Today on The Settlement Layer, a major but under-the-radar rule change from Visa and Mastercard shortens the payment authorization window to just 25 days, creating new risks for merchants with pre-order or custom-made products. We also track Paystack's entry into the agentic commerce race we've been following, and Luno's formal pushback against South Africa's proposed crypto capital controls.
Effective July 2026, Visa and Mastercard have significantly shortened the validity period for payment authorizations from a maximum of 60-90 days down to just 25 days. The rule change presents a major operational challenge for e-commerce merchants who rely on pre-orders, custom-made goods, or have products on back-order, as the payment authorization may expire before the item can be shipped, leading to failed transactions and lost sales.
Why it matters
This is a critical, under-the-radar change with direct impact on revenue for many e-commerce merchants. Your gateway needs to be aware of this and may need to implement logic to automatically re-authorize payments closer to the shipping date to prevent sales from failing. For your merchants in Africa selling custom goods or dealing with international supply chains, this 25-day window could be a significant constraint.
Following through on the pushback against the draft capital controls we noted last week, cryptocurrency exchange Luno has submitted its formal response to National Treasury and the SARB regarding the proposed crypto asset exchange control regulations. Luno argues the rules are procedurally flawed and potentially unconstitutional, contending that such significant changes should be made via a full Act of Parliament, not ministerial proclamation. The company criticized the regulations as overly broad, failing to differentiate between various types of crypto assets and imposing an unmanageable administrative burden.
Why it matters
This represents significant industry pushback against the government's attempt to bring crypto under strict capital controls. The outcome will shape the legality and practicality of using crypto and stablecoins for payments in South Africa. If Luno's challenge succeeds or forces a redraft, it could create a more favorable environment for using stablecoins in settlement; if it fails, it could impose heavy compliance burdens on any platform touching digital assets.
South Africa's Financial Sector Conduct Authority (FSCA) has released its three-year regulation plan, revealing a slow and deliberate timeline for major fintech reforms extending to 2029. Key rules covering data storage, cloud outsourcing, open finance, and payment services licensing are still in technical drafting. The transition to the new Conduct of Financial Institutions (COFI) Bill is now projected to take the full three years, with public consultations on most new frameworks not expected until 2027/28.
Why it matters
This long-term roadmap provides crucial visibility but also confirms that the regulatory environment will remain in flux for several years. For planning purposes, this means you can anticipate major rule changes around data residency and licensing, but you also have a multi-year window to prepare and potentially engage in consultation processes. The key takeaway is regulatory change is coming, but it will be incremental, not sudden.
The 'agentic commerce' race we've been tracking globally has explicitly arrived in Nigeria. Paystack has launched 'Paystack Index,' an early-access product that gives AI agents like ChatGPT the ability to perform routine financial transactions such as buying airtime, data, and sending money. This move signals Paystack's clear intention to become the underlying payment infrastructure for transactions initiated via conversational AI rather than traditional web or app checkouts.
Why it matters
This is a significant move from a major competitor, showing that the race for AI-driven commerce infrastructure is now very much live in your core market. The shift from checkout buttons to AI agent APIs will require a fundamental rethinking of payment flows, merchant onboarding, and fraud detection. This experiment provides a clear signal about the direction the market is heading and the new capabilities that will be required to compete.
Adding to the stablecoin infrastructure for AI agents that we covered yesterday, Circle has launched its Nanopayments system on testnet, enabling gas-free USDC transfers as small as $0.000001. The system, built on Circle's Gateway infrastructure, batches transactions for on-chain settlement, with Circle covering the gas costs. This is designed to make sub-cent payments viable for machine-to-machine transactions and the emerging autonomous economy.
Why it matters
This development removes a key economic barrier—transaction fees—for creating viable business models around AI agent actions and micropayments. By providing a standardized, gas-free rail for tiny value transfers, Circle is building foundational infrastructure that could underpin a new class of automated services, from API usage billing to real-time content monetization. For a payment provider, this is a glimpse of the new payment rails being built for a machine-driven economy.
As the protocol layer for 'agentic commerce' solidifies, security leaders are beginning to outline the defensive requirements. Judy Winn, CISO at South African competitor Peach Payments, warned on Monday that traditional security models are insufficient to handle threats like malicious automation and agent manipulation via prompt injection. She stresses the need for strong agent identity, intent verification, and machine-speed fraud detection as AI agents start transacting on behalf of users.
Why it matters
This perspective from a direct competitor validates the security challenges of the emerging AI-driven payment landscape. It's not just about enabling transactions but building entirely new trust and verification models for non-human actors. The focus on 'intent verification' and protecting against prompt injection highlights the new, complex attack surfaces that payment gateways will need to secure.
Following up on the Proof of Concept we noted over the weekend, Tanzania and Rwanda have finalized the technical, operational, and regulatory framework to connect their national instant payment systems, TIPS and RSwitch. After a technical meeting ending Saturday, the pilot initiative aims to enable cheaper, faster, and safer retail payments, serving as a critical test case for broader payment interoperability within the East African Community.
Why it matters
This bilateral initiative to link national payment switches is a practical step towards achieving regional payment interoperability, bypassing the slower progress of larger continental systems. Success here could create a template for a 'corridor-by-corridor' integration strategy, directly impacting the cost and speed of cross-border settlement for merchants operating within the EAC.
