Today on The Settlement Layer: the agentic commerce stack picks up three production-grade building blocks in a single week, Kenya's Finance Bill tries to legislate its way past two court rulings, and a McKinsey finding quietly undermines the stablecoin-everywhere thesis. Twelve stories, no vibes.
Alipay introduced three products for agent-mediated commerce: AI Wallet (consumer oversight layer for reviewing and approving agent transactions after the fact), Token Pay (subscription and token top-up payments for AI model companies like MiniMax and Stepfun), and China's first Agentic Commerce Trust Protocol — an equivalent to AP2/UCP defining mandate and consent semantics. AI Pay has surpassed 100 million users and 300 million transactions. Live deployments span Luckin Coffee retail, Rokid smart glasses, Alibaba Qwen, and in-car payment systems.
Why it matters
This is the first production-scale implementation of agentic payment infrastructure with real consumer numbers. Alipay's architecture — splitting consumer oversight (AI Wallet) from model-company settlement (Token Pay) — directly addresses the KYA problem: users review agent actions retrospectively rather than approving each transaction in real time. Token Pay creates a genuinely new product category: payment infrastructure for AI model monetization that doesn't exist in card-rail economics. The Trust Protocol is China's answer to AP2/UCP, meaning Beijing's payment ecosystem will define its own mandate semantics — any agent-enabled payments touching Chinese consumers will need to comply. The 100M/300M numbers dwarf every Western agentic commerce metric by orders of magnitude.
FIDO Alliance published a technical framework showing how Google's Agent Payments Protocol (AP2) and Mastercard's Verifiable Intent (VI) work as complementary layers for agent-initiated transactions. AP2 defines mandate models — Open (agent selects payment credential) and Closed (credential pre-assigned) — while VI provides cryptographic proof of user authorisation, forming a shared standard for consent verification, dispute resolution, and audit trails. Mastercard simultaneously published its full agentic commerce roadmap: Agent Pay (live in Asia Pacific), Merchant Cloud, Insight Tokens for permissioned data signals, and Agent Suite services.
Why it matters
This is the first joint specification from a standards body defining how agents prove they're authorised to spend. The mandate model (Open vs Closed) maps directly to different risk profiles — an agent choosing its own payment credential has different liability implications than one operating on a pre-assigned token. For acquirers and PayFacs, the Verifiable Intent layer means disputes will eventually require cryptographic proof of agent authorisation, not just transaction records. The FIDO imprimatur gives this weight with regulators who already accept FIDO2/WebAuthn for SCA. Mastercard's parallel publication of its full stack — from Agent Pay to Merchant Cloud — signals these aren't research papers; they're product roadmaps with live deployments.
Amazon Bedrock AgentCore Payments (in preview) provides managed payment orchestration for AI agents, abstracting complexity across x402 and competing protocols. Key features: stablecoin support for sub-cent microtransactions, a three-phase atomic budget protocol (reserve → execute → settle) solving the concurrent-spend problem, secure credential vaulting via AgentCore Identity with automatic key rotation, and built-in observability through CloudWatch metrics, OpenTelemetry traces, and structured logs.
Why it matters
The three-phase atomic budget protocol is the headline for anyone building agent-facing payment infrastructure: it solves the concurrent spending problem where multiple agents drawing on the same budget can overdraw without coordination. The credential provider abstraction — pluggable backends including AWS Secrets Manager and HashiCorp Vault — eliminates the manual key rotation that currently plagues agent deployments. For operators running serverless payment workloads on AWS, this integrates directly into existing IAM, CloudTrail, and CloudWatch stacks without new tooling. The protocol handler model supports x402, AP2, and future standards without API churn.
Building on the mobile-money VAT and betting-excise expansions we've been tracking, Kenya's Finance Bill 2026 seeks to reverse a December 2025 Supreme Court ruling that exempted Visa and Mastercard network fees from withholding tax. The Bill redefines 'royalty' and 'management fees' in the Income Tax Act to explicitly cover payment card schemes, switching systems, and potentially cross-border software payments — triggering WHT of 20% for non-residents and 5% for residents. This is the third court ruling the same Bill overrides legislatively.
