The next phase of payments is agentic, and PayPal wants in

PayPal‘s recent announcements, from the introduction of one-time “PayPal links” to its strategic partnership with AI firm Perplexity, mark more than just a product update. They signal a profound shift in the fintech industry towards “agentic commerce,” where transactions become seamlessly embedded within everyday digital conversations. This evolution presents both a glimpse into a frictionless future and a host of new security and compliance considerations.

The Evolution from Conversational to ‘Agentic’ Commerce

For years, the industry has been talking about conversational commerce, using chatbots and messaging apps to facilitate shopping. PayPal’s move with Perplexity takes this a significant step further. Agentic commerce delegates the entire purchasing process to an autonomous AI, which can research, compare, negotiate, and complete transactions on a user’s behalf. As our research shows, this is no longer about assisting a shopper, but about the AI doing the shopping for them, driven by predefined user parameters.

This raises immediate questions for fintechs. The trust dynamic shifts from the user interacting directly with a brand to trusting a third-party AI agent to make decisions and handle sensitive payment data. How can fintechs ensure that these AI agents are secure, and that transactions are properly authenticated and auditable? The partnership between PayPal and Perplexity highlights that payment providers must now integrate deeply with these emerging AI platforms, leveraging technologies like tokenized wallets and passkeys to ensure security and prevent fraud.

P2P Payments and the Crypto Frontier

PayPal’s new “links” feature simplifies peer-to-peer (P2P) payments, a core part of its business that saw solid growth in Q2 2025. The ability to send a one-time link via any chat platform removes the friction of switching apps or manually entering usernames. This is particularly relevant for the UK and Italy, where the feature is set to roll out soon, catering to a market increasingly reliant on mobile-first transactions.

The planned integration of cryptocurrencies like Bitcoin, Ethereum, and PYUSD into this P2P flow is a critical development. For the fintech sector, this move could significantly boost mainstream adoption of digital assets by making them as easy to transfer as fiat currency. However, it also introduces new regulatory and security challenges. Financial institutions and fintechs must navigate complex reporting requirements and ensure robust, compliant Know Your Customer (KYC) and Anti-Money Laundering (AML) processes are in place. The exemption of friends-and-family transfers from 1099-K reporting in the US is a key detail that helps maintain user privacy while signaling a focus on personal transactions.

What’s Next for Fintech Security?

The move towards agentic commerce and crypto P2P payments highlights several future trends for our industry:

1. New Authentication Paradigms: As AI agents make payments on our behalf, traditional authentication methods like passwords become obsolete. The future lies in secure tokens, biometrics, and contextual authentication to verify the user’s intent without explicit interaction.
2. Data Sovereignty and Privacy: AI agents will require access to vast amounts of personal and financial data to function effectively. Protecting this data becomes paramount. Fintechs will need to provide users with clear controls and granular permissions, ensuring they remain in full control of what their AI agents can and cannot do.
3. The New Cyber-Attack Surface: The interconnected nature of agentic commerce creates a wider attack surface. Threat actors could target AI agents, attempting to manipulate transaction parameters, or exploit vulnerabilities in the API integrations between the AI and the payment provider. We can expect to see an increase in sophisticated social engineering and deepfake-based attacks aimed at tricking users or agents into authorizing fraudulent payments.

PayPal’s new features are a strategic play to own the transaction layer in the age of AI. They challenge fintechs to think beyond traditional payment rails and build security and trust directly into the next generation of conversational and autonomous commerce.

The race is on to secure this new frontier, and a proactive, data-driven approach will be key to staying ahead.