Today on The Settlement Layer: The AI fraud crisis we've been tracking is triggering a severe regulatory backlash. In South Africa, new mandates are forcing platforms to provide transparent audit trails for their defensive AI models, adding heavy compliance requirements to the technical challenge of stopping synthetic identity attacks. Meanwhile, Nigeria's payment ecosystem is facing similar pressures, as transaction volumes surge and industry leaders push for unified defense frameworks.
As the AI-driven fraud arms race we've been tracking escalates, South Africa is emerging as a critical front. A new Sumsub report highlights that Africa now has the highest global fraud rate at 2.54%, with SA's iGaming sector seeing fraud triple in late 2025. In response to AI-generated fake IDs, South African regulators are implementing Directive 11 and ISO/IEC 42001, which require companies to provide demonstrable proof and transparent audit trails for their AI-based KYC and fraud tools.
Why it matters
This convergence of sophisticated AI-driven attacks and stringent new auditability requirements creates a significant pincer movement for payment providers. It's no longer enough to deploy an AI fraud model; you must now be able to prove its effectiveness and governance to regulators. For APS, this means any fraud tooling, whether built or bought, must come with robust, human-readable explainability and auditable logs to withstand scrutiny under the new compliance regime.
Echoing the push for unified fraud defense we recently saw in Ghana, experts in Nigeria are warning that the country's fragmented security is being overwhelmed by the AI fraud wave. With electronic transactions surpassing N1.07 quadrillion in 2024, Nigeria now accounts for 45% of reported cybercrime incidents in Africa. At a summit Thursday, CWG and Clari5 urged financial institutions to adopt AI-led strategies and unified platforms to combat impersonation fraud and other sophisticated attacks.
Why it matters
The sheer volume of digital payments in Nigeria makes it a critical market and a significant attack surface. For a payment gateway, the clear message is that legacy, rule-based fraud systems are obsolete. The operational risk from AI-enabled fraud necessitates investment in production-grade, AI-native detection models that can operate in real time. This is no longer a competitive advantage but a baseline requirement for survival in the Nigerian market.
Following Afreximbank's recent push for wider adoption, the Bank of Central African States (BEAC) has officially joined the Pan-African Payment and Settlement System (PAPSS). The move connects the six-nation CEMAC region to the network, integrating a market of over 72 million people. This integration solidifies PAPSS's footprint in Francophone Africa, bringing the active network to the 28 countries and 190 commercial banks we noted earlier this week.
Why it matters
This is a major milestone for pan-African settlement infrastructure, opening up the entire Central African bloc for streamlined, local-currency payments. For a payment gateway focused on African merchants, this integration could dramatically reduce the complexity and cost of settling transactions to and from countries like Cameroon, Gabon, and Congo, which have historically been challenging markets to serve due to correspondent banking friction.
South Africa is increasing scrutiny on cross-border financial flows. A new analysis on Thursday details how the South African Reserve Bank (SARB) now categorizes intellectual property (IP) as 'capital,' requiring SARB approval for any offshore transfers, with a particular focus on preventing 'double-dipping' by related parties. Separately, South Africa has reformed its VAT rules for non-resident electronic service providers, now requiring the local VAT-registered business to account for the tax on B2B services, simplifying compliance for foreign sellers.
Why it matters
These two regulatory shifts directly impact the mechanics of serving South Africa as a multinational. The SARB's stance on IP complicates structuring for tech companies, while the VAT rule change simplifies tax handling for B2B digital services. For APS, this is critical operational intelligence: the IP rule affects how your merchants structure their businesses, and the VAT rule changes the compliance workflow for your non-resident clients selling into South Africa.
With an estimated R100bn lost annually to financial crime, South Africa's pending Conduct of Financial Institutions (COFI) Bill aims to dismantle siloed compliance efforts. According to analysis on Thursday, the bill will mandate a unified framework under the 'Twin Peaks' model, forcing coordinated data sharing and real-time monitoring across AML, fraud risk, and prudential risk teams within financial institutions.
Why it matters
The COFI Bill represents a fundamental rewiring of compliance obligations in South Africa. For payment providers, it signals the end of maintaining separate systems for fraud and AML. The new expectation will be a single, integrated view of risk. This will necessitate investment in platforms that can consolidate and analyze data in real-time across different compliance functions, impacting technology roadmaps and operational costs.
Mobile money aggregator PawaPay announced on Friday it has processed three billion transactions, with daily volumes doubling to five million payments. The company, whose single API connects to nearly 50 mobile operators across 20 African countries, highlighted that this growth is increasingly driven by businesses using mobile money for merchant payments and cross-border operations, signaling a shift from its traditional P2P transfer roots.
Why it matters
PawaPay's milestone is a strong indicator that mobile money is maturing into a viable B2B payment rail. The significant volume handled by an aggregator demonstrates a growing demand from merchants for unified access to fragmented mobile money networks. This trend validates the market for services that abstract away the complexity of integrating with multiple telcos, a core part of the value proposition for pan-African payment gateways.
Amazon Web Services updated its Service Terms on Thursday, making several key changes. The update formally incorporates the AWS Data Processing Addendum and Standard Contractual Clauses for GDPR compliance. Most notably, a new policy explicitly restricts the use of AWS services for cryptocurrency mining without prior written approval from the company.
Why it matters
As a key infrastructure partner, any change to AWS terms is significant. The explicit prohibition on crypto mining clarifies AWS's stance and reduces ambiguity for platform operators. The formal integration of the DPA and SCCs also streamlines compliance documentation for data protection regulations. For APS, which runs on AWS, this is a mandatory policy update to review for compliance, especially concerning any potential crypto-related services.
