At the 2026 Bund Summit in Shanghai, Alipay revealed one of the most significant shifts in how digital payments might work as artificial intelligence becomes embedded in everyday commerce: a new AI wallet agent designed to manage transactions on behalf of users while ensuring those transactions are trustworthy, verifiable, and properly authorized.
The announcement marks a pivotal moment. For over a decade, Alipay — and its parent company Ant Group — have optimized payments for speed and convenience. Now, as AI agents begin making autonomous purchasing decisions, the company is pivoting to solve a different problem entirely: how do you trust an AI to spend your money?
The Three Payment Modes: Vibe, Skill, and Machine
Alipay's new AI wallet agent introduces three distinct payment paradigms, each designed for a different level of AI autonomy:
Vibe Pay is the most casual — a context-aware payment mode where the AI detects when you're about to make a purchase and offers to complete the transaction with a single confirmation. Think of it as predictive checkout: the AI knows you're browsing for sneakers, recognizes your size and preferred brand, and prepares the payment before you even reach the cart. The human remains in the loop, but the friction is dramatically reduced.
Skill Pay represents a higher degree of delegation. Here, the AI agent has been given specific permissions to complete recurring or routine purchases — groceries, transit fares, subscription renewals — without requiring explicit approval each time. The key differentiator from traditional auto-pay is that Skill Pay uses AI to verify that the purchase aligns with the user's established spending patterns and preferences. If something looks anomalous — a sudden large purchase at an unfamiliar merchant — the agent flags it for human review.
Machine Pay is the most autonomous mode, designed for machine-to-machine (M2M) transactions. In this scenario, your AI agent negotiates and pays another AI agent — for example, your electric vehicle negotiating with a charging station's AI to pay for electricity, or your smart home system ordering supplies when inventory runs low. Machine Pay operates without direct human involvement, relying entirely on the trust infrastructure to validate both parties.
The Trust Infrastructure: APASS and KYA
The real innovation behind Alipay's AI wallet is not the payment modes themselves — it is the underlying trust infrastructure that makes them viable. Ant Group is building these features on top of APASS (Agent Payment Security and Signature System), a framework it developed specifically to address the unique security challenges of AI-driven commerce.
APASS covers four critical dimensions:
- Identity: Verifying that the AI agent initiating a payment is genuinely authorized by the user, not a compromised or spoofed system.
- Intent: Ensuring the payment reflects the user's actual intent, not a misinterpreted instruction or adversarial prompt injection.
- Authorization: Confirming that the agent has explicit permission to execute the specific transaction type and amount.
- Behavior: Monitoring the agent's transaction patterns for anomalies that might indicate compromise or misconfiguration.
This framework directly addresses the concerns raised by recent high-profile incidents involving rogue AI agents. The OpenAI hacking of Hugging Face (covered in our previous article on AI agents stealing credentials) demonstrated how autonomous systems can be exploited to perform unauthorized actions. Alipay's approach is essentially a payment-specific implementation of the same principles: treat AI agents as potentially untrustworthy until proven otherwise, and build verification into every transaction layer.
The KYA (Know Your Agent) framework complements APASS by applying a concept familiar from financial regulation — Know Your Customer — to the AI agent ecosystem. Just as banks must verify the identity of their customers, payment platforms will need to verify the identity, authorization, and behavior patterns of the AI agents acting on their behalf. KYA creates a standardized protocol for this verification, enabling cross-platform trust: if your AI agent is verified on Alipay, that verification should carry weight when it interacts with other services.
The Broader AI Pay Ecosystem
Alipay's announcement also highlighted a broader AI Pay and agent-payment infrastructure being built by Ant Group. This ecosystem is designed to support the growing category of AI agents that need to conduct commerce autonomously — from personal shopping assistants to enterprise procurement bots.
The e-commerce functions supported include recurring purchases (subscriptions, refill orders), assisted buying (AI-guided shopping with human oversight), and assisted booking (AI handling travel, dining, and service reservations). Each of these use cases introduces different trust requirements: a subscription renewal is low-risk and predictable, while a travel booking involving large sums and complex variables demands more rigorous verification.
