AI agents are about to start spending money. The question isn't whether, it's whether we'll know who's spending, on whose behalf, and if anyone can stop them when something goes wrong.
That brought 30 people to Belgrade and online last week for a two-day workshop on Controlling Agentic AI in Payments — practitioners, identity architects, regulators, researchers, and builders from across the globe.
My three takeaways:
1️⃣ Agent identity is a prerequisite, not a nice-to-have. If your agent can't prove it represents your company — verifiably, at machine speed — you don't have an agentic payment. You have a huge risk.
2️⃣ Privacy in B2B is structural. Your counterparty list, pricing, supplier relationships are trade secrets. This is exactly why we're building
@0xCurvy and
@0xCropsCash - verifiable, policy-compliant agent transactions without leaking the commercial data underneath.
3️⃣ The market isn't waiting.
@Mastercard @Visa @stripe @Google all shipped agentic payment infrastructure in March–April alone. x402 : 43M transactions. Enterprise B2B hasn't started yet. The window to shape the standards is now.
Thank you to Ivan Mortimer-Schutts, Aydar, and the whole
@GLEIF team for co-anchoring the workshop with us. To Ognjen Kurtic, Jovan Milovanovic, Christoph Berndt (Finspot), and
@LavOdorovic (Relio) for being the inspiration, contributors from the start and from bringing own domain to the workshop. To
@HackBugs, who's been working at the AI/identity crossover, for the sharpest framing of the two days. To Professor
@ThomasHardjono (
@MIT) for pushing the identity conversation further than we'd mapped. To
@ajmalsamuel (
@ftsmoney) J.G Yeom Gene C. (YourData), Maxim Neshcheret (
@CMASmallSystems) Vladimir Simjanoski (Blokverse) and
@ChrisOstrowski_ for the global perspective and active contribution to the workshop.
To Marija Vlajković and
@WorldBankGroup,
@IFC_org, and SEE UP Accelerator teams — thank you for your feedback, contribution and the space, literally and figuratively.
We're writing a joint discussion paper with
@GLEIF on agentic payments — agent identity standards, AMC/AARC credential framework, use cases, policy landscape. Comment below if you want early access.
We're also building a product together. Because privacy and agent identity aren't two isolated problems — they're the same problem from different angles. Half-solved on one side means fully broken on the other.
You need both. At the moment of transaction. That's what we're building — and last week confirmed we're not building it alone.