Today on The Settlement Layer, regulatory momentum is driving the agenda across all three of Africa's primary financial hubs. Nigeria's Central Bank is following up its recent BDC digital tracker rollout with a new executive council to harmonize crypto oversight. In Ghana, a sweeping new digital finance framework extends the central bank's reach into AI and cloud infrastructure, while South Africa's Prudential Authority puts the banking sector's AI deployments under active supervision. Plus, the ongoing arms race against AI-driven fraud forces a pivot to behavioral analytics.
As part of the broader retail forex framework we tracked earlier this week—which launched the FX BDC Purchase Tracker (FXBT) and 24-hour resale mandates—the Central Bank of Nigeria has clarified that weekly Bureau De Change dollar purchases are now capped at $150,000.
Why it matters
This is the CBN's most significant intervention yet to bring Nigeria's fragmented and often opaque retail FX market under control. For any business facilitating cross-border payments into Nigeria, the move to digitize monitoring and enforce strict liquidity rules is a critical signal. A more orderly, transparent market could reduce volatility and the black-market premium, making FX repatriation more predictable. The operational impact on BDCs will be severe, likely forcing consolidation and greater compliance across the board.
On Friday, Nigerian President Bola Tinubu signed an executive order creating the country's first coordinated regulatory framework for virtual assets. The order establishes a Virtual Asset Council, to be chaired by the Central Bank of Nigeria (CBN), which will harmonize oversight from various agencies like the SEC. The framework is designed to combat fraud, protect consumers, and support responsible innovation in the digital economy without creating a new standalone regulator.
Why it matters
This executive order ends years of regulatory ambiguity and fragmented oversight that has hampered the crypto and stablecoin ecosystem in Africa's largest market. For payment providers, this provides a much clearer path for offering crypto-based services, especially for cross-border settlement using stablecoins. A coordinated, CBN-led approach suggests regulation will be tied closely to monetary policy and financial stability concerns, a crucial factor for any company building payment rails in Nigeria.
Following up on the Bank of Ghana's recent revocation of Zeepay's e-money license and the finalization of digital asset rules we noted yesterday, the central bank has officially introduced its Cyber and Information Security Directive for 2026. The sweeping framework extends regulatory oversight beyond traditional banks to fintechs and microfinance institutions, establishing specific mandates for artificial intelligence, cloud computing, and virtual assets.
Why it matters
This is one of the most comprehensive digital finance frameworks to emerge in Sub-Saharan Africa, signaling a significant shift towards holistic, ecosystem-wide regulation. For any payment gateway operating in Ghana, this will directly impact operational compliance, especially regarding data governance for AI models, cloud infrastructure choices, and the handling of any crypto-based settlements. The new rules raise the bar for risk management and will require board-level attention to cyber risk.
South Africa's tax authority, SARS, has streamlined the process for declaring non-residency for tax purposes, becoming the central authority for verifying and updating tax residence status. This clarification, detailed on Friday, replaces the South African Reserve Bank's (SARB) previous primary role and aims to dispel misconceptions around tax emigration. The underlying tax law for residency has not changed, but the administrative process has been clarified and centralized.
Why it matters
This administrative shift is operationally significant. Centralizing tax residency verification with SARS, rather than the SARB, provides a single point of authority and should simplify compliance for individuals and businesses dealing with cross-border tax issues. For multinational merchants and payment providers handling ZAR, clarity on residency status is critical for correctly managing forex flows, withholding taxes, and fund repatriation.
South Africa's government failed to sell any inflation-linked bonds at its weekly auction on Friday, receiving no bids for two of the three bonds on offer. Despite offering 1 billion rand ($60.6 million) of long-term debt, the lack of investor appetite signals waning confidence or concern over the country's long-term fiscal health.
Why it matters
A failed bond auction is a concerning macroeconomic signal. It reflects poor investor demand for government debt, which can put pressure on public finances and potentially lead to higher borrowing costs in the future. For businesses operating in South Africa, this instability could translate into increased volatility for the Rand and a less predictable interest rate environment, impacting forex costs and financial planning.
A new survey by ITWeb and ACI Worldwide published Saturday reveals that 70% of African respondents believe fraud risk has increased in tandem with the continent's digital payments boom. The report underscores a critical need for modernizing legacy systems and investing in robust fraud prevention to balance innovation with security.
Why it matters
This data quantifies the operational pressure felt across the industry: the rapid growth of digital transactions has outpaced the deployment of adequate security infrastructure. For a payment gateway, this highlights the urgency of investing in advanced, AI-driven fraud detection. The findings serve as a direct mandate to prioritize risk tooling and security to maintain merchant trust and protect against increasingly sophisticated attacks targeting the African payments ecosystem.
Visa is replacing its various fraud and dispute monitoring programs with a single global framework called the Visa Acquirer Monitoring Program (VAMP), with full enforcement beginning October 1, 2026. The new program introduces a combined fraud-and-dispute ratio, adds direct monitoring of enumeration (card testing) attacks, and tightens compliance thresholds for acquirers and merchants.
Why it matters
VAMP represents a fundamental shift in how Visa enforces risk management, directly tying fraud and dispute metrics together. For a payment gateway, this is a major operational change. The direct liability for enumeration attacks means preventative measures against card testing are no longer optional. The combined ratio will require a more holistic approach to risk, forcing closer collaboration between fraud prevention and dispute management teams to avoid costly penalties and program placement.
