Each time a Mastercard will get tapped, the community has lower than a tenth of a second to evaluate how doubtless the acquisition is to be fraudulent. It made that decision throughout 175 billion transactions final yr. Now the customer on the opposite facet of that judgment is beginning to change, and Greg Ulrich, the corporate's chief AI and information officer, spelled out the consequence for the VB Transform 2026 viewers in Menlo Park on July 14. "We've constructed a bunch of danger guidelines over time that have been meant to cease a bot from transacting," Ulrich stated. "Now we have to allow the bot to transact, in order that requires a change to our danger framework and our danger guidelines."
Ulrich joined Mastercard eleven years in the past when an analytics firm he labored at was acquired, and stated belief struck him from day one on the job. "It's what allows a service provider that's by no means met you to simply accept fee and be sure that they're going to receives a commission. It's what allows you as a client to transact and be sure that issues are going to work out in a trusted, safe approach. And if one thing goes incorrect, there's a protected and safe path for a dispute and to resolve this," he stated.
175 billion transactions, scored in beneath 100 milliseconds
He took the viewers inside every of these calls. "If you faucet your Mastercard to pay for a services or products, we're offering a rating to that transaction," he stated. "Now we have beneath 100 milliseconds to have a look at that and provides a rating from zero to 999 about how doubtless is that to be fraudulent or actual. And we cross that on to the issuing financial institution."
Generative AI widened what that rating can see. "As a result of we’ve got new expertise, we will convey in additional information, we will convey in additional context, and now we're discovering that we will establish 300, 400% extra fraudulent transactions at these high-risk bands," Ulrich stated, with out including friction or false positives for customers. The corporate's Safety Net system has stopped greater than 70 billion fraudulent transactions, he instructed the viewers, and Mastercard is constructing its personal transformer mannequin on its transaction information as a basis for brand spanking new security, safety, and personalization options. VentureBeat's Beyond the Pilot podcast took that manufacturing fraud stack aside intimately earlier this yr.
A 3rd of the providers enterprise already runs on AI
The enterprise stakes attain previous fraud. About 40% of Mastercard's firm is now primarily based on providers, Ulrich stated, together with advertising and marketing providers; fraud, security and safety; and enterprise intelligence. "A 3rd of these are predicated on AI, and people are rising at a a lot quicker clip than every part else," he stated.
One line he returned to all session went additional. "What's going to allow AI to proceed to scale shouldn’t be the capabilities of the brokers, it's how a lot we belief these brokers to do on our behalf as a client, as a enterprise, as a monetary establishment, or in any other case," he stated.
5 layers stand between brokers and the community
Agentic commerce modifications the article being secured. "As a substitute of a single atomic transaction the place I say go purchase one thing, I'm successfully delegating authority, or a client's delegating authority, a enterprise is delegating authority," Ulrich stated. "And when that occurs, it's a way more difficult transaction." Belief, in flip, has a precondition. "The one approach it's going to work with belief is that if we will establish what was the intent, what are the behaviors, what are the constraints that have been meant in that transaction."
Ulrich walked by means of 5 layers Mastercard has constructed in opposition to that drawback. Identification comes first. "I need to make sure that I can perceive not simply who the patron is, however who the agent is, that I mix them collectively and that I’ve KYA or know your agent, that I'm validating that it's professional expertise, that it's a professional agent," he stated. "We will register it into our system."
Verifiable intent settles the "wrong-Nikes" drawback
Verifiable intent is second, a tamper-proof cryptographic document of the unique directions that travels with the transaction. "In the event you've requested for Nike black Nikes in dimension 12, however you bought them on a remaining sale they usually're not returnable and that wasn't in your instruction, there's a approach to have a look at that in an goal and clear approach on the again finish," he defined.
Controls type the third layer, defining which retailers an agent should buy from, at what restrict, and beneath what constraints. Execution runs by means of Mastercard Agent Pay, which carries "the tokenization, authentication, the acceptance framework embedded inside it" and has launched with Microsoft, OpenAI, Google, and others, Ulrich stated. Intelligence is the fifth layer, spanning danger guidelines, perception tokens that grant "consented or permissioned entry to insights" for customized suggestions, and monitoring by means of Recorded Future to establish risk actors within the system.
