GoCardless processes AI-led Direct Debit donation to Trussell

GoCardless says it has processed the UK's first agentic account-to-account payment: a recurring Direct Debit donation to Trussell, the anti-poverty charity and food bank network, set up through an AI-led chat on its website. The company announced the transaction on 22 September 2026. No independent source, including the Financial Conduct Authority (FCA), has verified the "first" claim, and the underlying facts show a payer choosing from a fixed set of options rather than an AI spending independently.

The transaction matters because GoCardless is trying to show that bank-to-bank payment rails, not cards, can carry the next wave of AI-assisted checkout in the UK. It built the checkout while taking part in the FCA's second AI Live Testing cohort, a programme for firms moving mature AI proofs of concept into controlled market testing. That regulatory backdrop, and the questions it leaves open about consent and liability, are as important to UK payments professionals as the donation itself.

How the AI-led donation worked

According to GoCardless, a donor using the chat on its website could read about Trussell, select a monthly donation of £5, £10 or £15, and enter bank details. The AI agent then created a Direct Debit mandate on the donor's behalf. GoCardless has not disclosed whether the first collection under that mandate was actually taken and settled to Trussell, or whether the reported event covers mandate creation alone.

This was not an open banking payment initiation and not a Variable Recurring Payment. It was Direct Debit: a long-established, payee-initiated method for collecting recurring payments from a UK bank account, wrapped in a conversational interface. The novelty here is the chat layer that gathers a donor's choice and bank details and hands them to the existing mandate process, not a new payment rail.

Crucially, the available evidence does not show the AI independently choosing a beneficiary or an amount under some standing authority to spend on the donor's behalf. The donor picked from three displayed figures and supplied their own bank details. That is assisted execution of a choice the payer made, not autonomous purchasing.

Where the payer stayed in control, and where the picture is incomplete

GoCardless has disclosed the material choices the donor retained: whether to donate at all, which of the three displayed amounts to select, and whether to hand over bank details. What it has not disclosed is harder to ignore. The public material does not show the full checkout screens, the exact wording of the mandate the donor agreed to, whether a separate final confirmation step was required, or how GoCardless recorded and preserved evidence of consent.

Those gaps matter because Direct Debit already comes with its own consumer safeguards, and a reader relying on this article to understand their rights needs to know what those safeguards do and do not cover. Under the Direct Debit Guarantee, administered through Pay.UK, a payer can cancel a Direct Debit through their own bank or building society at any time, and is entitled to a full and immediate refund if the collecting organisation or the payer's bank makes an error in setting up or collecting a payment. The Guarantee does not settle a dispute over whether a debt is genuinely owed. Whether a mandate the payer says they never meant to authorise counts as a setup error covered by the Guarantee, an unauthorised payment under statute, or a contractual dispute with the biller depends on the facts of the case.

That second scenario sits closer to the Payment Services Regulations 2017, which have applied in the UK since 13 January 2018. Under regulation 67, a payment transaction is authorised only if the payer consented in the form and procedure agreed with their payment service provider; consent can be withdrawn subject to statutory timing rules. Where a payer denies authorising a transaction, regulations 75 to 76 put the evidential burden on the payment service provider to prove the transaction was authenticated and accurately recorded, and generally require a refund of an unauthorised payment by the end of the following business day, subject to specified exceptions.

None of the packet material describes how those rules would apply if an AI agent misread a payer's instruction, for example, setting up a monthly collection when the donor meant to give once, while the resulting mandate still appears technically authenticated on the bank's systems. Existing payment law, the Direct Debit Guarantee, GoCardless's contract terms and the FCA's Consumer Duty rules are all potentially relevant, but the outcome would depend on facts that have not been published. That is an open question this reported transaction does not resolve.

What FCA AI Live Testing actually means

GoCardless built the checkout while participating in the FCA's second AI Live Testing cohort. The FCA announced that cohort on 21 April 2026, naming eight participants, including GoCardless, and said the tested use cases included agentic payments. Testing began in April 2026.

The FCA describes AI Live Testing as support for firms with mature proofs of concept, delivered through tailored regulatory and technical input and controlled live testing, with a shared evaluation at the end. The programme examines the whole deployed system, including governance, human involvement and controls, not only the underlying model. The FCA said second-cohort testing would conclude by the end of 2026, followed by an evaluation report in the first quarter of 2027.

Participation in this cohort is not the same as regulatory approval, certification or a special liability regime, and the FCA has been explicit that it does not plan new AI-specific rules, relying instead on its existing principles-based and outcomes-focused framework. GoCardless's own release describes the checkout as built "under FCA supervision", a phrase the FCA does not use in its description of the programme. Cohort membership means GoCardless receives tailored support while its deployed system undergoes live testing and shared evaluation; it does not amount to FCA endorsement or approval of this specific product. GoCardless Limited states on its website that it is authorised by the FCA under the Payment Services Regulations 2017, registration number 597190.

Bank payments versus cards for AI-led commerce

GoCardless's commercial interest is clear: it wants account-to-account payment methods such as Direct Debit to compete with cards as the credential AI agents use on a payer's behalf. That ambition sits inside a wider government push. HM Treasury's National Payments Vision, published on 14 November 2024 and updated on 2 July 2026, seeks ubiquitous account-to-account payments and greater competition between payment methods, and records that the UK saw 29.1bn card payments and 4.9bn Faster Payments transactions in 2023.

The same policy document says card payments currently provide greater consumer protection than bank transfers, and calls for clearer liability and recourse for open-banking payments specifically. That comparison should not be read across mechanically to this trial: GoCardless used Direct Debit, which carries its own scheme guarantee against setup and collection errors, not an open-banking transfer of the kind HM Treasury's warning addresses. It is also a live question, not settled by this packet, whether a future AI agent choosing between cards, Direct Debit and open-banking payments would do so neutrally or in line with the commercial interests of whichever provider built it.

GoCardless cited a consumer research figure, saying 64% of UK consumers are open to AI managing recurring payments if they retain control over limits or final approval. It has not disclosed the sample size, fieldwork dates or exact question wording behind that figure. A separate GoCardless article from April 2026 reported that 61% of a 300-payer survey would grant an AI agent some payment control with guardrails, a figure that may reflect a different population or question rather than a direct contradiction. Readers should treat both statistics as company-sourced and not independently verified.

What is still unknown

A single Direct Debit donation, built by a payment provider participating in the FCA's AI Live Testing programme, demonstrates that a chat interface can be wired into an existing mandate process. It does not demonstrate mass-market demand, and it does not demonstrate that this journey meets the same consumer-protection standard, in practice, as a card payment or an open-banking transfer.

Several things bear directly on anyone using or scrutinising an AI-assisted Direct Debit checkout: whether the donation was actually collected as well as mandated, what security testing covered manipulation of chat instructions or mandate data, how complaints would be routed between a payer's bank, GoCardless and Trussell, and what the FCA's cohort evaluation, due in the first quarter of 2027, finds once the wider test concludes. Until those details are published, three separate protections could be relevant to an AI-assisted Direct Debit, and which one applies depends on the facts: the right to cancel a Direct Debit through a bank or building society at any time, a Direct Debit Guarantee claim for a setup or collection error, and a statutory claim for an unauthorised payment under the Payment Services Regulations 2017. Pay.UK and the regulations themselves set out the detail of each.