Community Trust ScoreVerified
Autonomous artificial intelligence agents executed 6.4 million x402 payments during a 35-day tracking window that closed on August 26, 2026. A Intelligence report documented these transactions, which began on July 23, 2026. The payments were predominantly small sums exchanged for data access, computing power, and web searches. These operations occurred without a human approving each individual transfer, a practice that conflicts with current financial regulations generally predicated on human oversight for every transaction.
The volume of these autonomous transactions reveals a disconnect between existing legal frameworks and the operational reality of digital agents. A Legal & Regulatory Council discussion addressed this divide, proposing blockchain-based identity solutions to link agents to human owners. The proposed mechanism uses Zero-Knowledge (ZK) proofs to satisfy liability and compliance requirements while preserving user privacy.
Regulatory Blind Spots
The US Electronic Fund Transfer Act, which governs unauthorized transfers, was written in 1978. This legislation predates the concept of autonomous digital agents by decades. While the US GENIUS Act establishes rules for stablecoin issuers, it does not address the specific issue of AI agents spending those coins. Consequently, no current EU or US rule instructs merchants on how to verify the human entity behind a paying agent.
Liability law requires that a specific person can be held accountable for financial actions. Anonymous cryptocurrency wallets do not provide this necessary linkage, leaving a gap in legal recourse. Lawyer Anja Blaj Zajc argues that ZK proofs remove the choice between privacy and accountability. A ZK proof confirms a specific fact, such as the existence of a responsible owner, without revealing the underlying data or the identity of that person. “You would have the ZK proof that proves that there’s indeed a human behind that agent, that there’s going to be somebody responsible for that agent,” Blaj Zajc said.
Institutional Caution and Disclosure
Vyara Savova, a senior policy expert at the European Crypto Initiative, expects most people to use agents for routine tasks involving payments. She describes the proposed ZK-based system as a combination of payment rails, identification rails, and a trust layer. “So then we have the payment rails, the identification rails, basically the trust layer, all in one, which would to a very large extent solve this,” Savova said. The Legal & Regulatory Council favors this blockchain-based identity approach as a practical fix for the current regulatory vacuum.
Major financial institutions have already taken steps to limit exposure to this technology. JPMorgan blocks outside AI agents from accessing customer accounts. Jamie Dimon, the CEO of JPMorgan, has cited the risk of rogue agents as a reason for this restriction. The bank’s stance reflects institutional caution regarding the autonomy of third-party digital actors, even as the technology continues to process millions of small transactions.
EU Disclosure Duties
In the European Union, Article 50 of the EU AI Act became effective on August 2, 2026. This article obliges chatbot providers to disclose that they are AI systems. National authorities can enforce this disclosure rule. Although the AI Omnibus pushed high-risk AI deadlines to 2027 and 2028, the immediate disclosure duty remains in place. The focus now shifts to how these disclosure rules interact with the financial identity requirements for agents that spend money.
Lord Chris Holmes, a Conservative member of the UK House of Lords who sponsored a private member’s bill on AI regulation, emphasizes the importance of transparency in these interactions. “It always needs to be clear AI was used, how it was used, for what purpose, and that consent and trust and transparency were in that mix,” Holmes said. The combination of payment tracking data and emerging regulatory requirements suggests that legal systems will need to adapt to verify agent ownership without compromising user privacy. The next procedural step involves determining how national regulators will interpret existing payment laws in the context of autonomous transactions.
