CardInfoLink Deploys Agent Gateway for AI Agent Trust

Per a PR Newswire release syndicated by The Hindu BusinessLine, Yahoo Finance and TechNode, CardInfoLink has deployed Agent Gateway on its Agenzo agentic commerce platform. The release states this is what "is believed to be the first commercial deployment in Asia" to operate AI agents under an independent trust and governance layer. The announcement says the gateway records agent interactions using cryptographic proofs, permits only authorised agents to transact, and does so without requiring changes to existing payment infrastructure. The release also notes Affinidi contributed to the effort and that CardInfoLink operates merchant-acquiring infrastructure across Asia with more than 15 years in payment processing.

Per the announcement, Agent Gateway sits at the system boundary and produces an auditable, cryptographically verifiable record of each agent interaction while mediating authorization for transactions. The suppliers characterise the integration as operating on open standards and independent of the underlying payment rails, enabling merchant configurations rather than bespoke payment changes. The PR copy frames these properties as enabling "clear accountability established across all parties" when agents initiate purchases such as rides, flights, or hotels.

Industry reporting links the deployment to growing fraud and governance concerns around agentic AI. Per the PR Newswire release, Experian named the inability to distinguish legitimate agents from malicious ones as the top fraud threat in its 2026 Future of Fraud Forecast. Dealroom's summary cites a Gartner projection that over 40% of agentic AI projects may be cancelled by the end of 2027 because of inadequate risk controls. These third-party assessments explain why vendors and merchants are prioritising separate governance and attestation layers rather than embedding policy logic directly into each integration.

Companies building or integrating agentic workflows should view this announcement as an example of a boundary-layer approach to governance: an independent gateway that provides attestation, authorization and an immutable interaction record. Comparable architectures usually trade increased integration complexity for clearer auditability; they also shift some risk-control responsibilities to the gateway operator and standards bodies rather than to every merchant endpoint. Teams evaluating similar designs will want to verify interoperability with existing merchant APIs, cryptographic key management, and how proofs are stored and queried for audits.

Observers should watch for:

• •independent audits or technical specifications from Affinidi or CardInfoLink validating the cryptographic attestations
• •uptake across non-travel merchants and payments providers in Asia
• •any third-party incident reports demonstrating whether the gateway prevents known agent-driven fraud patterns. Also monitor whether standards groups referenced by Affinidi publish interoperable protocols that other gateway providers can implement