a16zWhat Happens When AI Agents Can Spend Your Money?
a16z
Vaults and credentials 0:00
VGS stores payment credentials for major merchants, neo banks, and frontier labs. It sits between merchants, wallets, processors, and card networks, so the merchant does not have to touch the raw card number. The company also helps agents receive those credentials safely.
Agents gain payment power 10:00
The rise of agentic commerce changes the job. A chat tool can now do more than suggest flowers or find a piano teacher. If you give an agent a payment credential in a safe way, it can complete the purchase or booking for you. That is why wallets are rushing to connect to agents, and why the stored credential has become the thing that gives the agent reach.
Wallets and defaults 15:31
Digital wallets replaced the old dead-cow wallet, the physical one full of cards and scraps of payment details. The real fight was over default choice. Card issuers paid to be the card you picked first, while wallets like PayPal, Apple Pay, Shop Pay, and Link tried to become the default layer that sits between you and the merchant.
Agent payments and tokens 18:30
Agentic commerce brings the same problem back. If an agent is buying flowers or anything else for you, it needs access to your payment method or it creates more friction. The newer answer is agentic tokens, which let a wallet hand a safe credential to an agent and still keep the normal merchant relationship, chargeback rights, and later follow-up buys in place.
From closed to open 20:02
Stripe’s current setup works like a walled garden. It can complete a purchase even when the merchant is not directly connected, as in the Walmart chandelier example, but the charge may show up as Stripe rather than the store. That makes support and chargebacks awkward, and it can block later offers like a Walmart Plus sign-up. The newer token standard is meant to fix that while keeping the system open.
Vaults become multiplayer 26:32
VGS is described as a boring vault business on purpose. It stores cards, returns tokens, and lets processors charge without exposing the raw credential again. The shift now is from single-player use to multiplayer use. The same stored credential may need to move among processors, merchants, wallets, and agents, which makes the vault more valuable as more parties rely on it.
Card checks and consent 30:32
Old card payments used three checks. The card had to be valid. The person had to prove they were the owner with a signature and ID. In some places, like casinos, there was also a judgment about whether the person was of sound mind to make the payment. The speaker says agent payments raise the same questions in a new form: the card may be valid, but the hard part is proving the agent has valid authority and deciding who is liable if it spends badly.
Merchants and agents 33:01
The speaker uses a hotel booking request for a daughter’s gymnastics trip to show how these systems are meant to work. The card is checked first. Then the request itself has to be accepted, which means the agent must be registered with the card network. The remaining problem is whether the agent got the task right, or hallucinated. That is where disputes become messy, especially if the network did everything correctly and the mistake was in the agent’s judgment.
Who welcomes agents 36:00
Different merchants will react in different ways. Amazon may block agents because it makes money from ads and wants your attention, while Walmart or small Shopify sellers may see agent commerce as a useful channel. The speaker compares this to open banking, where banks allowed access but only through their own APIs, often with limits and fees. Merchants may also run their own opinionated agents, just like a salesperson with a commission, and consumers will likely gain, even if the shape of that gain is still unclear.
What is underhyped 40:00
The speaker thinks Silicon Valley tends to overhype things, while the rest of the world underhypes them. He does not expect agents to trigger a bank run or wild savings shifts, since normal friction still keeps people where they are. What is underhyped is the amount of demand agents can unlock. He gives the example of a cycling chat where an agent could notice tire advice and buy the tires for him more often than he would on his own. Agents will also save money by canceling forgotten subscriptions, and that savings will likely be spent elsewhere.
Agent payments and rewards 45:00
Agents can already log in and buy things for you, but merchants and networks will adapt. Terms and conditions will matter more at the edge, and systems built on breakage, like card rewards, may start to fall apart if agents only use the best card for each purchase.
VGS and the network layer 47:01
VGS is described as having three overlapping eras: first, the vault for credentials; second, the update layer that refreshes cards through network tokens; and third, the network era, where it brokers credentials among merchants, banks, and issuers. Agentic commerce adds fuel to that network effect.
AI-generated summary. It can be wrong or incomplete - check anything that matters against the original.
