UNIVERSITY · AREA BY AREA · LESSON 9 OF 9

Agent payments and fraud rules: what a business leader needs to decide

Most of the pay area is a policy decision, not a new payment method.

Am I Ready for Agents? editors · 18 September 2026 · Reviewed September 2026

The short of it

The pay area asks three things: is the full price visible before the last step, has your payments or fraud team agreed how to treat a purchase an agent starts, and has anyone looked at agent payment approaches. For most businesses in 2026, the first two matter far more than the third.

Why does the full price matter so much?

An agent comparing options for a customer needs the total: the price with taxes, fees and delivery. A starting price that grows on the last screen makes comparison impossible, and an agent told to stay within a budget may drop the task when the total appears. Self-check question 13 asks whether the full price is shown before the final step.

What happens at your fraud rules?

Fraud tools are built to spot automation, and an agent is automation by definition. A rule that declines anything that looks automated will decline a legitimate customer's agent along with the bots it was meant to stop. Someone needs to own that decision.

Fraud vendors are responding. Forter's agentic commerce page describes knowing the human behind the agent: connecting a store to AI shopping platforms while keeping visibility into who is actually buying. Ask whether your own fraud vendor has a published position on purchases an agent starts.

Named checkout agents already exist. Vercel's verified bots directory lists ryebot, which powers automated checkout on behalf of shoppers with explicit consent.

What are x402, ACP, UCP and MPP?

They are approaches to payments designed for agents. x402 is an open standard that uses the web's 402 Payment Required status code so software can pay per request, typically with stablecoins; in May 2026 the project added batch settlement for very small, frequent payments. ACP, UCP and MPP are other commerce approaches that Cloudflare's Is It Agent Ready scanner checks for. We have not reviewed their specifications, so we only name them here.

None is yet universal. Self-check question 15 counts as yes if someone has looked at them, even just to decide not yet.

What should you decide first?

  • Whether the total price is in the page text before the last step.
  • What your fraud or payments tool does today with a purchase started by a verified agent.
  • Who signs off on accepting, or declining, agent-initiated payments.
  • Whether to adopt, watch or skip each agent payment approach, with a review date.

The first three are decisions you can take with the tools you already have. The fourth can wait until an approach is supported by the platforms you already use.

What should you ask?

Take the pay group on ask your web team to your web and payments teams together. It is the area where the answers most often sit outside the web team, and it is the area that caps the worked example on readiness levels.