On November 12, 2026, Wirex unveiled Navoka, a payment-focused AI agent that operates through a dedicated IBAN, debit card, and wallets in USDC and EURC, all kept separate from the user's personal accounts. The service is invitation-only and can be accessed via Telegram or connected to ChatGPT, Claude, and Grok. The defining feature is the perimeter assigned to the agent: dedicated funds and instruments governed by user-defined spending rules.
Wirex
A Separate Operational Account
Wirex describes Navoka as an agent with its own IBAN, card, and stablecoin wallets. Users can transfer funds into this environment and set in advance where and how much the agent is allowed to spend. The card is checked at the moment of authorisation against spending limits, permitted merchants, and allowed countries.
The legal distinction matters. Navoka is not a bank, and the software itself is not the entity holding funds or processing payments. In its terms, Wirex Holdings Limited defines Navoka as a software service; accounts, IBANs, cards, and payments are provided by a separate Wirex group entity under conditions accepted during onboarding. So the phrase “agent account” describes an account dedicated to the agent's operational activity, not an account legally owned by an artificial intelligence.
Rules Enforced at the Moment of Payment
Users can configure permitted merchants, per-transaction maximums, daily caps, countries, and spending categories. According to Wirex, the agent can read these rules but cannot modify them. If a payment falls outside the authorised perimeter, it is held pending and requires human approval. An emergency command lets users freeze the card, suspend rules, and disconnect any linked assistants.
The system can also log which rule authorised each transaction, who approved a payment, and why. This audit trail is designed to make the journey from user instruction to card charge fully traceable. Blocking the agent, though, does not cancel transactions already executed: Wirex's terms clarify that suspension halts new actions, while execution, refunds, and disputes remain subject to the financial provider's own processes.
This is where the product's core logic sits. Navoka does not receive direct access to the user's personal account or existing card number. Instead, it receives a separate environment, funded by the user and constrained by a revocable mandate. The AI model can interpret an instruction. The card's final authorisation remains subject to the pre-set rules.
The AI Interprets Instructions, But Can Get Them Wrong
Navoka works in chat on Telegram and can be linked to ChatGPT, Claude, and Grok. Wirex lists WhatsApp and iMessage as future integrations. Compatibility with these assistants is achieved through connections to the Navoka service; the launch announcement does not confirm official partnerships with OpenAI, Anthropic, or xAI.
Separating the funds does not eliminate interpretation errors. Navoka's terms warn that the agent may misread or incompletely process messages, invoices, and merchant pages. Wirex therefore asks users to verify amounts, recipients, and payment references before approving any transaction. The kill switch can stop new operations, but it won't reverse those already authorised or completed.
Invite-Only Access and No Public Data Yet
Wirex calls Navoka the first AI agent to pay from a dedicated account and card. That is a company claim, not an independently verified fact. The launch is by invitation only; Wirex has not disclosed active user numbers, completed transaction counts, or an independent audit of the control framework.
The public documents reviewed do not clarify which markets are already live, nor do they identify the specific financial provider assigned to each country. Availability in the UK or US cannot be confirmed from this information alone. The terms also draw a clear line between the software and the underlying financial services: the entity managing the funds, issuing the card, and processing payments must be verified in the conditions shown at onboarding.
The Test Is Limited Delegation
Our read, stated as such, is that Navoka attempts to make financial delegation workable without handing a chatbot full access to a personal account. Its promise is not to eliminate human oversight, but to shift the controls from the text of an instruction to limits enforced at the point of authorisation.
The real proof will come from understanding how those limits hold up in everyday use: which transactions get blocked, how errors are handled, and where liability falls between the user and the financial provider. Until adoption data, independent audits, and clear country-by-country availability emerge, Navoka is a genuinely interesting concept that still needs real-world validation.