The larger prize is a procurement agent with a finances
Client purchases are the place agentic commerce began. Ulrich pointed the room previous them, to business-to-business procurement because the bigger alternative. His instance was a producer that desires an always-on meeting line, with an agent that manages stock ranges, tracks when inventory runs low, replenishes mechanically, and understands the finances and the authorised suppliers. "When you can begin enabling that, you require those self same 5 layers for that kind of transaction," he stated.
Making it work throughout corporations multiplies the events that must belief one another. "You want clear requirements for identification, you want clear requirements for intent, you want these to work throughout. You're gonna have a procurement agent, a provider agent, a banking agent. They're all gonna want to speak to allow this to occur in an autonomous approach, and that's gonna require actually scaled belief infrastructure."
Highly effective new fashions, similar safety movement
Mastercard sat within the early wave of Project Glasswing with Anthropic's Mythos mannequin, and labored with OpenAI's GPT-5.5-Cyber, he stated. "What we've seen from each of these is extremely highly effective fashions discovering new vulnerabilities within the ecosystem that have been tough to detect beforehand, however it's actually a brand new instrument versus a brand new movement," Ulrich stated.
Inside the corporate, the chief safety officer leads that work. A devoted group has prioritized essentially the most vital belongings, runs them by means of the fashions routinely, tracks findings by excessive, medium, and low severity, and makes use of the identical expertise to deal with patches. Ulrich stated the method has already been prolonged out, and that Mastercard is working to make the identical structure and patching out there to others as nicely.
What Mastercard would construct in a different way after 14 months
"The guardrails, the safety, all these things needs to be embedded on the entrance finish. These can't be issues that we're including on on the again finish. That's lesson one. Lesson two is it’s important to be working for scale, and the opposite one is round observability and accountability matter as a lot because the intelligence," Ulrich stated, counting off what constructing inside Mastercard taught the group. The corporate constructed what he described as an agentic manufacturing facility, an working system with the compliance, the observability, and the guardrails inbuilt somewhat than bolted on per agent. Mannequin drift, as soon as tracked manually by devoted groups, is now automated into that manufacturing facility.
Requested by an viewers member concerning the gotchas, Ulrich didn’t soften the pilot-to-production entice. "In the event you're making an attempt to increase that after which add guardrails in as you're extending it, when you've already constructed it, I believe you're doomed to fail," he stated.
Mastercard constructed a sequence of brokers final yr for its 4,000 consultants, overlaying deep analysis, textual content to SQL, Excel, and PowerPoint, instruments that by his account didn’t exist on the degree Mastercard wanted. Had been the corporate beginning as we speak, Ulrich stated, it will construct them basically in a different way. "I don't know that we anticipated after we constructed issues fourteen months in the past that we’d be rethinking the basic structure and the method already."
Agentic identification joins KYB and KYC
The identification layer is the place Ulrich expects the market to maneuver subsequent. Inside Agent Pay, Mastercard authenticates the patron the best way it does in conventional e-commerce and binds the agent to that particular person. "Outdoors of that framework, I believe there might be open requirements to establish who an agent is and bind the agent with the patron," he stated. "After which we will tie that with verifiable intent."
VentureBeat's June 2026 Pulse research factors on the similar hole. Solely 32% of the 107 certified enterprise respondents give every agent its own scoped, managed identity, and simply 12% embody an agent-identity product of their consideration set.
He known as identification "one of many faster-growing ecosystems," noting Mastercard has been increasing there organically and inorganically for about six or seven years, with the work now spanning "agentic identification in addition to the normal KYB and KYC identification." The danger guidelines that hold bots off the community got here out of greater than twenty years of making use of AI to these transactions. The rewrite, for the brokers Mastercard now desires to let in, is already underway on the identical community that scored 175 billion of them final yr.
