Correction: An earlier version of this article, based on the original press materials provided, stated that Maybank was part of the collaboration. We have since received clarification that the pilot involved CIMB and RHB only.
Mastercard has completed its first authenticated agentic transaction pilot in Malaysia with CIMB and RHB.
The pilot tested how AI agents can carry out payments in a controlled environment with consumer consent, authentication and security safeguards in place.
In the first use case, an AI agent booked a ride from Kuala Lumpur International Airport to KL Sentral through mobility provider hoppa.
The transaction was facilitated by CardInfoLink’s AI agent, which connects to hoppa’s taxi and airport limousine network.
Mastercard said the payment used tokenised credentials and Mastercard Payment Passkeys for authentication and data protection.
It added that the pilot showed the technical and operational feasibility of agentic transactions in Malaysia.
The transaction ran on Mastercard Agent Pay, a system for AI-initiated purchases.
Mastercard said each transaction uses a Mastercard Agentic Token issued to a specific AI agent, while consumer consent and purchase confirmation are secured through payment passkeys.
The commercial rollout will take place in phases. Mastercard added that it will work with banks and partners to familiarise consumers with agentic commerce while expanding use cases into sectors such as transportation, travel, entertainment and retail.
The Malaysia pilot follows similar authenticated agentic transactions that Mastercard said it has completed in Australia, New Zealand and India.

“Mastercard’s first live agentic transaction in Malaysia demonstrates how AI can engage in commerce responsibly.
With Agent Pay, we’re embedding trust, authentication and transparency directly into AI‑driven payments,”
said Beena Pothen, Country Manager, Malaysia, Mastercard.
Featured image: Edited by Fintech News Malaysia, based on image by Frolopiaton Palm via Freepik

