Beltic exits stealth with $8.8M to verify AI agents that spend money

Beltic said Wednesday it emerged from stealth with $7.3 million in seed funding led by Norwest — $8.8 million total with an earlier pre-seed — to verify AI agents’ identity, authority, and transactional legitimacy so companies can safely accept agent-driven payments.

When a software agent buys and pays on a company’s behalf, a check that only asks “are you human?” no longer decides the payment. Beltic is raising to verify whether that agent is allowed to spend, the identity layer beside the agent-payment rails Mastercard is already building. The announcement is the seed and the category. It does not show that banks have switched their cards over to Beltic.

On Wednesday, 30 September 2026, San Francisco-based Beltic said it emerged from stealth. PR Newswire carries the release. The page stamps Sep 30, 2026, 10:00 ET, which is 10:00 a.m. Eastern. The dateline is San Francisco. Beltic says it raised $7.3 million in seed funding led by Norwest, with participation from Restive Ventures, Oxford Seed Fund, and Collide Capital. The release says that money will fund the company’s work to give businesses the confidence to trust AI agents to act for them. Those lines are Beltic’s.

The same release says Collide Capital also led an earlier pre-seed of $1.5 million. That round included Latitud Ventures, Positive Ventures, and other angels. Beltic states $8.8 million in funding overall. The deck on the wire says “$8.8M in funding led by Norwest.” The body splits the money. Norwest led the $7.3 million seed. Collide led the $1.5 million pre-seed. Add those two rounds and you get $8.8 million. The total is the two rounds together. Those figures are Beltic’s, on the wire.

Beltic’s own blog has an earlier post, dated 8 September 2026, headed “We’ve raised and come out of stealth.” It says that after 18 months of building, the company is coming out of stealth and announcing $8.8 million. It says the $7.3 million seed was led by Norwest Ventures, the name the blog uses for Norwest, with Oxford Seed Fund, Restive Ventures, and a group of angels and advisors. It names Melissa Strait, a former chief compliance officer at Coinbase; Max Freeman, senior vice president of sales at Ramp; and Patrick Sigrist, co-founder of iFood, Nomad, and IORQ. It says Collide Capital led a $1.45 million pre-seed 10 months before that post, also followed on in the seed, and that Latitud and Positive Ventures were in the pre-seed. The blog does not print the pre-seed’s calendar day. The wire’s pre-seed figure is $1.5 million. The blog’s is $1.45 million. Add the blog’s $7.3 million and $1.45 million and you get $8.75 million, which is $50,000 short of the $8.8 million the blog also prints. Fifty thousand dollars is five hundredths of a million. Neither page explains that gap. The wire does not print the three advisor names. Those lines are Beltic’s.

Beltic describes itself as building agent verification infrastructure. It calls the check “know your agent,” shortened to KYA, and says it is the agent version of “know your customer,” shortened to KYC. KYC is the check a bank already runs on a person: who they are, and whether they are allowed to move money. KYA points that question at software. An agent, here, is a program that can take a next step, such as starting a payment, rather than only answering a question. Beltic says it verifies agents and authorizes them to act, so a company has a base it can trust for agent-driven commerce and payments. The release says that without that check, the guardrails around AI have nothing solid to verify against, and that building this trust layer is as urgent as building the payment rails themselves. Those lines are Beltic’s.

The release says merchants, payment providers, financial institutions, and card networks need a reliable way to verify that each agent starting a transaction is authorized. It says systems built for human traffic will break under agent traffic, and that at scale every transaction needs a new check: which agent it is, which entity is behind it, and whether the action is allowed, in real time. An entity, here, is the company or the person the agent is acting for. The release names those kinds of companies as the ones that need the check. It does not name a card network, a bank, or a merchant as a Beltic customer, and it does not print a contract with one. Those lines are Beltic’s.

Beltic says the platform works on both sides of a transaction. One side sends an agent out to buy or pay. The other side receives that agent and has to decide whether to accept it. The about box says the platform verifies the identity, the authority, and the transactional legitimacy of AI agents in real time, across any protocol or payment rail. Identity is which agent it is. Authority is whether it is allowed to take that action. Transactional legitimacy is whether this particular payment is a real, permitted one. A payment rail is the network that moves the money, such as cards. A protocol, here, is the set of rules two pieces of software use to talk. The about box also says the company was founded in 2025 and is headquartered in San Francisco, and it lists the same backers as the release. Those lines are Beltic’s.

Isha Bhatnagar, co-founder and chief executive, said that for decades a large part of risk management was asking and verifying, “are you human?” She said agents can already gather information for people, and that the next opening is letting them act on their own. She said the safeguards built to protect humans and businesses have become the barrier. She said Beltic verifies both the agent and the transaction, so companies can safely accept agent traffic and send agents into the world. The release describes her as the former Coinbase head of product for global regulatory experience. A later line says she spent six years at Coinbase building the identity and onboarding infrastructure behind more than 50 million users and the company’s first institutional clients. Onboarding, here, is the process of checking someone and letting them open an account. Those lines are Beltic’s account of her, in the company’s release.

Co-founder Mike Allan previously founded Atar, which Porto Seguro acquired. Beltic calls Porto Seguro one of the largest insurance companies in Latin America, and says Atar was a banking-as-a-service provider that scaled across Brazil’s payments and core banking systems. Banking-as-a-service means a company supplies the plumbing of a bank, such as accounts and payments, for other businesses to use. Norwest’s partner note calls Allan chief operating officer, and says Porto Seguro acquired Atar in 2021 after he spent more than a decade building it. Chief technology officer Farhan Afsahi co-founded Verifiet. Beltic says it acquired Verifiet in 2025, and that the deal brought a global entity-data platform covering jurisdictions and more than 500 million entities. Norwest says that data comes from direct connections to those jurisdictions, and that bringing Afsahi’s stack in-house is how Beltic builds a verification engine for agents rather than attaching a check to an older review built for people. Those career lines are the company’s and the investor’s.

Afsahi said the stakes are higher when no person is in the loop and a system is handling thousands of transactions a second. He said one bad decision does not stay one bad outcome. It becomes thousands before anyone notices. He said a verification stack built for this kind of AI is what that speed requires, and that Beltic built its infrastructure to set the standards for what he calls the agentic economy. That sentence is his aim, in the company’s release. The release does not print a measured transaction rate for Beltic’s own product, and it does not show other companies adopting Beltic as a shared standard. Bhatnagar also said the real path is not a simple chain, where a person authorizes one agent and that agent acts. Agents call other agents and hand work to systems they do not own. Each handoff is a new delegation, and the risks reset. She said trust that is only inherited, with no fresh check, is trust that was assumed. Those quotations are in Beltic’s release.

Allan said enterprises keep asking three questions: is this really my customer’s agent, is it allowed to take this action, and how do I stop the bad ones without blocking the good ones. He said that is the problem Beltic was built to answer, on whatever rails a company already runs. The release says Beltic is partnering with a select group of companies at the forefront of agentic commerce and payments. Design partners get early access and help shape how agents transact. The release does not name them. It points interested companies to join@beltic.com. The 8 September blog says current partners include “global commerce giants,” and that the company is opening a limited number of further design-partner spots. It does not name those giants. The ideal partner, the blog says, sees a large volume of smaller transactions, where agent activity will outgrow a person in the loop. Those lines are Beltic’s.

Jordan Leites, a principal at Norwest, is quoted in the release. He said that as money moves in real time, identity and trust infrastructure has to keep pace. He said Beltic is building the verification layer for that future, one that can establish trust instantly, programmatically, and portably across businesses, financial institutions, and, increasingly, autonomous agents. Programmatically means software makes the check, rather than a person reading a form. Portably means the same proof can travel from one company to another. He said Bhatnagar and Allan have the domain experience and the ambition to define the category, and that Norwest is excited to partner with them. Norwest’s partner note, bylined by Leites and investor Amalia Mackenzie, says the firm is leading the seed. The note says every institution that accepts agent traffic will need to answer who authorized the agent, what it is permitted to do, and who is accountable when something goes wrong. It says a trust layer for those requests does not exist today in any defensible form, and that Norwest believes that layer is the missing piece. That judgment is the investor’s. It is not a count of banks. The note does not print a calendar day next to the bylines.

On beltic.com the same day, the page headline is “Infrastructure for incoming agent traffic,” and a banner reads “Announcing our $8.8M Raise,” the same total as the wire and the blog. The page says the product is real-time verification, and that knowing your agent turns automated traffic into trusted transactions. It says one platform gives companies three controls, so they can accept agent traffic on websites, APIs, and MCP servers. An API is the hook one piece of software uses to call another. MCP is the Model Context Protocol, the plug an agent uses to see tools and call them. The first control is seeing the agent, including who sent it, because an agent can sign in with borrowed credentials and pass as a person. The second is rules for what that agent may do. The third is judging what it is trying to do, such as searching, ordering, or paying. A sample console on the page draws figures, including 552 actions over 14 days and 86 percent allowed straight through. Those figures sit inside the illustration. The page does not present them as a published operating result. A strip labeled “Built and Supported by” shows the investors named in the round and other company marks. The release and the blog do not identify those other marks as customers. Those lines are the company site’s.

The picture is Beltic’s launch graphic. A black field holds the Beltic wordmark, a small mark of stacked angles, and the headline “Infrastructure for incoming agent traffic.” It is the company’s key art. It does not print a calendar date.

In plain terms, Beltic said on Wednesday, on the wire, that it had left stealth with a $7.3 million seed led by Norwest. The company states $8.8 million in all, with an earlier pre-seed. The wire puts that pre-seed at $1.5 million. The company’s 8 September blog puts it at $1.45 million and already describes the same exit from stealth. The product is a know-your-agent check: which piece of software is asking to spend, whether it is allowed to, and whether this payment is a legitimate one. The company says merchants, payment companies, banks, and card networks need that check. It does not name them as customers.