.png)
Visa Just Made Transaction-Level Controls the Price of B2B Payment Automation
B2B payment automation promises less manual work, faster accounts payable and more consistent supplier payments. But as software takes on more of the process, from invoice approval to payment execution, a central question changes: how can a business let payments proceed without giving software open-ended spending authority?
Visa’s 21 October 2026 announcement offers one answer. Its Commercial Fraud Solutions put controls at different stages of a commercial card payment, including transaction-level rules for spend, merchant category, location and timing. SESA 2.0, announced alongside the fraud suite, uses data and AI-driven supplier scoring to help identify suppliers that may be more likely to accept commercial cards.
The strategic signal is larger than a new set of payment features. As B2B payments automation advances, control needs to move with the transaction. Broad human approval at every step can undermine the efficiency automation is meant to deliver. Unrestricted software authority creates a different problem. Narrow, transaction-level permission is the middle ground.
Automation is moving through the invoice workflow
Visa’s announcement follows its 20 October agentic payments pilot with BILL and Billtrust. The pilot allows AI agents to initiate and complete approved buyer invoice payments through supplier portals, connecting invoice approval with payment execution.
Visa describes the wider shift in a statement from Darren Parslow, global head of Visa Commercial Solutions: “Businesses are moving quickly to automate the work around payments, from identifying supplier opportunities to approving invoices and executing transactions.”
That progression matters to finance teams. Payment automation is no longer just about processing an approved transaction more quickly. It can reach into supplier discovery, invoice approval and execution. Each step raises questions about what the software is permitted to do, which supplier it should pay and how a business can verify the outcome.
For a closer look at the BILL and Billtrust pilot, see our analysis of Visa’s first live B2B agentic payments pilot.
The market case for tighter payment controls
Juniper Research projects that the value of global B2B virtual card payments will reach US$14.6 trillion by 2029, representing 83 per cent of the global virtual card market. The forecast illustrates why virtual card payments are becoming more important in business payment strategies. Their transaction data and ability to assign card numbers to specific uses can support visibility and help limit exposure.
But scale also raises the stakes of configuration. If a payment credential or automated workflow can be used beyond the supplier, transaction or time period intended, the efficiency of automation can amplify mistakes. Treating this only as a fraud-detection problem misses the operational point: businesses need to design permissions that match their actual supplier and payment processes.
Visa’s approach frames protection in three stages:
Availability depends on the issuer and market. Australian businesses should confirm directly with their issuing financial institution what capabilities are available to them, rather than assume every feature is live locally.
Why transaction-level rules matter
A company-wide spending limit is a blunt instrument. It may constrain the total amount an employee or automated process can spend, but it may not answer the questions finance teams need to control for each payment:
Is this the approved supplier?
Is the transaction within the invoice or purchase order amount?
Is the merchant category appropriate?
Is the payment being made at an expected location and time?
Transaction-level controls allow businesses to express these boundaries more precisely. A virtual card for a particular invoice, for example, could be constrained by amount and supplier-related parameters, subject to the controls available through the issuer and payment programme. The aim is not to remove all human review. It is to reserve review for exceptions, while letting transactions within clear rules proceed.
This is the useful middle ground between approving every payment by hand and allowing ungoverned automation. A human might approve an invoice and define the payment mandate. Software can then execute within that mandate, while controls help prevent it from drifting into a different amount, merchant category or payment window.
That principle also connects to the wider questions of payment decision-making and infrastructure. Our analysis of why the payment router is becoming a strategic control point examines how businesses can retain visibility when software makes payment decisions.
SESA 2.0 addresses the supplier side
Fraud controls focus on whether a payment is properly directed and authorised. Supplier acceptance is another part of the commercial card equation.
SESA 2.0, or Supplier Enablement Spend Analytics 2.0, combines AI-driven supplier scoring, Visa commercial payments data, buyer benchmarks and business-value modelling. Visa says it is designed to help identify suppliers more likely to accept commercial cards and estimate potential commercial card growth opportunities.
That is strategically relevant because automating payments depends on more than the payment rail. A business also needs suppliers prepared to accept the method, and a clear view of whether the payment programme makes commercial sense. Supplier scoring could help financial institutions prioritise enablement efforts, while buyer benchmarks and value modelling help assess potential opportunities.
For finance teams, supplier enablement and payment controls should be considered together. A supplier may be a promising candidate for commercial card payments, but a business still needs to define the terms under which its software can execute those payments. Better acceptance does not remove the need for a well-scoped mandate.
A practical checklist for merchants and finance teams
Before expanding accounts payable automation or allowing software to execute supplier payments, review these seven areas:
The questions are practical, not theoretical. Automation is only useful if the business can explain what it authorised, identify what happened and manage the exceptions without rebuilding a manual process around every payment.
What the announcement signals
Visa’s Commercial Fraud Solutions and SESA 2.0 address different needs in commercial payments: controlling the payment and identifying supplier acceptance opportunities. Together, they reflect the broader challenge of scaling B2B payment automation safely.
For Australian merchants and finance teams, the lesson is not to automate every step immediately. It is to design the rules before delegating execution. Supplier validation, user authentication and transaction-level boundaries each contribute to a more governable payment process, while specific availability will depend on the market and issuer.
As agentic payments and accounts payable automation develop, the competitive advantage will not come from removing every human checkpoint. It will come from deciding which decisions require people, which can be executed by software, and how to keep that authority narrow and visible. Our article on micropayments and agent-to-agent payments explores another part of that shift: payment systems increasingly need to support software-driven activity with clear rules and reliable records.
Frequently asked questions
What are transaction-level payment controls?
They are rules applied to an individual transaction, such as a permitted amount, merchant category, location or time window. The purpose is to limit what a payment credential or automated process can do.
What did Visa announce on 21 October 2026?
Visa announced Commercial Fraud Solutions, which span supplier validation, 3-D Secure authentication for commercial virtual card users, and transaction-level payment controls. It also announced SESA 2.0, a supplier analytics capability intended to identify suppliers more likely to accept commercial cards.
How does SESA 2.0 support B2B payments automation?
SESA 2.0 combines AI-driven supplier scoring with Visa commercial payments data, buyer benchmarks and business-value modelling. Visa says it can help identify potential supplier acceptance opportunities and estimate commercial card growth.
Are Visa’s new capabilities available to Australian businesses?
Availability varies. Visa says Commercial Payment Controls are available in supported countries and territories to eligible issuing financial institutions. Supplier Validation and Virtual Authentication were in pilot, with general availability expected in 2027. Businesses should confirm availability with their issuer.
Sources