, to integrate Agentic Storefront into the L&T Finance PLANET App at…
PayPal is working with crypto specialists MoonPay and M0 on an infrastructure platform that lets developers create application-specific stablecoins backed by PYUSD.
TerraPay, a global money movement company, and Alipay+, Ant International’s unified wallet gateway, today announced a strategic partnership to enable seamless cross-border QR payments for digital wallets, significantly enhancing global payments…
Welcome to the PCI Security Standards Council’s blog series, The Quantum Leap: Preparing for Post Quantum Cryptography. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to share…
MADFIN, a UK fintech focused on modern card acquiring, has partnered with Tribe Payments, a global payments fintech specialising in issuer and acquirer processing, to power its transaction processing and 3D Secure infrastructure as the company scales its…
Artificial intelligence may be changing where consumers decide what to buy before it changes where they pay for it. “We are seeing adoption for shopping, but not yet for autonomous payments,” Visa CEO Ryan McInerney said Tuesday (Sept. 8) at the Goldman Sachs…
Visa is combining its settlement data with blockchain lending infrastructure to help stablecoin-linked card programmes and fintechs access working capital.
Stablecoin-issuer Circle has agreed to buy Tazapay, a Singapore-headquartered B2B cross-border payments infrastructure provider. Financial terms of the deal were not disclosed.
CRIF – the global leader in credit and insurance information, analytics and solutions – has today launched its AI-powered fraud detection services in the UK, helping financial providers tackle tampering during customer onboarding.
More than one in ten online shoppers are expected to routinely use AI agents to purchase products on their behalf by 2030, according to a new Mastercard report.
The payments and retail industries are asking the wrong question about agentic commerce. The question is not whether an artificial intelligence agent can complete a purchase on its own, because many agents already can. It is whether the merchant wants to let…
Real-time payments are giving banks another reason to confront technology they have spent years working around. The PYMNTS Intelligence report “From Adoption to Execution: How FIs Are Turning Real-Time Payments Into Competitive Advantage” is the August…
Birmingham, UK SuperTech has launched the Open Innovation Lab: Fighting Fraud, a new innovation programme designed to bring together financial institutions, legal-sector organisations, fraud specialists, regulators, academics and technology innovators to…
While the digital currencies have gained some acceptance, there is a growing interest by financial institutions in tokenized deposits as an alternative.
01 September 2026 – EMVCo – the technical body that creates and manages EMV® Specifications and programmes – has released a draft framework to help promote secure, interoperable and scalable card-based agentic payments. The framework The post EMVCo Requests…
In the first of a dedicated EMV® Insights series, Clinton Allen, Chair of the EMVCo Agentic Payments Task Force, explains how EMVCo is supporting the development of card-based agentic payment solutions and the approach it The post How EMVCo is Working to…
November 2026 end-date of the unstructured address format for EPC payment scheme transactions Robert Saunders Fri, 28/08/2026 - 10:27 The European Payments Council (EPC) notes that on 27 August 2026, Swift announced in a press release its decision to extend…
Platforms like DoorDash, Meta, and Deel already enable stablecoin payouts for global workers. We surveyed 2,300 workers in 20 countries to see what's driving stablecoin demand, where the opportunity is highest, and how other platforms can adapt.
The upcoming PCI SSC Asia-Pacific Community Meeting in Kuala Lumpur, Malaysia, 11-12 November, features a dynamic agenda packed with expert speakers , thought-provoking keynotes, valuable networking opportunities, and the latest insights on payment security…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
This episode of Coffee with the Council is brought to you by our podcast sponsor, Clone Systems . Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards…
Registration is now open for the PCI Security Standards Council's 2026 Community Meetings ! Join payments industry professionals from around the world for inspiring keynotes, valuable networking opportunities, expert-led sessions, hands-on workshops, an…
Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards Council. Today, I'm excited to bring you a preview of our 2026 Asia-Pacific Community Meeting keynote…
The upcoming PCI SSC Europe Community Meeting in Edinburgh, Scotland, 20 - 22 October has a full agenda packed with exciting speakers , engaging keynotes, networking opportunities, updates on industry trends, and insights and strategies on best practices.
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
The PCI Security Standards Council (PCI SSC) has published a document which maps the PCI Data Security Standard (PCI DSS) v4.0.1 to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0. With both organizations sharing…
To understand what can influence win rates, we analyzed evidence packets from one million disputes over a 16-week period. Here’s what the data shows and what it means for how you mitigate disputes.
Join us in Vancouver, BC, Canada, September 15-17 for the 2026 PCI SSC North America Community Meeting ! The entire payment card industry is invited to come together as a community for important Council updates, insights on industry trends, strategies on best…
EDS API Specifications Version 1.4 Ruta Murnikaite Fri, 17/07/2026 - 10:25 Other EPC Directory Service (EDS) Verification Of Payee (VOP) SEPA Request-to-Pay (SRTP) The EPC Directory Service (EDS) is accessible by scheme participants and their technical…
The PCI Security Standards Council (PCI SSC) is pleased to welcome its newest team member, Ed O’Neill, Head of Business Operations and Risk Management. In this new role, Ed will be responsible for business operations, enterprise risk management, governance…
Message from the Chair of the EMVCo Board of Managers Another busy quarter saw the EMVCo community come together for both our Technical Meeting in Singapore and the annual EMV® User Meeting in Salt Lake The post EMVCo Newsletter: Q2 2026 appeared first on…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
PCI Security Standards Council Community Meetings bring together a global community dedicated to securing payment ecosystems. In addition to the main agenda, attendees have the opportunity to deepen their experience through interactive workshops designed to…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
The PCI Security Standards Council (PCI SSC) has launched its Training Venue Host Program , creating a new way for organizations with suitable training facilities to support payment security education while bringing industry training directly to their teams.
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
This episode of Coffee with the Council is brought to you by our podcast sponsor, Clone Systems . Welcome to our podcast series, Coffee with the Council. I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards…
Recognising Two Decades of Impact: Dag‑Inge Flatraaker Wins EPC Distinguished Contributor Award Robert Saunders Wed, 24/06/2026 - 11:30 An interview with June 2026 Distinguished Contributor recipient Dag-Inge Flatraaker Disclaimer: The views expressed in this…
In this EMV® Insights post, Sami Tikkala, Chair of the EMVCo Digital Identity and Payments Task Force, provides an introduction to EMVCo’s Digital Payment Credential (DPC) initiative and explains how all industry stakeholders can get The post Defining an EMV®…
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in supporting the evolution of the PCI security standards and…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
The PCI Security Standards Council (PCI SSC) has released a new information supplement, PCI DSS v4.x: Guidance for Compensating Controls and the Customized Approach . The document provides practical guidance to help assessed entities and assessors navigate…
Welcome Dreamplug Technologies Private Limited, operating under the brand name CRED, a new Principal Participating Organization (PPO) at the PCI Security Standards Council! In this special spotlight edition of our PCI Perspectives Blog, CRED CISO, Himanshu…
From 3 June to 20 July, eligible PCI SSC stakeholders are invited to review and provide feedback on the currently published PCI Data Security Standard (PCI DSS) v4.0.1 during a six-week request for comments (RFC) period.
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about…
Welcome to our podcast series, Coffee with the Council . I'm Alicia Malone, Director of Communications and Public Relations for the PCI Security Standards Council. In today's episode, I'm excited to announce that the Council will open the nomination period…
The PCI Security Standards Council (PCI SSC) has published a major revision to the PCI PIN Transaction Security (PTS) Hardware Security Module (HSM) Modular Security Requirements from version 4.0 to version 5.0. This update represents a significant evolution…