Why it matters
We've already seen this Bill use omnibus legislation to reverse specific court losses on mobile-money fees, creating an unpredictable tax environment. The royalty reclassification hits banks and acquirers directly — Visa/Mastercard scheme fees flowing into Kenya will carry a 20% WHT burden that gets passed downstream to merchants as higher MSC. Combined with the 16% VAT on PSP fees already proposed in the Bill, this makes Kenya's card-acceptance economics materially worse and adds a concentrated dose of regulatory risk.
The Bank of Ghana directed Mobile Money Fintech Limited (the MTN MoMo entity) on 26 May to suspend a proposed 0.75% fee (capped at GHS 5) on wallet-to-bank transfers, originally set for 1 June. MMFL had justified the charge as addressing a structural cost asymmetry: cash-in/cash-out operations incur agent commissions and GhIPSS fees, but wallet-to-bank transfers historically cost customers nothing. The regulator paused implementation pending stakeholder consultation on consumer protection and financial inclusion impacts.
Why it matters
This is a central bank stepping directly into mobile money pricing — not on fraud or AML grounds, but on the basis that a fee increase might harm financial inclusion. The operational gap MMFL was trying to close is real: someone pays for interoperability between mobile money and bank accounts, and currently it's the operator. BoG's intervention signals that in Ghana, consumer affordability trumps operator margin recovery even when the underlying cost structure justifies it. For payment infrastructure builders, this sets a clear precedent: fee changes on mobile money rails in Ghana require prior regulatory blessing, not just notice.
South African retailer Pepkor received conditional Prudential Authority approval to launch a digital bank (codename 'plusb'), targeting 1.8 million primary banking customers within five years using its 6,500-store network and existing 22 million annual cash-in/out transactions. The Financial Services segment grew revenue 41.6% to R3 billion in H1 2026 across lending, insurance, and cellular operations. Pepkor acquired CloudBadger Technologies in October 2025 for banking platform capability and projects capital expenditure below R920M (~$56M) with 30%+ ROE by year five.
Why it matters
This is the most significant new-bank application in South Africa since TymeBank, and it follows a fundamentally different model: Pepkor already has physical distribution (PEP, Ackermans), informal-market reach (Flash platform with 176,000 traders), and embedded financial products generating real revenue. The 'plusb' bank will compete directly in merchant acquiring, B2C lending, and informal-market settlement — precisely the space where PayFacs and fintech acquirers currently operate. The capital intensity ($56M for a bank with 6,500 branch equivalents) is remarkably low; the existing transaction base provides Day 1 data for credit scoring and fraud models.
Nigerian AML/KYC startup Smartcomply expanded into the UK with its Adhere platform and was simultaneously selected as a Mastercard Engage partner. The platform monitors over $1 billion monthly in transactions, integrates natively with African identity infrastructure (BVN, NIN), and reports 70% reduction in manual compliance workload and 40% fewer false-positive fraud alerts. The UK expansion targets EMIs, remittance firms, and cross-border fintechs on Africa corridors — where foreign transaction-monitoring systems routinely misinterpret African financial behaviour, causing de-risking.
Why it matters
Correspondent banking relationships with Sub-Saharan Africa have declined over 25% in the past decade, driving remittance costs to an average of 8.5%. One root cause is that compliance tooling built for SWIFT-centric patterns generates high false-positive rates on mobile-money flows, leading banks to de-risk entire corridors rather than invest in better monitoring. Smartcomply's approach — native integration with regional identity systems and behavioural analysis tuned to African mobile-money patterns — directly addresses this operational friction. The Mastercard Engage selection provides distribution through 210+ countries, turning an African compliance vendor into a global partner channel play.
McKinsey research shows stablecoin circulation stuck at ~$300 billion — far below 2023 forecasts of $4 trillion by 2030 — while tokenised deposit infrastructure already facilitates over $4 trillion in annual flows. Citi, BNY, and JP Morgan's Kinexys are deploying deposit tokens embedded in institutional payment workflows. Only Circle and Tether dominate stablecoin issuance, creating concentration risk. Separately, the EY global analysis ranked MiCA as the most restrictive stablecoin framework worldwide, with Circle as the only major issuer to achieve full compliance; Tether's USDT faces de-listing pressure across EU exchanges.