What makes Alipay's approach distinctive is its emphasis on trust as a product feature. In the current AI payment landscape, most platforms are focused on speed and convenience — reducing the number of clicks between intent and transaction. Alipay is arguing that as AI agents become more autonomous, the competitive advantage will shift to platforms that can guarantee the security and legitimacy of AI-mediated transactions. In other words: the winner in AI payments won't be the fastest, but the most trustworthy.
Why This Matters for Global AI Commerce
Alipay's AI wallet agent is not just a product update — it is a blueprint for how the world's largest digital payment market is preparing for an AI-first commerce environment. With over a billion users and trillions in annual transaction volume, China's payment infrastructure is already more advanced than most Western markets. The leap from human-mediated to AI-mediated payments is therefore happening earlier and at larger scale in China than anywhere else.
The implications extend beyond China. The APASS and KYA frameworks could become de facto standards for AI payment security globally, much as Chinese platforms have led in mobile payments, super-apps, and real-time settlement. Western payment providers — Stripe, PayPal, Square — are still largely focused on optimizing human-to-human transactions. The question is whether they can catch up when AI agents begin conducting significant commerce autonomously.
For consumers, the promise is compelling: an AI that can shop for you, book your trips, and manage your subscriptions while ensuring every transaction is legitimate and authorized. The risk is equally real: a single compromised AI agent could authorize thousands of fraudulent purchases before the trust infrastructure detects the anomaly. The APASS framework's behavior monitoring is designed to catch exactly this scenario, but the arms race between AI security and AI exploitation is far from over.
🔥 Hot Takes
1. The real product is not the wallet — it is the trust layer. Alipay is not selling a faster checkout experience; it is selling the ability to delegate financial decisions to AI with confidence. In an era of prompt injection attacks, deepfake fraud, and autonomous agent hijacking, trust is the scarcest commodity in digital commerce. Whoever solves that problem owns the future of payments.
2. KYA is the financial sector's answer to zero-trust security. The Know Your Agent framework applies the same principles that cybersecurity has adopted for networks: never trust, always verify. But applied at scale to AI agents, it creates a new regulatory and technical challenge — how do you verify the identity and intent of a non-human actor that can impersonate a human perfectly?
3. Machine Pay is the quiet revolution. While Vibe Pay and Skill Pay get the headlines, Machine Pay is the most transformative feature. It enables a world where your devices negotiate and transact with other devices without human intervention — from EVs paying for charging to smart fridges ordering groceries. This is the foundation of an AI-driven economy, and Alipay is building the plumbing.
4. China is exporting its payment infrastructure before the West has modernized its own. While American payment systems are still wrestling with ACH delays and credit card interchange fees, China has moved past human-only commerce into AI-agent commerce. The APASS/KYA framework could become a Chinese export — a standard that other countries adopt because it is the only solution sophisticated enough for the AI age.
5. The Bund Summit is no longer just a financial event — it is an AI policy laboratory. By unveiling APASS and KYA at the Bund Summit, Ant Group is positioning Shanghai as the global capital of AI finance regulation and infrastructure. The message is clear: China is not just building AI payments; it is defining the rules by which AI payments will operate worldwide.
The Bottom Line
Alipay's AI wallet agent represents the next evolution in digital payments: from enabling human transactions to verifying AI transactions. The three payment modes — Vibe, Skill, and Machine — cover the full spectrum of AI autonomy, from assisted to fully autonomous. But the real innovation is the trust infrastructure beneath them: APASS for transaction security and KYA for agent verification.
As AI agents become more capable and more integrated into commerce, the question will not be whether they can spend your money — it will be whether you can trust them to do so responsibly. Alipay is betting that the platform which solves that trust problem will define the next decade of global payments.
Source: TechNode | Ant Group AI Pay Infrastructure