a16z Podcast

Terry Angelos on how payment credentials turned AI agents into actors

Terry Angelos· Chief Strategy Officer at VGS at VGS
·~51 min·English·a16z
AgentsAI InfrastructureBusiness Strategy
TL;DR

Once AI agents got access to payment credentials they jumped from recommending purchases to making them, and that one change is forcing a rebuild of the whole trust stack — vaults, tokens, chargebacks, merchant rules, and who is liable when an agent gets it wrong.

01Core Mental Model

From Spectators to Actors

<strong>A payment credential is what turns an agent from an advisor into a buyer.</strong> Without one it can only recommend; with one it can complete the whole task.

In the last 3 months, we've had this huge leap from agents being what I would call spectators to agents being actors because they effectively have arms and legs, which are payment credentials.

— Terry Angelos, a16z Podcast
Key Insight
The jump is not a smarter model — it is access. The same agent that gave a recommendation last year is useful this year only because it can now reach into a credential and finish the transaction.
02The Landscape

The Wallet Wars

<strong>Every consumer wallet is now racing to be the one an agent reaches for.</strong> The prize is the wallet with the most stored consumers and the widest merchant reach.

we sort of have kicked off what I kind of call the wallet wars where every wallet is now rushing to connect to the agents.

— Terry Angelos, a16z Podcast
Key Insight
Wallet wars are not new — a decade ago issuers paid to be top-of-wallet inside apps like Uber. What is new is the buyer: the wallet is no longer fighting for a human's attention at checkout, but to be the credential an agent calls by default.
03Why the Vault Got Valuable

From Single-Player to Multiplayer Vaults

<strong>A credential vault gets more valuable the moment more than one party needs the same card.</strong> Agents and multiple processors turn a quiet storage business into shared infrastructure.

vaults are going from single player to multiplayer. And that makes them a lot more valuable.

— Terry Angelos, a16z Podcast
Key Insight
A vault that holds a third of US e-commerce credentials by GMV was already a strong position. Agentic commerce changes its job description: the same stored card must now be handed safely to an agent, not just pulled for a subscription charge — so the vault becomes a broker, not just a safe.
04The Stopgap

The AOL of Agentic Commerce

<strong>Today's agent purchases often run through a walled garden that works — until something goes wrong.</strong> When a wallet has no link to the store, it quietly buys the item for you and bills you separately.

it went straight to the cell phone of a Stripe engineer. Because Stripe's not set up to run a chargeback

— Terry Angelos, a16z Podcast
Key Insight
The giveaway is who the bank sees. If a dispute call routes to an engineer instead of a merchant dispute desk, the purchase never traveled on the card networks' rails — so the consumer protections everyone assumes are there simply are not.
05The Fix

Agentic Tokens

<strong>The open-standard answer is a scoped token, not a stand-in buyer.</strong> The wallet mints a domain-bound, spend-capped credential for a verified agent — so it stays your card all the way to the merchant.

this was you know zero three months ago. Now we're doing a few million of these tokens per week.

— Terry Angelos, a16z Podcast
Key Insight
Because the token resolves to the consumer's own card, the chargeback path and the merchant's right to follow up both survive — the exact protections the walled-garden workaround broke. The move from zero to millions a week shows how fast the rails are being rebuilt.
06The Hard Problem

The 'Sound Mind' Check Is Still Unsolved

<strong>Two of the three classic checks on a card transaction survive the jump to agents; the third does not.</strong> Confirming the card and the owner is solved — judging whether the agent got it right is not.

The third question is like, is the agent of sound mind? Like, did it get it right?

— Terry Angelos, a16z Podcast
Key Insight
The unsolved check is the expensive one. If the networks correctly verified your agent and your instruction, but the agent booked the wrong hotel, the dispute has no clear owner yet — which is why agents may eventually have to take on the liability themselves.
07The Merchant Battle

Antagonists and Enablers

<strong>Whether a store blocks or welcomes agents follows its business model, not its mood.</strong> A retailer that sells attention loses when a buyer has no eyeballs; one that sells delivery or reach gains.

maybe there's like fear on the Amazon side, and maybe there's greed on the Walmart side, and maybe there's like you know, no choice on the on the SMB side.

— Terry Angelos, a16z Podcast
Key Insight
The split is a clean read on incentives. An advertising-driven marketplace cannot monetize an agent that never looks at ads, so it resists; a logistics-driven retailer or a small merchant sees only more orders, so it opens the door. The stance is downstream of how each one actually makes money.
08The Quiet Shift

Breakage Models Fall Apart

<strong>Any business that quietly profits from friction is exposed once an agent handles the task.</strong> Forgotten subscriptions, unoptimized card points, and buried terms all depend on the customer not paying attention.

the whole points reward ecosystem falls apart.

— Terry Angelos, a16z Podcast
Key Insight
Card rewards are the clearest case: the generous headline rate is funded by the spending customers route to less-optimal cards. If agents consistently steer each purchase to the card that earns the most, the broad spending patterns that pay for today's rewards would erode — so the terms, not just the tools, would have to change.