The Web Payments Working Group meets 09:00-16:45 UTC on 29 October as part of TPAC 2026.

Registration

• Register for TPAC 2026
• Who has registered (requires a Member account).
• See also the WPSIG agenda during TPAC (26-27 October)

Policies

• W3C Code of Conduct
• Antitrust and competition policy

Meeting goals

• Share updates on adoption and implementation progress, especially around SPC and PR/PH API.
• Calibrate expectations about the future of current deliverables and identify opportunities for the next Working Group charter (e.g., around agentic payments).

Agenda

Welcome

• 09:00-09:10: Welcome, participation policies, meeting goals, show of hands for dinner. (Nick Telford-Reed)

Secure Payment Confirmation (SPC)

• 09:10-09:45: Pilot updates (Visa, Mastercard) (35m)
• 09:45-10:15: SEB perspectives on SPC (Magnus Hanno, SEB)
• 10:15-10:30: Increasing support for non-platform authenticators (Darwin Yang, Google)
• 10:30-11:00: Break
  • Ian to solidify dinner numbers with the restaurant.
• 11:00-11:15: Increasing support for non-platform authenticators (continued)
• 11:15-11:30: Future of SPC
  • Pilots / adoption updates? Any obstacles?
  • Low friction flows (passkeys optional SPC parameter)
  • Emerging regulatory requirements that have an impact on SPC
  • Chrome implementation updates or plans? Adoption info?

Wallets and agentic

• 11:30-12:00: Device Bound Session Credentials update (Confirmed Artiom Casapu and Lucas Santos) (DBSC slides)
• 12:00-12:45: Payment Request and digital credentials (brainstorming, grounded in TPAC 2025, Sami Tikkala)
• 12:45-13:45: Lunch
• 13:45-14:15: Where we need improvements for agentic payments(Cathy Li, Meta)

Open discussion

• 14:15-15:00: Open discussion - Where are we in the WG vision for payments on the Web?
  • Are there new use cases for our existing APIs?
    • See, for example TPAC 2025 MVP list of features/use cases
  • Are existing APIs being superseded by newer APIs?
  • Are there new workstreams we should prioritize (e.g., agentic opportunities)?
  • WPWG charter expires 31 July 2027; what would our priorities be?
• 15:00-15:30: Break

Payment handlers

• 15:30-16:00: Experimental support for Payment Request and Payment Handlers (Dustin Jones, PayPal)
• 16:00-16:30: Issues
  • Provide more modal window control to handler (PayPal, Shopify) https://github.com/w3c/payment-request/issues/1075
  • Discussion of structured payment handler errors https://github.com/w3c/payment-request/issues/1076
  • Nested payment handlers https://github.com/w3c/payment-request/issues/1077
• 16:30-16:45: Chrome implementation updates? Adoption info?

The Chairs are organizing a dinner for the WPWG in the evening.

Candidate topics

This was a scratch pad for developing the agenda.

Secure Payment Confirmation (SPC)

• Pilot status / updates / feedback
  • Anticipating (at least) two.
• Support for roaming authenticators
• Chrome report on SPC support (e.g., percentage of devices capable of supporting SPC)
• European Bank perspective on SPC (Magnus Hanno)
• What's next for SPC?
  • Any new feature requirements since TPAC 2025 for v1? (Recall MVP for SPC survey)
  • Getting to Recommendation

Payment Request / Payment Handlers

• Any implementation updates from browser vendors
• Payment Request and digital credentials
• Chrome Team work on native-app payment handler specs
  • Question: Is this WG interested in taking up these specifications?
• Issue 1075: Allow a payment handler to request a larger initial window size
• Issue 1076: Structured Payment Handler Errors via a DOMException-Derived Interface
• Issue 1077: Allow payment handlers to invoke another payment handler
• Continuation of embedded checkout discussion from WPSIG related to payment handlers

Device bound session credentials (DBSC)

• We have had discussions with the Web Application Security Working Group about this API and it would be good to hear the latest.

Agentic payments

• In September 2026 W3C and GS1 co-host a Workshop on E-commerce for Humans and AI Agents . There will undoubtedly be discussion on the findings from that meeting at the WPSIG meeting early in the week at TPAC, and we should leave time for follow-on discussion at the WPWG meeting.

Fraud mitigation

• Fraud is growing due to AI, better social engineering, etc. What signals from the browser can be added to help mitigate fraud?
  • Should we try to organize a joint discussion with the privacy folks?

Other topics

• Improving the user experience of virtual card management.

Working Group status

• WPWG charter expires 31 July 2027.
• New workstreams for rechartering?