South Africa's Prudential Authority (PA) is increasing its supervision of technology risks in the banking sector, with a new focus on AI, cloud computing, and cybersecurity. The PA's 2025/26 Annual Report, highlighted on Friday, notes that while major banks are rapidly deploying AI in core operations, governance and regulatory frameworks are lagging. The authority is particularly concerned with data governance, the validity of AI models, and emerging liability questions around 'agentic AI'.
Why it matters
This is a clear signal that regulatory scrutiny of AI in South African financial services is moving from observation to active supervision. For a payment provider like APS, this directly impacts the implementation of AI for fraud detection and risk management. The PA's focus on model validity and governance will necessitate auditable AI systems and careful consideration of data offshoring. The new legal questions around 'agentic AI' could create future compliance hurdles for any automated payment systems.
In response to the escalating AI-driven fraud arms race we've been tracking—which has increasingly overwhelmed traditional transaction monitoring—financial institutions are accelerating their adoption of behavioral analytics. Reports this week detail how solutions from firms like Feedzai and Featurespace are analyzing real-time user behavior, such as typing speed and device movements, to detect AI-generated phishing and synthetic identities.
Why it matters
The fraud landscape has shifted; attackers are using AI to mimic human behavior, rendering traditional transaction monitoring less effective. This forces a corresponding evolution in defense. For a payment provider, the key takeaway is the need to move towards tools that can analyze a unified view of user behavior across sessions, not just isolated payments. This is the new baseline for production-grade fraud detection.
Adding crucial detail to Paystack's integration with Pesalink that we noted yesterday: the newly enabled direct bank-to-bank checkout feature supports single transactions up to KES 999,999. By embedding these high-value transfers directly into the checkout flow, merchants can now bypass mobile money caps and traditional card network costs, while automating collection and settlement on the same rails.
Why it matters
This is a significant improvement for B2B and high-value B2C ecommerce in Kenya. By embedding instant bank transfers directly into the checkout flow, Paystack is solving a major pain point around manual reconciliation and payment limits. For APS, this move by a key competitor underscores the importance of deep integrations with national instant payment schemes like Pesalink to effectively serve merchants with high average transaction values.
Safaricom and Visa announced Friday that their M-Pesa GlobalPay Virtual Card now has over 316,000 active users. The partnership, which bridges M-Pesa wallets to Visa's global network, has processed KES 12.1 billion (approx. $93 million) in transactions, enabling Kenyan consumers to make international online payments directly from their mobile money accounts.
Why it matters
The strong uptake of the GlobalPay card demonstrates significant demand among Kenyan consumers for access to global ecommerce. For international merchants, this product effectively unlocks a large segment of the Kenyan market that relies on mobile money rather than traditional bank cards, creating a viable payment rail for cross-border sales into the country.
On Thursday, AWS's Billing and Cost Management Console began displaying wildly inaccurate projected costs for customers globally, with some seeing estimates in the billions or even trillions of dollars. AWS confirmed the bug was limited to its estimated billing computation subsystem and that actual charges were unaffected. The issue was traced to an error in unit pricing and the estimation system was taken offline while a fix was rolled out.
Why it matters
This is a significant, if temporary, failure in a core service from your primary infrastructure partner, AWS. While actual billing was unaffected, the incident caused widespread alarm and highlights the potential for critical system errors even in mature cloud platforms. It serves as a reminder of the need for independent monitoring and robust internal financial reconciliation processes to distinguish between infrastructure provider errors and genuine cost overruns or fraudulent activity.
Regulators Move to Sanitize and Formalize FX Markets Nigeria's Central Bank is deploying a new real-time digital tracker for all Bureau De Change transactions, mandating a 24-hour resale of unused dollars. This follows similar pushes across the continent to increase transparency and reduce black market arbitrage, creating a more predictable environment for cross-border settlement.
Stablecoin Utility Moves Beyond Speculation to Core Infrastructure Visa's launch of an enterprise platform to help banks integrate stablecoin settlement is the latest signal of a major shift. With reports showing high adoption in Nigeria and South Africa for everyday spending and cross-border payments, stablecoins are solidifying their role as a practical settlement rail, particularly in markets with FX shortages.
AI-Driven Fraud Pushes Defenses Towards Behavioral Analytics As AI industrializes fraud with synthetic identities and deepfakes, defensive strategies are evolving. A new survey shows 70% of African finance professionals see fraud risk increasing. The most effective responses are moving beyond static rules to analyze behavioral signals like typing cadence and device movement, forcing a shift in fraud prevention tooling.
Ghana and Nigeria Lead Regulatory Overhauls Both Ghana and Nigeria are implementing major regulatory updates. Ghana's central bank is rolling out a comprehensive digital banking framework covering AI, crypto, and cloud security, while Nigeria's President has signed an executive order creating a CBN-led council to harmonize virtual asset oversight. These moves signal a continent-wide trend towards more structured and proactive fintech regulation.
Payment Infrastructure Deepens with Direct Bank Integrations Paystack's expanded partnership with Pesalink in Kenya, allowing direct bank-to-bank payments at checkout, highlights a key trend. By bypassing card rails for high-value transactions, payment providers are integrating deeper with national real-time payment systems to reduce costs and streamline reconciliation for merchants.
What to Expect
2026-07-23—South Africa's Reserve Bank Monetary Policy Committee meets to decide on interest rates.
2026-07-31—Dave Brown, AWS head of EC2, AI, and ML, is set to depart the company.
2026-10-01—Visa's new Acquirer Monitoring Program (VAMP) begins full enforcement.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
445
📖
Read in full
Every article opened, read, and evaluated
200
⭐
Published today
Ranked by importance and verified across sources
12
— The Settlement Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste