Mastercard has confirmed the completion of South Korea’s first live, authenticated agentic transaction, marking another deployment in its accelerating Asia Pacific rollout of AI-initiated payment infrastructure. The milestone extends Mastercard’s Agent Pay framework to a ninth market, following earlier deployments across the United States, Australia, New Zealand, Singapore, Malaysia, India, Taiwan, and Hong Kong. Krungthai Card Public Company Limited subsequently completed Thailand’s first authenticated agentic transaction in a controlled pilot, establishing Agent Pay’s first foothold in Southeast Asia’s travel payments sector.
Key Facts At A Glance
- South Korea’s first live agentic transaction was completed by a CardInfoLink AI agent via global mobility provider hoppa, booking a car service from Incheon International Airport to a hotel in Gwanghwamun, Seoul.
- The transaction was powered by Mastercard Agent Pay, using Mastercard Agentic Tokens and Payment Passkeys to authenticate each step of the AI-initiated booking and payment.
- The Agent Pay framework has now been deployed across nine markets: the United States in 2025, and Australia, New Zealand, Singapore, Malaysia, India, South Korea, Taiwan, and Hong Kong in 2026.
- Mastercard plans to commercialise agent-driven payments across additional sectors in South Korea through collaboration with card issuers and digital partners.
- Thailand’s Krungthai Card, with approximately 3.7 million accounts and more than 302 billion baht in annual credit card spending volume, became the first Thai partner to complete an authenticated agentic transaction, using mobility provider Elife on a Suvarnabhumi Airport to Central Chidlom route.
- Mastercard is establishing a regional AI Centre of Excellence in Singapore, described as its largest innovation space in Asia Pacific.
- Verifiable Intent, co-developed by Mastercard and Google, creates a tamper-resistant record of what a user authorised when an AI agent transacts on their behalf.
The Architecture Of Authenticated Agentic Commerce
The South Korea and Thailand deployments represent operational confirmations of Mastercard’s Agent Pay infrastructure operating in real-world commercial environments rather than laboratory conditions. In both cases, an AI agent connected to a third-party mobility platform, searched for available transportation options, completed a booking, and executed authenticated payment without requiring the cardholder to intervene in the checkout process.
In South Korea, the transaction was facilitated by CardInfoLink’s AI agent, which connected to hoppa’s taxi and airport limousine network. The booking covered a car service from Incheon International Airport to a hotel in Gwanghwamun, Seoul. Payment was completed using tokenised credentials authenticated with Mastercard Payment Passkeys. This end-to-end use case was powered by Mastercard Agent Pay, a framework that enables secure, authenticated payments initiated by AI agents while maintaining compliance with industry standards for interoperability between card issuers, acquirers, and merchants.
Each transaction within the Agent Pay system assigns a unique Mastercard Agentic Token to the specific AI agent conducting the purchase, ensuring that authorisation is tied to a single agent instance. Consumer consent is captured explicitly before the agent operates, and purchase confirmation is secured through Payment Passkeys. The Verifiable Intent layer, developed with Google, creates an auditable record of what the user originally authorised, providing a shared source of truth accessible to consumers, merchants, and issuers.
Jae-Youl Yang, Vice President of Digital Payments at Mastercard Korea, said the transaction demonstrates how AI agents can safely and reliably conduct payments in real-world commercial environments, and that Mastercard will continue working with Korean financial institutions, digital partners, and merchants to expand the agent-initiated transaction ecosystem.
Thailand: The First Southeast Asian Deployment
Separate from the South Korea milestone, Mastercard announced the completion of Thailand’s first authenticated agentic transaction in a controlled pilot with Krungthai Card Public Company Limited, widely known as KTC. In this pilot, an AI agent booked a ride from Suvarnabhumi Airport to Central Chidlom through Elife, a global mobility provider. The transaction was secured using tokenised credentials authenticated via Mastercard Payment Passkeys, mirroring the same technical framework deployed in other markets.
KTC is a major Thai credit card and consumer finance group with approximately 3.7 million accounts. Pittaya Vorapanyasakul, President and Chief Executive Officer of Krungthai Card, said the collaboration reflects a strategic commitment to integrating agentic commerce into KTC’s ecosystem to enable smarter, more secure, and intuitive consumer experiences. Winnie Wong, Country Manager for Thailand and Myanmar at Mastercard, described Thailand’s travel market as an ideal testing environment for agentic commerce, citing the country’s high volume of international arrivals and the practical complexity of real-time transport bookings as conditions that approximate genuine consumer demand.
The Thailand pilot takes on additional significance as it represents Mastercard’s first authenticated agentic transaction within the Association of Southeast Asian Nations, following the broader ASEAN Agent Pay rollout announced in Singapore and Malaysia on April 6. The combination of the ASEAN multi-market announcement and the Thailand country-specific pilot marks a concentrated deployment phase for agentic payment infrastructure across the region.
The Regional Infrastructure Strategy
Mastercard’s deployment timeline in 2026 reflects a structured expansion sequence: Singapore and Malaysia were announced as the first ASEAN markets on April 6, the broader ASEAN multi-market rollout confirmed additional markets to follow, and Thailand’s country-level pilot was confirmed days later. The architecture underlying all deployments is consistent, relying on tokenised credentials, agent-specific tokens, and passkey-based consumer verification rather than a new payments scheme.
To support the regional expansion, Mastercard confirmed it will establish a regional AI Centre of Excellence in Singapore later in 2026. The centre will combine the company’s existing innovation hub with advanced cybersecurity capabilities and AI expertise and will serve as its largest innovation space in Asia Pacific. The company has applied AI to fraud detection, cybersecurity, and real-time risk management for more than a decade, and stated it employs more than 2,000 data scientists, engineers, and consultants focused on data and AI globally.
The company is also deepening partnerships with leading large language model providers and AI agent developers across the region, though no specific partnerships beyond CardInfoLink were disclosed in connection with the South Korea and Thailand pilots.
The practical challenge facing broader commercialisation is building consumer trust in delegating purchasing decisions to AI agents while ensuring that fraud, liability, and dispute resolution frameworks are adapted for non-human-initiated transactions. The Thailand pilot’s narrow scope, a single transport booking in a controlled environment, reflects the incremental approach the industry is taking before scaling to retail, entertainment, and high-value commerce segments.