In a significant ruling on Monday, Kenya's High Court upheld a decision finding both Safaricom and Diamond Trust Bank (DTB) jointly liable for KES 4.42 million (approx. $34,000) stolen from a customer's account via SIM swap fraud. The court apportioned the liability at 60% for Safaricom and 40% for DTB, reinforcing the shared responsibility of telcos and banks in protecting customers from digital fraud.
Why it matters
This ruling sets a crucial legal precedent, formally establishing shared liability between mobile network operators and financial institutions for losses from SIM swap fraud. For any payment service provider integrating with M-PESA, this raises the stakes on security and liability, as it signals that courts are willing to hold all parties in the transaction chain accountable for security failures.
Despite the Central Bank of Nigeria injecting a reported $250 million over the past two weeks—though some earlier estimates put the intervention slightly higher—the Naira weakened by 0.5% week-on-week, closing near N1,380/$1 in the official market. Elevated demand for dollars continues to exert pressure on the currency. While external reserves have risen to $51.74 billion, the nearly 47% drop in FX market turnover we flagged yesterday confirms a sharp contraction in liquidity.
Why it matters
The key takeaway is that despite rising reserves and interventions, the underlying FX supply-demand imbalance in Nigeria remains. The sharp drop in turnover suggests that liquidity is tightening again, reversing recent positive trends. This volatility and scarcity directly impact your ability to provide predictable forex rates and timely settlement for merchants operating in Nigeria.
Following up on the restriction of its Kenyan USD banking services we reported on Sunday, crypto processing firm Hurupay has confirmed it is completely ceasing USD banking and cross-border transfers in both Kenya and Nigeria. The move comes amid heightened AML scrutiny following Kenya's continued presence on the FATF grey list, mirroring similar service restrictions from providers like Wise.
Why it matters
This is a direct consequence of increased FATF pressure in the region. The exit of international payment players, especially those facilitating crypto-fiat services, shrinks the number of available cross-border corridors for merchants and freelancers. It underscores the critical importance of having a rock-solid AML/CFT compliance framework, as regulatory risk is now a primary driver of market access and partnership viability.
As Rwanda works to link its RSwitch network to Tanzania's instant payment system, its central bank is enforcing a strict separation of infrastructure and consumer services. The National Bank of Rwanda (BNR) has designated eKash as the country's official national digital payment system for interoperable payments, while simultaneously directing RSwitch to discontinue its own eKash-branded digital wallet service, effective July 14. The regulator's directive mandates that payment system operators must focus solely on providing infrastructure, not direct-to-consumer electronic money services.
Why it matters
This regulatory clarification fundamentally reshapes Rwanda's payment ecosystem. The central bank is enforcing a clear separation between infrastructure providers and consumer-facing services. For a payment gateway, this means integration strategies must focus on connecting to the underlying national switch (eKash, the system), not a specific wallet app. This structural clarity, while causing short-term disruption, is crucial for understanding the long-term rules of engagement in the Rwandan market.
Agentic Commerce Moves from Infrastructure to Application Layer in Africa Following the rollout of agentic payment rails from global players, local African fintechs are now building direct applications. Paystack's 'Index' experiment in Nigeria signals a move to embed payments within AI agents, creating new checkout flows and competitive pressures for payment gateways.
AI Fraud Prevention Shifts from Detection to Contextual Analysis As AI industrializes fraud, making attacks scalable and sophisticated, defensive strategies are evolving. The consensus is that isolated fraud tools are no longer sufficient. Instead, a unified approach that analyzes real-time, contextual data across transactions, user behavior, and device intelligence is becoming the new standard for resilience.
Regulatory Scrutiny Intensifies, Forcing Fintech Exits and Pushback Heightened anti-money laundering enforcement is having a tangible impact, with US-based crypto firm Hurupay exiting Kenya and Nigeria. Simultaneously, established players like Luno are mounting legal challenges against new crypto capital control proposals in South Africa, signaling a more contentious phase of fintech regulation on the continent.
Stablecoin Utility Expands into Micropayments and B2B Treasury Stablecoins are finding new, practical applications beyond speculation. Circle's 'Nanopayments' testnet aims to unlock the AI agent economy with gas-free micro-transactions, while Nium's acquisition of Cypher shows how crypto-native tech is being integrated to improve traditional cross-border B2B treasury and settlement.
Card Network Rules Create New Operational Hurdles for E-commerce A fundamental rule change from Visa and Mastercard, shortening authorization hold times to 25 days, introduces a significant operational challenge for merchants with longer fulfillment cycles, such as pre-orders or custom goods. This forces merchants and their payment providers to adapt their re-authorization logic to avoid lost revenue.
What to Expect
2026-07-18—Final rulemaking deadline for the U.S. GENIUS Act, which will provide regulatory clarity for stablecoin issuers.
2026-08-01—Japanese convenience store Lawson begins its pilot of yen-denominated stablecoin payments for employees.
2026-09-06—Nium expects to complete the integration of Cypher's crypto infrastructure into its core platform.
2027-01-01—Deadline for payment providers in Nigeria to comply with the Central Bank's data localization mandate.
2027-2029—South Africa's FSCA anticipates public consultations on new fintech rules for data, open finance, and payments, with implementation stretching to 2029.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
464
📖
Read in full
Every article opened, read, and evaluated
199
⭐
Published today
Ranked by importance and verified across sources
11
— The Settlement Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste