Agents can pay a cent now. Nobody has decided who answers when they pay wrong.

The web has had a status code for payment since 1997. HTTP 402, "Payment Required," shipped in the HTTP/1.1 spec with one line of explanation: "This code is reserved for future use." (IETF, RFC 2068, January 1997). For almost thirty years nobody used it.

In 2026 that changed, and the reason is not that crypto beat cards. The payer stopped being a person.

#Why tiny payments failed for people

The old problem was never the plumbing. Nick Szabo described it in an early essay on micropayments: every payment asks a person to decide whether it is worth it, and "There seems here to be a fundamental cognitive bottleneck." (Nick Szabo, "The Mental Accounting Barrier to Micropayments," Satoshi Nakamoto Institute library). Forrester put the 2026 version bluntly: "For 30 years, micropayments failed for one reason: The payer was human." (Forrester, March 2026).

The second problem was the fee floor. Visa's own published US interchange schedule sets card-not-present debit interchange at 1.65% plus 15 cents for exempt issuers and 0.05% plus 21 cents for regulated ones (Visa USA interchange reimbursement fees, April 18, 2026). On a one-cent charge, the fixed part of debit interchange alone is 15 to 21 times the payment, before any processor fee.

An agent does not hesitate over a cent, and a stablecoin transfer on a modern network costs less than a cent to settle (Chainalysis, October 14, 2026). Stripe's own documentation puts the two floors side by side: "For card payments through Shared Payment Tokens (SPTs), the minimum amount is 0.50 USD. For stablecoin payments, the minimum amount is 0.01 USDC." (Stripe docs, Machine Payments Protocol). That fifty-to-one gap is the whole story in one line.

#What is actually live, and since when

The last row matters as much as the first. The most visible consumer checkout of 2025 was narrowed within about six months. The rails that are sticking are the boring ones underneath.

#What the numbers say, once you read past the headline

Published counts of agent payments come from different parties measuring different things, and they do not agree with each other. The most careful independent count is TRM Labs', which found "roughly USD 52.7 million across 198.9 million settlement transactions mediated by known x402 facilitators since May 2025." Then it removed self-payments and bulk flows and tested what was left for agent-like behavior: "Applied to the USD 25.62 million of screened x402 commerce, the two tests put the share that appears to be agentic at between 0.6% and 7.5%." (TRM Labs, September 9, 2026). TRM says its test may undercount single-purpose agents. Chainalysis traced much of the earlier surge to meme-coin farming (Chainalysis, June 3, 2026). Its October report calls the field an experimentation phase.

What is real is the shape. By count, the payments are tiny: "Over 87% of payments fall between a hundredth of a cent and a dime, with the most common size between one and ten cents." (Chainalysis, October 14, 2026). One of the largest categories is agents paying for model inference. And the demand signal is enormous: Cloudflare's chief strategy officer said "We have a billion 402 responses every single day on the Cloudflare network" (CoinDesk, May 5, 2026). Those are bots being told to pay, not payments.

People are slower than the plumbing. Gartner found "consumer willingness to let AI make purchase decisions topped out at 11% across lower-stakes categories" (Gartner, May 27, 2026). The early market is machines buying from machines, not shoppers handing over their wallets.

#How the government is moving: slowly, and mostly not about agents

The US stablecoin law exists but is not in force. The GENIUS Act was signed July 18, 2025 (Congress.gov, S.1582). Treasury's proposed rule names January 18, 2027 as the expected effective date (Treasury, August 17, 2026). Every substantive implementing rule we found is still a proposal. The broader market-structure bill, the CLARITY Act, failed a Senate cloture vote 49 to 50 on September 15, 2026 (Congress.gov, H.R.3633).

The clearest official statement connecting agents to micropayments came from one Federal Reserve Governor, speaking for himself. Christopher Waller said agents will need to make micropayments, and "Micropayments like these favor payment rails with lower flat fees." He also asked the question at the center of all this: "Who is on the hook if an agent makes the wrong purchase?" (Federal Reserve, Governor Waller, September 29, 2026).

Bank supervisors have not caught up either. The OCC's updated model-risk guidance says: "Generative AI and agentic AI models are novel and rapidly evolving. As such, they are not within the scope of this guidance." (OCC Bulletin 2026-13, April 17, 2026). The most concrete federal work on agents is voluntary standards: NIST's AI Agent Standards Initiative on agent identity and authorization (NIST, February 2026).

Outside the US, 2026 moved faster on the money side. The EU's transition period for crypto-asset providers under MiCA ended July 1, 2026 (ESMA). Hong Kong granted stablecoin issuer licences on April 10, 2026 (HKMA).

One popular claim needs trimming. Stablecoin issuers do buy a lot of short-term Treasury bills, but the San Francisco Fed says "their share of holdings is relatively small." If the recent trend continued, their demand would roughly double to about $400 billion by the end of 2030 (Federal Reserve Bank of San Francisco, September 2026). We covered the dollar side of this in The dollar isn't dying.

#What most people miss: the first binding rules are rulebooks, not laws

While Congress debates, the card networks are writing the rules that bind today, at least for card payments. Visa's rulebook has carried a section on agentic payments since October 2025, and its April 18, 2026 edition extends it to digital wallets. A provider must register with Visa, state when the cardholder's instruction expires, and "Obtain Cardholder acknowledgement that they are responsible for actions taken by the Agentic Payment Provider." It also may not bundle several agent purchases into one transaction (Visa Core Rules, April 18, 2026, section 4.1.24).

Read that acknowledgement next to existing law. Regulation E (12 CFR 1005) covers debit and bank transfers, not credit cards. Under the CFPB's official interpretation of it, when a consumer furnishes an access device and grants authority to a person who exceeds it, "the consumer is fully liable for the transfers unless the consumer has notified the financial institution that transfers by that person are no longer authorized." (CFPB, Regulation E official interpretation). Whether an AI agent counts as that kind of person is not settled in the rule text. A June 11, 2026 law-firm analysis says the bank-versus-customer split is clear and the open fight is between the user and the agent platform, which no statute covers (Goodwin, June 11, 2026). This is general information, not legal advice.

And on the fastest rails there is no undo. A stablecoin payment is final, and no stablecoin rail carries a chargeback (Astraea Law, August 31, 2026). Even a Coinbase speaker on Stripe's stage said that for a large purchase "card rails are great for that because you have chargebacks" (Stripe Sessions 2026). Finality is the product for a one-cent API call and the problem for a two-thousand-dollar order.

So the open question in 2026 is not whether an agent can pay. It is who allowed this payment, within what limit, and where the proof is. The answer most likely to hold up is a record. Goodwin's advice to companies is direct: "Capture authorization in retrievable form. A voice prompt or checkbox is not enough." (Goodwin, June 11, 2026).

#What an operator should do now

1. Do not plan on headline volumes. The measured agent share of agent-payment rails is small, and the counts disagree. Plan on the cost floor, which is real.
2. If you sell something digital in small units, per-use pricing is now practical. Reports, data pulls, API calls and inference can be priced per request without a subscription, and one processor can take both cards and stablecoins. Below 50 cents only the stablecoin leg works today: Stripe's floors are 0.50 USD on cards and 0.01 USDC on stablecoins.
3. Give any agent that spends money a scoped, expiring permission with a cap. The designs converge on this. With Stripe's agent wallet, "a one-time-use card is issued per task, and you approve each payment" (Stripe, Sessions 2026). Lightning Labs shows a parent agent handing a worker a credential with a 500-sat spending cap (Lightning Labs, March 11, 2026). Mastercard's Verifiable Intent is a tamper-resistant record of what a user authorized (Mastercard, March 5, 2026).
4. Keep a receipt for every action an agent takes: who authorized it, under what limit, what it did, and when. You will need it for the dispute, the audit and the refund the rail cannot give you. We build our own agents this way, and we wrote about why in Agents need the same verbs people use.
5. Put January 18, 2027 on the calendar. That is when US stablecoin rules are expected to start applying. Visa's agent rules already apply to card-based agent payments.

The cent was the easy part. The permission is the product now.