Nearly 500,000 businesses use BILL, and some of them are now the first to let an AI agent get into a supplier's payment portal and finish an invoice payment with no human logging in. On October 20, 2026, Visa, BILL and Billtrust announced what they call the first live pilot in which an authorized AI agent starts and completes an approved buyer invoice payment through a supplier's portal (Business Wire via FinancialContent, also posted on Visa's newsroom).

That sounds like a small plumbing fix. It is not. The obstacle to automating business-to-business payments was never getting a buyer to approve an invoice; that part is already software. The obstacle was the last ten feet: logging into the supplier's payment portal, getting past a CAPTCHA (the puzzle websites use to prove a visitor is a human, not a bot), and submitting the payment. That step needed a person. In this pilot, it does not.

What actually happens in the pilot

Here are the mechanics, as Visa describes them. BILL's payment agent, the software that acts on behalf of a BILL customer, is registered through Visa's Trusted Agent Protocol (TAP), a system for identifying and vouching for AI agents, and listed in Visa's Agentic Directory. The agent carries tokenized payment credentials (tokenization swaps a real card number for a stand-in value, so the live number is never exposed), with controls matched to the buyer's already-approved payment instruction. This runs on Visa's Intelligent Commerce portfolio.

When the agent arrives at a Billtrust supplier portal, Billtrust uses TAP to recognize and authenticate it, then grants access. According to Visa, that agent authentication can stand in for what CAPTCHA and other bot blockers provided, with no extra agent login. Billtrust's customers still receive the payment under their own acceptance policy. The agent does not bypass merchant rules, only the manual identity step.

Accounting Today describes it plainly: the pilot skips the manual employee login to the supplier portal and the CAPTCHA-style check, because TAP carries a trust signal inside the request itself, which the outlet calls stronger than a CAPTCHA (Accounting Today).

The agent is not making a decision. It executes a payment a person at the buyer already approved. This is automation of execution, not of judgment.

Why each side wants this

Mark Nelsen, Visa's SVP and Head of Product for Commercial & Money Movement Solutions, put the pitch in one sentence: "Businesses should not have to choose between automation and control when making payments."

Archana Prasad, BILL's SVP of Payments and Financial Services, describes the pain: supplier portals have been friction points that require a person to complete a step that should be automated. With that step gone, "the payment gets done, the supplier gets paid faster."

Kunal Patel, Billtrust's SVP Payments, frames it as a trust problem: agentic commerce advances only if businesses can trust agents across systems. The pilot links the buyer's approval to the supplier's acceptance, which he says releases trapped cash faster.

The companies' scale is real. BILL says it serves nearly 500,000 businesses, has a member network of more than 9 million, and processes about 1% of US GDP annually. Billtrust says it serves more than 20 million buyers and handles $1 trillion in annual trade credit volume. Those are company sizes, not pilot volume. The release discloses no transaction counts, dollar limits or end date.

The catch: it only works where the gate is already open

This does not work everywhere. It works only with suppliers or software providers that have adopted TAP. Accounting Today reports that merchants that have not adopted TAP ignore the extra headers the agent sends and keep their current defenses. So an agent with a valid badge still meets the same defenses at a portal that has not signed up.

That shifts the gatekeeper role. The deciding factor in agentic B2B payments is not only what the agent can do, but whether the portal has decided to let agents in, and on whose identity system. Real leverage sits with the card network that issues the credential and the portal vendors that choose to read it. If you operate a supplier payment portal, TAP adoption is a decision with competitive consequences: portals that read the signal can take payments in an automated flow, and portals that do not stay a manual step.

Also unaddressed is liability. If an agent pays the wrong party, pays twice, or pays a disputed amount, who bears the loss? Accounting Today's coverage does not address it, and the pilot materials do not either. Settle that before scaling.

Visa's broader play: SESA 2.0 and fraud tools

A day later, on October 21, Visa announced a package aimed at the same shift. It includes SESA 2.0, an upgraded Supplier Enablement Spend Analytics tool that uses AI scoring to find suppliers likely to accept commercial cards. Visa says SESA has helped uncover over $600 billion in potential cardable spend between 2021 and 2026 (Business Wire via FinancialContent).

It also introduced Visa Commercial Fraud Solutions, in three parts. Supplier Validation confirms a payment goes to the intended supplier (pilot; general availability in 2027). Virtual Authentication verifies virtual card users through 3-D Secure, an identity-check layer for card payments (pilot; general availability in 2027). Payment Controls sets transaction-level limits on spend, merchant category, location and timing, and is available now in supported countries to eligible issuers. The BILL and Billtrust pilot was the third item in that announcement, not a standalone launch.

Darren Parslow, global head of Visa Commercial Solutions, said the capabilities are meant to give businesses "the data, security and controls they need." The release also cites Juniper Research's projection that B2B virtual card volume will reach $14.6 trillion by 2029, 83% of the global virtual card market.

One observation, which the sources do not claim: moving invoice payments onto cards instead of ACH (the US bank-to-bank transfer network) or paper checks is in Visa's commercial interest. The BILL release says buyers may be able to pay by card suppliers that previously received ACH or checks, and SESA exists to find card-accepting suppliers. Removing the portal login wall removes a friction point in exactly that conversion.

What is unproven

Strip away the announcement language and what has been shown is one buyer platform and one supplier platform running a live pilot, with no disclosed volume, no dollar limits, no end date and no liability answer. The suggested benefits, such as card acceptance by suppliers that took ACH or checks and better DSO (days sales outstanding, the average days a company takes to collect after a sale), are described as possible outcomes, not measured results.

Supplier Validation and Virtual Authentication, the two fraud tools most relevant to making agent payments safe at scale, are still in pilot. Visa says both reach general availability in 2027. Mark the first quarter of 2027 on your calendar and check whether those two tools shipped, and whether any supplier portal beyond Billtrust has announced it reads Visa's agent badge.

Sources