a16z Podcast: AI Agents Spend Your Money—The Coming Wallet Wars

SPEAKER_1 (0:01)

So let's talk about something that's fundamentally changing payments right now. When AI agents stop merely recommending things and start actually spending money, the entire payments stack changes. We're seeing AI agents go from spectators to actors. That's a huge shift. And it all comes down to payment credentials, right?

Once an agent can access a card safely, it gains what Terry Angelos from VGS calls "arms and legs." He's actually calling this the start of the "wallet wars." VGS is fascinating in this context because they store credentials for about a third of e-commerce by gross merchandise volume. They're right in the middle of this race. What's interesting is how Angelos describes their business model. He calls it a vault business, one that's built to be boring in exactly the right way.

As he puts it, "Your job is to be not exciting, to be safe, and to be secure." Merchants use VGS so they never have to touch sensitive card data directly, while VGS handles vaulting, tokenization, and updates across multiple processors and networks. And that infrastructure becomes even more critical in agentic commerce. Think about it—if an AI assistant books a service, orders flowers, or pays for a subscription, the chat app shouldn't store the card, but the merchant still needs a secure way to receive it.

Exactly. VGS helps remove the PCI compliance burden and lets wallets, agents, and merchants exchange credentials safely. But here's where the design question gets really interesting. Angelos argues the industry is moving away from closed, "AOL-style" ecosystems and toward open standards.

Right, and card networks are already rolling out "agentic tokens." These let a wallet hand a credential to an agent, then the agent passes it to a merchant while preserving the right trust rails. That matters because trust isn't just about payment approval. It's also about chargebacks, disputes, and liability. Angelos lays out three key questions: is the identity real, is the card valid, and are they of sound mind to make this transaction? As he says, "I don't think we fully understand that yet."

What about merchant response? That's going to vary wildly, isn't it? Absolutely. Amazon may resist agents because it profits from advertising and wants human eyeballs. But Walmart, Shopify merchants, and other sellers may welcome a new channel for sales. Companies that make agent shopping easy will win more transactions than those that bury users in captchas. Looking ahead, agents could expose unmonetized demand, automatically buy better bike parts, or cancel forgotten subscriptions. But they may also disrupt rewards programs and other breakage-based models.

That's the million-dollar question. The world is still learning what happens when agents can act with delegated authority. It's a fascinating time for payments infrastructure.