Visa, BILL and Billtrust pilot AI agents for B2B invoice payments
Visa, BILL and Billtrust have launched what they describe as the first live pilot allowing trusted AI agents to initiate and complete approved invoice payments end to end through supplier portals. The announcement, made in Las Vegas on 20 October 2026, signals a meaningful step change in how agentic AI is moving from back-office automation into the active execution of commercial transactions across enterprise finance platforms.
The core problem the pilot addresses is mundane but commercially significant: despite years of accounts-payable automation, the final step of logging into a supplier portal to submit payment has typically required a human. CAPTCHA systems, bot-blocking mechanisms and authentication requirements were all designed with human users in mind, creating a structural ceiling on how far AP automation could go. The three companies say their pilot breaks through that ceiling.
How the agent authentication stack works
The technical architecture draws on Visa's Intelligent Commerce portfolio, specifically its Trusted Agent Protocol and Agentic Directory. When a buyer's payment has been approved through BILL's platform, the BILL Payment Agent, registered under Visa's protocol, uses tokenised payment credentials to execute the payment. On the supplier side, Billtrust's platform recognises and authenticates the agent, granting portal access without requiring shared login credentials or triggering bot-blocking defences.
Crucially, the agent is not making payment decisions. It only executes transactions that have already been authorised within a buyer's defined approval workflow. Mark Nelsen, SVP and Head of Product for Commercial and Money Movement Solutions at Visa, framed the pilot's ambition precisely: "This pilot applies agentic commerce to a real B2B-payment problem, by having trusted agents complete payments across platforms. Working with BILL and Billtrust, we are testing how identity, payment controls and transaction visibility can make that model work."
The pilot is currently live and processing end-to-end transactions. BILL's platform serves close to 500,000 businesses and processes approximately one per cent of US GDP annually, giving the pilot a commercially material testing base from day one.
The broader convergence signal
The more significant story for cross-sector strategists is what this pilot represents architecturally. Agentic AI is no longer a concept confined to internal workflow tools or co-pilot interfaces. These three companies are building the identity and trust infrastructure required to allow AI agents to operate across organisational boundaries, interacting with third-party platforms on behalf of one business while being recognised and authenticated by another.
This is the scaffolding problem that has quietly constrained every agentic commerce vision: how does a business grant an AI agent permission to act in the world beyond its own systems, without creating new fraud vectors or losing transaction visibility? Visa's Trusted Agent Protocol is a direct attempt to answer that question at network scale, and the involvement of Visa, with its global payments infrastructure, gives the protocol a credibility and potential reach that a pure software startup could not deliver.
The capital and competitive implications extend well beyond accounts payable. Enterprise software vendors across ERP, procurement and treasury management will need to evaluate whether their own portals and APIs can recognise and transact with authenticated agents, or risk becoming friction points in an increasingly agentic supply chain. For investors positioned in B2B fintech, the shift also raises structural questions about interchange and payment-rail economics: the pilot explicitly notes that card payments could expand into supplier relationships that historically settled via ACH or cheque, which carries direct implications for payment-network revenue.
Regulatory scrutiny is the open variable. Agentic commerce that crosses organisational boundaries and involves financial execution will attract attention from payments regulators on both sides of the Atlantic, particularly around liability frameworks when an authenticated agent errs. The pilot's emphasis on preserved buyer controls and full transaction visibility is in part a pre-emptive answer to that question, but the regulatory architecture for agent-initiated commercial payments remains unwritten.