TLDR: Trulioo has unveiled a “Digital Agent Passport” framework, developed in collaboration with PayOS, to verify the identity and permissions of AI-driven software agents during online checkout. This initiative, part of the “Know Your Agent” (KYA) concept, aims to build trust and prevent fraud in AI-driven commerce by ensuring the authenticity and intended behavior of bots.
Trulioo, in partnership with PayOS, has introduced a groundbreaking “Digital Agent Passport” framework designed to authenticate AI-driven software agents in online transactions. This initiative is a core component of the “Know Your Agent” (KYA) concept, which extends identity verification principles, traditionally applied to individuals (KYC) and businesses (KYB), to artificial intelligence agents. The goal is to ensure the integrity and trustworthiness of automated transactions, addressing growing concerns about the safe and reliable operation of AI in commerce.
The Digital Agent Passport is envisioned as a tamper-proof credential that provides crucial information about an AI agent, including its creator, the entity it represents, and its authorized permissions. The framework incorporates five key checkpoints: provenance, user binding, permission scope, real-time behavior telemetry, and continuous risk scoring. These elements collectively establish a verifiable chain of trust that merchants, issuers, and regulators can leverage at machine speed.
According to Vicky Bindra, CEO of Trulioo, identity is paramount for the widespread adoption of AI agents. He stated, “There’s still a lot of fear in how the system will operate and therefore some resistance to being proactive.” Bindra anticipates a “tipping point in three or four months as networks become more certain about things like liability shifts.”
A critical aspect of this model is governance. The white paper proposes the establishment of independent Digital Passport Authorities. These authorities would be responsible for issuing, signing, and revoking passports, similar to how secure sockets layer (SSL) certificate authorities verify encrypted websites today. These entities could be regulated identity providers, payment networks, or industry consortia. The aim is to create a federated directory that ensures interoperability of passports across different borders and marketplaces, while maintaining real-time revocation lists.
Bindra summarized the core problem the KYA framework seeks to solve with three fundamental questions: “Is the agent tied to a real consumer? Who created the agent, and is that developer credible? And is the agent behaving as intended?” The KYA system is engineered to answer these questions in milliseconds, enabling merchants to confidently approve or reject transactions.
In practice, KYA would integrate Trulioo’s extensive global identity graph and fraud detection signals with continuous monitoring of agent behavior. If an AI agent attempts to exceed its approved spending limits, route payments through high-risk geographical areas, or operate outside of authorized hours, its digital passport could be instantly flagged or revoked.
PYMNTS Intelligence reports indicate that while nearly all enterprise-level merchants are aware of agentic AI, only about 15% are currently considering its implementation. However, this number is expected to rise significantly. Karen Webster, CEO of PYMNTS, described agentic AI as “perhaps the most significant change in how consumers and merchants engage in shopping behavior that we’ve seen in a very long time.”
Also Read:
- AI Agents Revolutionize Cybersecurity: A New Era of Human-Machine Collaboration Emerges
- CyberArk Enhances AI Security with New Tools in AWS Marketplace
Trulioo is actively encouraging card networks, banks, and large language model (LLM) providers to support a federated directory of “white-list agents” to foster a universal standard for AI agent identity.
