AI Agents Are Making Payments (And Nobody Can Prove Who Authorized Them)

Agentic commerce was supposed to be the big bang moment of the year. Instead, the industry is learning that identity comes first: you can't let an AI agent transact until you can prove who it is, who it represents, and what it's actually allowed to do. In this episode of The Brief, Vouched's Rosalyn Curato and Dylan Hobbs join Wall Street Blockchain Alliance Chairman Ron Quaranta to unpack the trust layer being built underneath agentic payments, and what happens to fraud, compliance, and liability when the "customer" is an instrument, not a person.

Key Takeaway 

• Agentic identity is the real bottleneck: Rosalyn explains why organizations are less worried about the transaction itself and more worried about whether an agent can be trusted to show up on their site in the first place.

• From claims to verification: Dylan breaks down why the industry needs to stop playing "lookalike contest" with self-declared agent identities and move to cryptographic proof, especially for high-stakes actions.

• The OAuth problem: Handing an AI agent your OAuth token means handing it your identity. Dylan walks through why that model breaks down for agentic use cases.

• Delegation without escalation: How KYA-OS uses attenuation so that permissions narrow, never expand, as agents delegate to other agents down the chain.

• The agent is an instrument, not the cutomer: Why the "responsible party" behind the delegation chain, not the agent itself, has to be the anchor for KYC, BSA, and AML compliance.

• Disputes are already climbing: Rosalyn cites a recent Mastercard report showing agentic commerce is still a fraction of total transaction volume, yet chargebacks and fraud are rising ahead of real adoption.

• SARs need agent-aware baselines: Dylan on why "does this look human" is the wrong question, and how annotating transactions with agent identity and scope sharpens fraud signals.

• Interoperability and what travels with the transaction: How protocols like x402 and AP2 can carry compliance evidence alongside a payment, even without a bank in the middle. 

Speakers

Ron Quaranta — Chairman and CEO, Wall Street Blockchain Alliance; Mesh Policy Advisory Board Member

Ron chairs the Wall Street Blockchain Alliance and serves on Mesh's Policy Advisory Board, where he explores the intersection of emerging technology, digital assets, and financial infrastructure.

Rosalyn Curato — Chief Innovation Officer & GM of Agentic Security, Vouched

Rosalyn leads Vouched's Know Your Agent go-to-market, working closely with engineering to bring agentic identity solutions to market, and now unifies strategy across human and agent identity verification.

Dylan Hobbs — Founding Principal Engineer, Vouched; Author of KYA-OS

Dylan is the founding principal engineer at Vouched and author of Chaos/KYA-OS, the protocol for agent identity, delegation, and authorization.