Invoices and Bills, Not Carts: The First Real Agent Payments of the Season

On October 20, Visa, BILL and Billtrust launched the first live pilot for AI agent payments between buyer and supplier platforms, alongside a Sierra-Stripe phone-based bill payment integration, moving money through governed invoice and bill workflows rather than consumer browser carts. The BILL Payment Agent registers through Visa's Trusted Agent Protocol and Agentic Directory, using tokenized payment credentials and cryptographic message signatures; the release FAQ states "The agent does not make payment decisions; it only executes eligible payments already approved by the buyer." The B2B approach contrasts with consumer checkout, where a ChannelEngine Marketplace Shopping Behavior Report 2026 finding shows 58% of consumers have used AI tools to research products but only 17% feel comfortable purchasing directly through AI, and 76% demand a human review and approval step before money changes hands.

The first real agentic commerce https://forkast.news/glossary/agentic-commerce/ payments of the 2026 season cleared this week, but they did not happen in the consumer browser cart. Instead, money moved through governed invoice and bill workflows. On October 20, two deployments went live: a B2B invoice pilot involving Visa, BILL, and Billtrust, announced in a Business Wire release https://www.businesswire.com/news/home/20261020448893/en/Visa-BILL-and-Billtrust-Launch-First-Live-Pilot-for-Trusted-AI-Agent-Payments-Between-Buyer-and-Supplier-Platforms , and a phone-based bill payment integration between Sierra and Stripe. This piece is about where money clears and under what workflow, not about who owns the authorization decision. The Mechanics of the Identity Gate The invoice model succeeds because it relies on a pre-existing structure of trust. As detailed in our coverage of an agent paid an invoice https://forkast.news/the-banks-locked-agents-out-this-week-an-agent-paid-an-invoice-through-the-front-door/ , the authorized BILL Payment Agent is registered using Visa’s Trusted Agent Protocol and Agentic Directory. It operates using tokenized payment credentials and controls aligned with the buyer’s approved payment instructions. The system uses cryptographic message signatures, as specified in the Visa developer documentation https://developer.visa.com/capabilities/trusted-agent-protocol/overview , to validate the agent’s intent. Billtrust uses this protocol to recognize and grant access to the agent, satisfying site protections without requiring shared logins. The payment path is purpose-built and tied to a specific invoice. The release FAQ is explicit: “The agent does not make payment decisions; it only executes eligible payments already approved by the buyer.” Mark Nelsen, SVP and Head of Product, Commercial & Money Movement Solutions at Visa, said: “Businesses should not have to choose between automation and control when making payments. This pilot applies agentic commerce to a real B2B-payment problem, by having trusted agents complete payments across platforms.” Why B2B Clears While the Cart Stalls The difference between these workflows and the consumer cart runs deeper than feature parity; in the invoice model, the approval exists before the agent appears. The buyer has already defined the amount, named the invoice, and registered the agent identity https://forkast.news/learn/what-is-agent-identity/ at the supplier door. The consumer cart model forces an agent to form intent at browse time and present itself at checkout as an unverified guest holding someone else’s credentials. This is the posture behind this month’s bank lockouts https://forkast.news/the-access-tax-amazon-imposed-on-shopping-agents-just-arrived-at-your-bank/ . The numbers show the result. According to the ChannelEngine Marketplace Shopping Behavior Report 2026 https://www.channelengine.com/marketplace-shopping-behavior , 58% of consumers have used AI tools to research products, but only 17% feel comfortable purchasing directly through AI today. The same report finds 76% of consumers demand a human review and approval step before money changes hands. The economics of the B2B pilot are equally pragmatic. The release states: “B2B payments are a strong use case because they already operate within established approvals, controls and buyer rules.” The pilot replaces manual processes for supplier portals, which have historically been friction points, and extends card payments to suppliers previously served only by ACH or check. Archana Prasad, SVP of Payments and Financial Services at BILL, said: “For too long, supplier portals have been friction points, requiring a person to manually complete what should be an automated step.” The shift helps suppliers improve Days Sales Outstanding. The scale of this infrastructure comes from the release’s own background: BILL is trusted by nearly 500,000 businesses and processes roughly 1% of US GDP annually, while the Billtrust network spans more than 20 million buyers and $1 trillion in annual trade credit volume. Kunal Patel, SVP Payments at Billtrust, said: “Agentic commerce will only move forward if businesses can trust agents to operate across systems with the same clarity and accountability they expect from people.” The Voice Lane The second deployment this week demonstrates a different approach to agent-facilitated commerce. In the Sierra and Stripe integration https://forkast.news/sierra-and-stripe-let-agents-take-card-payments-inside-phone-calls-the-agent-never-sees-the-card/ , a customer converses with a Sierra agent and pays by card on the same call. At the moment of payment, the agent moves into a secure mode where the customer enters card digits on the phone keypad. The digits route directly to Stripe. The agent never sees the full card number, only the payment status and the last four digits. Sierra reports that 71.3% of calls where a patient starts a payment with Cedar’s agent, Kora, end in a successful payment, a vendor-reported figure with no published methodology. What Remains Unsolved Despite these live deployments, significant questions remain. The pilot does not establish a formal liability assignment framework, and the number of participating buyers, transaction volumes, and geographic footprints remain undisclosed. The systems are agent-executed or agent-facilitated rather than agent-decided. The Sierra phone flow is strictly agent-facilitated; a human keys the digits. And Sierra’s work with Stripe and other partners on how payments should work when a personal agent acts on someone’s behalf is announced, not shipped. The current reality is that money clears where identity is gated and instructions are pre-approved. Liability for what happens when it goes wrong remains unassigned.