Loading story…
Cloudflare announced Cloudflare Wallets, a forthcoming service designed to let AI agents make payments for APIs, content, and online services using programmable digital wallets tied to Cloudflare accounts. The offering includes Account Wallets for individuals and organizations and Virtual Wallets for AI agents, alongside human-readable wallet identities through cloudflare.pay so websites and services can verify which person or organization an agent represents.
The company said the wallets will include owner-defined guardrails such as spending caps, approved merchants, and transaction limits, aiming to let agents transact without requiring manual approval for every purchase. Cloudflare also said the service is built to work with its x402-based Monetization Gateway and support micropayments, allowing agents to buy low-cost services without creating separate accounts, while handle reservations are open ahead of broader availability in the coming months.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Cloudflare said reservations are now open for human-readable cloudflare.pay wallet handles tied to Cloudflare accounts. The identity layer is intended to let websites and services verify which person or organization an AI agent represents.
Cloudflare announced Cloudflare Wallets, a forthcoming service that will provide Account Wallets for people and organizations and Virtual Wallets for AI agents, with spending controls such as caps, approved merchants, and transaction limits. The wallets are designed to work with Cloudflare's x402-based Monetization Gateway for micropayments to APIs, content, and online services.
Cloudflare launched its Monetization Gateway, enabling websites and APIs to charge AI agents per request using x402 payment rails. The gateway was positioned as the payment-side complement to Cloudflare Wallets.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
infoq.com
Open sourcehelpnetsecurity.com
Open sourceblog.cloudflare.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cloudflare has opened a closed beta of **Monetization Gateway**, allowing domain owners to charge AI agents for access to APIs, Model Context Protocol (MCP) tools, websites, and datasets. The service uses `HTTP 402 Payment Required` and x402 payment authorization; requested resources are released after USDC payments settle on the Base blockchain. The beta is limited to eligible U.S.-based buyers and sellers. The rollout makes agent-spending governance a critical implementation concern. Cloudflare recommends enforcing authorization in the agent runtime rather than trusting the model, with Virtual Wallet allowances, merchant allowlists, transaction limits, and user-confirmation callbacks. Organizations deploying paid agent workflows must also account for variable prices and ambiguous retries, retaining payment-aware telemetry and idempotency records to distinguish failed requests, completed payments whose responses were lost, and legitimate new purchases; planned transaction logs are primarily intended for sellers.
Oct 1, 2026
As commerce increasingly shifts from human-initiated transactions to autonomous, AI-driven interactions, the payments industry is developing new frameworks to ensure security, trust, and compliance. Industry leaders, including Mastercard and Checkout.com, are focusing on agentic payments that leverage tokenization, biometric authentication, and advanced data-sharing standards to address the unique challenges of machine-led transactions. These innovations aim to establish robust identity verification for AI agents, known as 'Know Your Agent' (KYA), to distinguish between trusted digital agents and malicious bots. Emerging protocols such as agent-to-agent (A2A) communication and new merchant API interfaces are being introduced to support secure interactions among developers, issuers, and acquirers. Mastercard’s Agent Pay model exemplifies the integration of tokenization, biometric authentication, and intent capture to provide transparency and user control. Enhanced intent-level data is expected to reduce fraud, chargebacks, and disputes, supporting compliance and trust in the evolving machine economy.
Jul 12, 2026
Visa has announced the launch of its Visa Intelligent Commerce platform, which leverages agentic artificial intelligence to transform the way digital payments are conducted. The initiative aims to create a secure ecosystem where AI agents can autonomously browse, purchase, and manage transactions on behalf of users. These AI agents are designed to be equipped with tokenized payment credentials, robust spending controls, and advanced personalization features, ensuring both convenience and security for end users. Visa's platform is built upon its extensive global network, which includes 4.8 billion credentials and 150 million merchant locations, and is underpinned by decades of experience in fraud prevention. The company envisions that AI agents will act as autonomous shoppers, planners, and financial assistants, capable of curating personalized shopping experiences by analyzing user preferences and budgets. Transactions conducted by these agents will utilize Visa's tokenization and authentication APIs to maintain high security standards. The platform is intended to redefine everyday transactions by enabling frictionless commerce while upholding Visa's core promise of trust and security. Visa's leadership has highlighted the transformative potential of generative AI, comparing its impact on commerce to the earlier revolution brought by e-commerce. The system is designed to ensure that AI-powered transactions are both seamless and safe, addressing the growing demand for scalable identity security frameworks in the age of autonomous agents. The integration of AI into payment systems is expected to streamline the purchasing process, reduce friction for consumers, and enhance fraud detection capabilities. Visa's approach also emphasizes the importance of maintaining user control and transparency, with spending controls and personalization features built into the AI agents. The company is positioning itself at the forefront of next-generation payment technologies by investing in secure, AI-driven commerce infrastructure. The initiative reflects a broader industry trend toward leveraging artificial intelligence and machine learning to improve both the security and user experience of digital payments. Visa's move is likely to influence other payment providers and merchants to adopt similar AI-driven solutions. The platform's reliance on tokenization and advanced authentication is intended to mitigate risks associated with digital transactions, such as credential theft and unauthorized access. By embedding security at the core of its AI-driven commerce platform, Visa aims to foster greater trust among consumers and merchants alike. The launch of Visa Intelligent Commerce marks a significant step in the evolution of digital payments, setting a new standard for secure, autonomous transactions in the financial sector.
Jun 29, 2026