Trusted AI Agent Payments Go Live in Visa, BILL Pilot

Visa, BILL and Billtrust have launched the first live pilot for trusted AI agent payments that initiate and complete approved buyer invoice payments end to end through supplier portals, according to a joint announcement issued October 20, 2026. The pilot is already processing real end-to-end transactions between participating buyers on BILL and suppliers using Billtrust.

The announcement marks a step beyond demos: the agent does not merely prepare a payment for a human to approve. It authenticates to a credentialed supplier portal and completes a live card transaction under controls the buyer defined in advance, while the supplier keeps oversight of every transaction that lands in its system.

How the payment flow works

The flow starts on the buyer side with what Visa calls the authorized BILL Payment Agent. Registered using Visa's Trusted Agent Protocol and Agentic Directory, the agent uses tokenized payment credentials and controls aligned with the buyer's approved payment instructions to issue payments on behalf of BILL's customers, according to the announcement. Tokenized credentials swap the real card or account number for a stand-in, so sensitive details never travel with the payment, as Crypto Briefing explained in its breakdown of the pilot.

Once the payment is initiated, Billtrust leverages the same Trusted Agent Protocol to recognize, authenticate and grant access to the authorized agent, enabling BILL to complete the invoice payment on the customer's behalf. This agent authentication can satisfy the site protections historically provided by CAPTCHA and other bot-blocking mechanisms, without requiring an additional agent login, according to Visa. WebProNews reported that the companies characterize the portal step as one of the last major manual chores in accounts payable: even after an invoice is approved, paying through a supplier portal has typically meant an employee logs in and types in the payment details by hand.

Buyers do not need to share their supplier-portal credentials with the agent, and the agent is not making payment decisions. It only executes eligible payments that have already been approved by the buyer, according to the pilot's FAQ. The buyer decides which invoices get paid and sets the payment instructions; the agent carries them out.

The trust stack underneath the pilot

The pilot runs on capabilities within the Visa Intelligent Commerce portfolio, which Visa has been assembling as its agentic-commerce platform. That includes the Trusted Agent Protocol, the Agentic Directory where the BILL Payment Agent is registered, and tokenized payment credentials. Visa launched the Trusted Agent Protocol in October 2025 so websites could recognize authorized AI agents, TokenPost noted in its coverage, and this pilot is one of its first production-scale applications.

Visa's announcement says the pilot enables five things at once: a recognized and authenticated AI agent acting on behalf of an identified buyer, tokenized payment credentials rather than shared supplier-portal logins, payment controls tied to the customer's approved payment instruction, a purpose-built payment path tied to the specific invoice, and visibility into the authorization and completion of the payment.

Mark Nelsen, Visa's SVP and head of product for Commercial and Money Movement Solutions, said businesses should not have to choose between automation and control when making payments, and described the pilot as a test of how identity, payment controls and transaction visibility can make the trusted-agent model work. Archana Prasad, BILL's SVP of Payments and Financial Services, said supplier portals have been friction points that require a person to manually complete what should be an automated step; with Visa and Billtrust, BILL's AI-powered payments close that gap so the payment gets done, the supplier gets paid faster, and finance teams get their time back. Kunal Patel, SVP of Payments at Billtrust, said agentic commerce will only move forward if businesses can trust agents to operate across systems with the same clarity and accountability expected from people, and described the pilot as connecting buyer-side invoice approval with supplier-side payment acceptance.

Why supplier portals are the last manual mile

Until now, many payment portals relied on human authentication requirements that limited how approved payments could be automated, as reported by PYMNTS. That constraint kept one of the most routine steps in B2B payments stubbornly manual. The FAQ for the pilot calls the portal step one of the last major manual steps in many accounts payable workflows.

For suppliers using Billtrust, the pilot creates a way to recognize and accept payments initiated by trusted business agents, helping release trapped cash while retaining the information needed to process and reconcile each payment within their existing payment acceptance policy. Billtrust describes itself as the B2B Cash Generation Platform, powered by a buyer network of more than 20 million buyers and $1 trillion in annual trade credit volume. Under the pilot, faster and more seamless portal payments could improve Days Sales Outstanding, and buyer-side platforms like BILL could expand card-payment opportunities to suppliers that historically supported automated payments primarily through ACH or check.

For buyers using BILL, automating the last manual step gives finance teams back the time they would spend manually keying information into supplier payment portals. BILL says nearly 500,000 businesses trust it to move, manage and maximize their money, with a member network of more than 9 million, and its platform processes roughly 1 percent of US GDP annually.

The pilot is currently live and processing end-to-end transactions with participating buyers using BILL and Billtrust suppliers. As it progresses, Visa, BILL and Billtrust say they will continue exploring opportunities in agentic payments. For the agent economy, the signal is clear: trusted AI agent payments are moving beyond automation into acting on behalf of buyers and suppliers in real commercial transactions, with identity and controls doing the work that passwords and CAPTCHAs used to do.