Nigeria's official foreign exchange market recorded a turnover of $46.37 billion between March and June 2026, according to a BusinessDay report on Thursday. The increased liquidity, aided by a $320 million injection from the Central Bank, has helped stabilize the Naira and narrow the gap between the official and parallel market rates, despite ongoing pressures.
Why it matters
The sustained high turnover and narrowing parallel market spread are positive signals for forex predictability in Nigeria. For merchants repatriating funds, a more liquid and stable official market reduces arbitrage risk and improves the transparency of landing costs. While the situation remains fragile, this trend suggests the CBN's reforms are creating a more functional FX market, a critical factor for any cross-border payment business operating in Nigeria.
A Binance report published Thursday states that Africa is becoming a global leader in the practical, utility-driven use of cryptocurrencies. Rather than speculation, adoption is focused on using digital assets, particularly stablecoins, as everyday financial tools for cross-border payments, remittances, and hedging against local currency volatility. The report notes that this trend is filling gaps left by traditional finance.
Why it matters
This report from a major exchange provides strong evidence for the primary crypto use case relevant to a payment gateway: rails, not trading. It confirms that merchants and consumers are actively using stablecoins to solve real-world cross-border payment and currency volatility problems. This validates the business case for building and offering stablecoin settlement options for African e-commerce merchants.
Safaricom shareholders are set to vote on July 31 on significant governance reforms following Vodacom's acquisition of a majority stake. Conflicting reports on Thursday cloud whether a key proposal will strip the Kenyan government of its veto power over Safaricom's expansion strategy beyond Kenya and Ethiopia. Another proposal could give Vodafone more influence over the CEO appointment if its stake exceeds 50%.
Why it matters
The outcome of this vote could fundamentally alter the strategic direction and operational freedom of East Africa's most critical digital infrastructure company. Any change to government oversight or control over M-Pesa's strategy has direct implications for API access, product roadmaps, and cross-border initiatives. This is a key event to watch, as it will shape the partnership and integration landscape in the Kenyan market.
Flutterwave has partnered with PayPal's cross-border transfer service, Xoom, to accelerate remittances into Nigeria. The collaboration, reported Thursday, leverages Flutterwave's local payout infrastructure to enable faster settlement of funds in Naira directly into major Nigerian bank accounts, connecting Xoom's global users to the local financial system.
Why it matters
This partnership between a global remittance giant and a local payment champion highlights a key strategy for navigating Nigeria's complex payment landscape: leveraging specialized local infrastructure for the last mile. It's a competitive move that could streamline a significant remittance corridor, reinforcing Flutterwave's position as a key infrastructure provider in the market.
Zimbabwe has officially moved to regulate virtual asset service providers (VASPs) with the publication of Statutory Instrument 99 of 2026 on June 10. A legal analysis from Thursday confirms the framework is primarily focused on AML/CFT compliance and requires crypto exchanges, custody providers, and blockchain payment platforms to register and adhere to extensive regulations.
Why it matters
Zimbabwe's shift from a regulatory grey area to a formal VASP framework is another step in the continent-wide trend of formalizing crypto oversight. While compliance adds overhead, it also creates legal certainty for operators. This development opens the door for regulated crypto payment services in Zimbabwe, a market that has been largely inaccessible due to regulatory ambiguity.
AI Fraud Escalates from Technical Challenge to Compliance Crisis A wave of AI-driven fraud is hitting South Africa and Nigeria, using deepfakes and synthetic identities. In response, regulators are demanding that defensive AI tools provide auditable proof of their effectiveness, shifting the burden for payment providers from simply deploying AI to demonstrating its governance and reliability.
PAPSS Onboards Central Africa, Cementing its Continental Reach The Pan-African Payment and Settlement System (PAPSS) has integrated the Bank of Central African States (BEAC), bringing the six-nation CEMAC bloc and its 72 million people into the local-currency settlement network. This significantly expands PAPSS's footprint, particularly in Francophone Africa.
South Africa's Regulatory Net Widens for IP, VAT, and Compliance A trio of regulatory updates in South Africa is tightening rules for cross-border business. The SARB is scrutinizing offshore IP transfers as capital flows, SARS has reformed VAT rules for non-resident e-service providers, and the COFI Bill is pushing for unified, real-time fraud monitoring.
Mobile Money Moves from P2P to B2B Infrastructure Mobile money operators are evolving beyond consumer wallets into comprehensive business infrastructure. Aggregators like PawaPay are processing billions of B2B transactions, and case studies from players like Moniepoint in Nigeria demonstrate a clear shift toward using mobile money rails for core merchant operations, not just P2P transfers.
The Crypto Regulatory Patchwork Across Africa Takes Shape African regulators are moving to formalize crypto oversight. Kenya's CMA is procuring blockchain monitoring tools, Zimbabwe has enacted a new VASP framework, and Rwanda is moving to license exchanges. The trend is toward regulated integration rather than outright bans.
What to Expect
2026-07-18—US regulators face a deadline to finalize rules for payment stablecoins under the GENIUS Act.
2026-07-31—Safaricom shareholders to vote on governance reforms affecting government veto powers and leadership appointments.
2026-10-01—Deadline for bids for Kenya's Capital Markets Authority blockchain analytics platform tender.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
412
📖
Read in full
Every article opened, read, and evaluated
183
⭐
Published today
Ranked by importance and verified across sources
12
— The Settlement Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste