A nearly billion-dollar surge in automated checkout fraud has prompted Visa to deploy strict new trusted agent protocols today. Across the globe in West Africa, dominant closed-loop mobile wallets are actively testing central bank enforcement limits as mandatory instant payment deadlines take effect.
Yesterday we covered Shopify's platform-wide WebMCP deployment; the company has now detailed specific native browser checkout tools (get_checkout, update_checkout, complete_checkout) that allow AI shopping agents to execute purchases directly inside shopper sessions. Concurrently, Visa's Spring 2026 Biannual Threats Report revealed nearly $1 billion in scam activity between July and December 2025 alongside a 450% surge in dark-web posts discussing AI tools, prompting Visa to scale its Trusted Agent Protocol with partners including Shopify, Stripe, and Coinbase.
Why it matters
The simultaneous push for frictionless agentic purchasing and the sharp spike in automated fraud vectors highlights the core operational bottleneck facing commerce platforms. Without cryptographic agent verification standards, merchants bear unprecedented risk for synthetic fraud and disputed agentic purchases. This forces software platforms and acquirers to mandate identity-attestation layers before scaling zero-click agent checkouts.
Yesterday we covered McDonald's $8.5 billion 'NEXT' technology strategy; today, the chain is expanding its deployment of machine-learning pricing algorithms developed with Tiger Analytics across its U.S. drive-thrus and global locations on Wednesday, September 30. The software analyzes daily transaction data to determine local customer willingness to pay, creating price discrepancies for identical items between neighboring stores and triggering pushback from franchisees.
Why it matters
Algorithmic pricing engines represent a major operational leap from back-office cost automation to real-time revenue management at the point of sale. For multi-location hospitality and retail operators, dynamic pricing maximizes local store unit economics but creates brand friction and regulatory exposure around vertical price-fixing. Software vendors must carefully navigate franchisee governance boundaries when deploying automated margin optimization tools.
Global payment aggregator Boku integrated Capitec Pay into its routing network on Tuesday, September 29, granting international merchants direct API access to Capitec's 26 million bank clients. Capitec Pay processed 643 million e-commerce transactions in its latest financial year (up 32%), with one major global tech merchant routing nearly half of its South African checkout volume through the account-to-account rail over traditional cards.
Why it matters
Capitec Pay's rapid adoption proves that direct account-to-account (A2A) payment rails can bypass international card networks even in heavily banked emerging markets. Aggregators that successfully offer single-API access to domestic A2A rails capture high-converting enterprise merchant volumes without forcing merchants to build custom bilateral bank integrations.
Following our ongoing coverage of Bank Zero reaching operational break-even ahead of its pending R1.1 billion acquisition, Lesaka detailed on Tuesday, September 29, how the deal will provide the digital bank with direct access to 2 million retail and 125,000 business clients. The integration allows Lesaka to replace its reliance on African Bank by connecting its merchant ecosystem directly to Bank Zero's core clearing infrastructure, pending Reserve Bank sign-off expected by December 2026.
Why it matters
Standalone digital banks in emerging markets consistently struggle with high customer acquisition costs when unattached to built-in merchant distribution networks. By embedding Bank Zero directly into Lesaka's informal retail distribution stack, the combined entity creates a low-cost deposit and lending machine that directly threatens traditional acquirers and digital incumbents like TymeBank and Capitec.
South African gateway Walletdoc became the first local provider to deploy Visa Payment Passkeys on Tuesday, September 29. Utilizing FIDO2 device-native biometrics (facial recognition and fingerprints) instead of 3D Secure redirects and SMS one-time PINs, the system aims to eliminate drop-offs caused by local carrier delivery delays while cutting card fraud by up to 50%.
Why it matters
SMS deliverability remains a primary driver of cart abandonment for South African e-commerce acquirers. By replacing carrier-dependent OTPs with hardware-backed biometric passkeys, Walletdoc gives its merchant client base a distinct checkout conversion advantage. This shift pressures competing gateways like Peach Payments, PayFast, and Stitch to accelerate biometric authentication rollouts.
The BCEAO's extended deadline for its regional PI-SPI instant payment rail took effect on Wednesday, September 30, requiring mobile money operators across the eight WAEMU nations to integrate. Despite handling $267 billion in regional volume in 2024, dominant closed-loop operator Wave (holding 38.2% market share) remains absent from the participant list, testing central bank enforcement levers amid a wider regional licensing freeze.
Why it matters
This regulatory standoff highlights the structural tension between public interoperable clearing switches and scaled private closed-loop wallet monopolies. If central banks successfully enforce mandatory PI-SPI routing, it will dismantle wallet lock-ins and compress peer-to-peer transfer fees across Francophone West Africa. Conversely, regulatory friction and licensing delays risk stifling foreign direct investment and venture debt across regional fintechs.
Pan-African payment processor Kora launched 'One Rail' on Tuesday, September 29, enabling merchants to accept, hold, and settle USDT and USDC alongside traditional fiat currencies. Utilizing Kora's existing API stack, the feature targets B2B cross-border trade corridors where regional FX shortages and traditional remittance fees (averaging 8-8.8%) stall commercial inventory imports.
Why it matters
Dollar liquidity shortages across Sub-Saharan Africa frequently halt traditional correspondent banking payouts, leaving importers unable to settle international trade accounts. By abstracting stablecoin conversion into standard merchant payment APIs, infrastructure providers allow businesses to use digital dollars as an operational treasury tool without navigating underlying blockchain complexity.
Stripe Payments International—Stripe's Dublin-based subsidiary managing EMEA and APAC operations—published its FY2025 financial results on Tuesday, September 29. The entity reported a 33% YoY revenue jump to $6.8 billion and a 337% YoY surge in pre-tax profit to $446 million, achieving its second consecutive year of operating profitability following a $1.2 billion share-based compensation charge in 2023.
Why it matters
As parent company Stripe remains private, its Irish statutory filings offer rare, verified data on its international acquiring margins and operating leverage. The surge to $446 million in pre-tax profit demonstrates that enterprise acquiring scale in Europe and Asia generates massive margin expansion once foundational talent and regional compliance costs are absorbed.
Android-based POS terminals captured 48% of global shipments in 2025 and are projected to reach 70% by 2032, driven by rapid adoption among South Africa's major acquiring banks (Nedbank, Standard Bank, Absa) on Tuesday, September 29. Tier-one domestic retailers are shifting store estates away from Linux and Windows POS hardware to unified Android tablets that combine scanning, receipt printing, and SoftPOS acceptance on a single device.
Why it matters
Replacing proprietary terminal operating systems with Android decouples merchant checkout software from underlying hardware cycles, allowing retailers to deploy custom loyalty, split-payment, and SoftPOS applications instantly. For acquirers, software-defined terminals significantly reduce maintenance overhead and eliminate hardware re-certification bottlenecks.
Restaurant management vendor Toast announced 'Toast Fuel' on Tuesday, September 29, extending its cloud POS platform into convenience stores and gas stations. Connected via Allied Electronics' NeXGen PRIME forecourt controller, the system handles fuel pump payments, fleet cards, and kitchen display automation on a single stack, backed by Toast IQ conversational AI for item-level margin analysis.
Why it matters
Convenience store operators generate 80% of U.S. fuel sales but have historically been forced to manage separate legacy systems for forecourt pumps, retail inventory, and quick-service foodservice. By unifying fuel payments and kitchen management onto a single cloud platform, Toast expands its addressable market into a high-frequency retail vertical while directly competing with legacy fuel POS incumbents.
Continuing the shift toward static recompilation for retro games that we tracked yesterday, developer Y0oshi released version 0.1.2 of the Serial Experiments Lain decompilation project on Monday, September 28. The release achieves 100% byte-matching completion across all 321 game functions from the original 1998 PlayStation codebase, delivering a native PC executable that runs without emulation and features 60 fps frame interpolation.
Why it matters
Static decompilation converts vintage, region-locked software into native modern applications that are permanently preserved against hardware decay. By eliminating emulation overhead and adding high-framerate rendering alongside community translations, this project illustrates how open-source software engineering preserves rare interactive media.
Hospitality operating system Mews secured an Electronic Money Institution (EMI) license from De Nederlandsche Bank on Tuesday, September 29. Valued at $2.5 billion following its $300 million Series D earlier in 2026, the company processed $19.7 billion in 2025 transaction volume across 15,000 properties, and will now process payments and safeguard guest funds on its own licensed infrastructure.
Why it matters
Securing a dedicated EMI license marks the transition of Mews from a vertical SaaS software vendor into an integrated financial institution, echoing the fintech playbooks executed by Toast and Shopify. In-housing payment processing allows vertical SaaS platforms to internalize processing margins previously paid to third-party payment facilitators while offering seamless multi-currency reconciliation for hotel chains.
Cryptographic Trust Protocols Deploy to Counter Agentic Fraud As platforms like Shopify roll out native browser APIs for autonomous AI checkouts, payment networks and card schemes are rushing to deploy cryptographic identity protocols like Visa's Trusted Agent Protocol to establish verifiable machine intent before fraud liabilities multiply.
Public Real-Time Rails Force Showdowns with Private Closed Loops Central bank mandates across regions like West Africa are requiring private mobile money operators to open their rails to public instant payment switches, challenging closed-loop network lock-ins.
Fintech Acquisition Moves Focus on Direct Banking Infrastructure Marketplace and payments conglomerates are increasingly buying licensed digital banks to cut out intermediary banking partners, lower operating overhead, and gain direct regulatory clearing access.
Stablecoin Rails Shift from Speculative Trading to Commercial B2B Treasury Cross-border payment infrastructure vendors are embedding USD-backed stablecoins directly into merchant APIs to bypass foreign exchange liquidity constraints and correspondent banking delays across emerging markets.
Terminal Software OS Shifts Decouple Hardware from Merchant Workflows The rapid replacement of legacy terminal operating systems with Android-based POS stacks is allowing acquirers and enterprise retailers to roll out dynamic software updates and SoftPOS features without replacing physical counter hardware.
What to Expect
2026-10-15—India's 0.4% UPI Merchant Discount Rate (MDR) takes effect for P2M transactions over ₹2,000.
2026-11-01—SPAR Group plans to finalize its boardroom reset and executive appointments following profit warnings.
2026-12-01—Lesaka's R1.1 billion acquisition of Bank Zero expects final Prudential Authority and Reserve Bank approvals.
2027-01-01—Central Bank of Nigeria data localization mandate deadline takes effect for operating fintechs.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
335
📖
Read in full
Every article opened, read, and evaluated
140
⭐
Published today
Ranked by importance and verified across sources
12
— The Merchant Desk
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste