An AI agent can now start and finish a supplier invoice payment without a person logging into a vendor portal and typing in card details. Visa, BILL and Billtrust say a live pilot is doing exactly that, and the agent is limited to payments a buyer has already approved. The pilot was announced October 20, 2026, and Visa's related release is dated October 21.
The companies call it the first of its kind. Visa's pilot release describes agents that begin and complete buyer-approved invoice payments through supplier portals. The Next Web reports that the pilot is already processing real transactions between BILL buyers and Billtrust suppliers.
How the Visa AI agent payments pilot works
The mechanics matter most to finance teams. BILL's payment agent is registered through Visa's Trusted Agent Protocol and its Agentic Directory. It pays with tokenized card credentials and stays within limits the buyer approved. AIM Media House describes the same setup.
The supplier side is where the pilot changes the most. Billtrust uses the same protocol to verify the agent, a check the companies say can replace CAPTCHAs and bot-blocking tools. No separate login is needed.
The flow runs in four steps:
- The buyer approves an invoice and sets spending limits in advance.
- BILL's registered agent submits the payment through the supplier's portal.
- Billtrust verifies the agent through the Trusted Agent Protocol rather than a CAPTCHA.
- The payment goes out on tokenized card credentials within the approved limits.
The companies say the agent does not decide what to pay. It only completes payments that have already been approved, a narrower role than the phrase "AI agent" tends to suggest.
What the pilot does not yet do
The scope is narrower than the headlines. The Neuron reports that the pilot is limited to previously authorized payments. It does not confirm general availability, and it gives no sign that agents can pick recipients or approve purchases on their own.
No results have been published yet. As of the latest coverage found, Adyog Pulse had seen no pilot results, so error rates and failure cases remain unknown. The pilot is also a permission-layer test, not a public-blockchain settlement launch, according to The Currency Analytics.
Sources differ slightly on the date. Adyog Pulse and The Currency Analytics give October 20, while AIM Media House points to a Visa release dated October 21. Readers who need the official timeline should check Visa's newsroom directly.
Which businesses could feel it first
BILL has nearly 500,000 business users. Billtrust's network spans more than 20 million buyers and $1 trillion in annual trade credit volume, according to figures in daily.dev's summary of the announcement. Those numbers describe the size of the networks, not the pilot. No count of agent-initiated invoices has been published.
For accounts-payable teams at businesses that use BILL or Billtrust, the benefit is simple: fewer manual entries in supplier portals. Consumers are not directly enrolled in the pilot, based on the coverage found, so this is a business payments story for now.
Why the Trusted Agent Protocol matters to suppliers
The approach uses the Trusted Agent Protocol to prove that an agent is known, constrained and acting within instructions. According to The Currency Analytics, that is different from simply letting a bot in. Visa's pitch is that agents can avoid shared logins and bot checks while the buyer keeps control.
Visa's company statement sums up the goal in one line: "Businesses should not have to choose between automation and control." Darren Parslow, Global Head of Visa Commercial Solutions, added: "Businesses are moving quickly to automate the work around payments." SecurityBrief published his remarks.
Visa places the pilot inside its Intelligent Commerce portfolio, next to a supplier analytics tool and new commercial virtual-card fraud controls. That bundling suggests Visa wants to be the trust layer for agent spending, not just the rail that moves the money.
USA 24 has reported that major U.S. banks are blocking unvetted AI agents from customer accounts. The Neuron notes that banks are restricting third-party agents while regulators examine the risks. This pilot runs the other way, granting access only for approved, tokenized payments. A similar approval-first design appears in Anthropic's Claude Duet, which watches work apps and asks before it acts.
Who is liable when an agent pays the wrong amount
The biggest open question is liability. The pilot materials do not say who covers an unauthorized transfer or a payment that goes beyond the buyer's instructions. The Neuron treats that as unresolved, and nothing in the coverage found answers it.
Until the rules are written down, businesses should plan as if the burden of setting limits correctly falls on them. Card dispute rights are the other fallback. Read your card issuer's dispute terms before turning on automated payments, because a vendor's assurance and a bank's obligation are not the same thing.
What accounts-payable teams should do now
These steps are general good practice rather than guidance from the companies:
- Ask BILL or Billtrust whether agent-initiated payments are enabled on your account.
- Set approval limits and dual-approval rules before any automation runs.
- Keep a written record of which invoices and payment types were pre-approved.
- Check your card issuer's dispute terms for unauthorized charges, and note any reporting deadlines.
- Review agent payment activity against the approved list on a regular schedule.
What to watch next
Three signals will show whether this moves past a pilot: general availability, published results with error rates, and written liability rules. Expansion beyond BILL and Billtrust is unannounced, and whether other card networks or banks adopt similar agent-payment rules is unknown.
If Visa publishes results, the most useful figure will be how often an agent is refused, or how often a payment needs a human correction. That number will say more about readiness than the launch announcement did, and it will help small businesses judge how much trust approved-payment automation deserves.