Why it matters
This is a useful corrective to the 'stablecoins replace everything' thesis. The institutional money is concentrating on deposit tokens — bank-issued, embedded in existing settlement plumbing, and operating under existing banking regulation — not on public-chain stablecoins. For operators evaluating settlement infrastructure, the implication is that stablecoin strategy needs to integrate with or layer on top of tokenised deposit rails. The MiCA data sharpens this further: in Europe, the viable issuer set narrows to Circle, and USDT is being actively de-listed. If you're building cross-border rails that touch EU markets, your stablecoin choices are already constrained.
Anthropic acquired Stainless (estimated $300M) to integrate its automated SDK and MCP server generation tooling — directly reducing the friction of connecting Claude agents to external APIs. Simultaneously, 28 cybersecurity vendors (CrowdStrike, Snyk, Varonis, Tenable, Netskope, Wiz, Proofpoint, Datadog, Okta, Palo Alto Networks, and others) announced native integrations via a new Claude Compliance API that provides programmatic access to conversation content, activity events, and admin actions from Claude Enterprise. Separately, Anthropic released a free security-guidance plugin for Claude Code that autonomously reviews code edits across three layers (pattern matching, model review, commit-level review), cutting security-related PR comments by 30–40% in internal testing.
Why it matters
Three distinct enterprise-readiness moves in one week. The Stainless acquisition targets the specific bottleneck of agent-API integration — auto-generating language-native SDKs and MCP servers means agents can connect to payment gateways, banking APIs, or iGaming platforms with less custom glue. The Compliance API closes the enterprise governance gap: Claude conversations can now flow into existing SIEM, DLP, and identity-management stacks without manual exports. The security plugin addresses a real operational risk for teams using LLM-generated code in financial systems. Together, these moves signal Anthropic is systematically removing the blockers that keep Claude out of regulated production environments.
Seventeen months after Brazil's Bets Law legalised online gambling, President Lula and Congress are moving to dismantle or severely restrict it. Two bipartisan bills landed on 19 May proposing comprehensive rewrites; more aggressive proposals from PT, Senator Girão, and Senator Alves would ban operations or advertising entirely. The Evangelical Caucus, now politically influential, frames gambling as hostile to Lula's welfare agenda. The STF separately fast-tracked a constitutional challenge to Rio Grande do Sul's state-level betting ad restrictions, which could determine whether states can fragment the federal framework.
Why it matters
Brazil went from zero-to-regulated in January 2025 and may revert toward prohibition by October 2026 elections. Operators licensed under the Bets Law face existential regulatory risk — not from enforcement failure but from political recalibration where gambling becomes an election-year wedge issue. The STF constitutional challenge adds a second dimension: if states can impose localised ad restrictions on federally licensed platforms, the operational model fragments into 27 compliance regimes. For any operator or infrastructure provider with Brazil exposure, the next four months determine whether the market survives in recognisable form.
Following Pirates' domestic treble, coach Abdeslam Ouaddou is drawing interest from multiple continental clubs — adding concrete suitor pressure to his public comments about fatigue and possible departure. Separately, Kaizer Chiefs dismissed caretaker co-coaches Khalil Ben Youssef and Cedric Kaze despite a third-place finish and CAF Confederation Cup qualification, and are searching for a sole head coach with Manqoba Mngqithi and Pitso Mosimane among names discussed. Dr Irvin Khoza issued a post-title statement reframing Pirates' 14-year narrative, noting five MTN8s, three Nedbank Cups, and multiple CAF finals during the 'drought' period.
Why it matters
The PSL's two biggest clubs face opposite coaching crises: Pirates risk losing the architect of a historic season to continental poaching, while Chiefs are starting from scratch after a managerial reset that cost them continuity for next season's CAF campaign. Ouaddou's situation is the more consequential — his departure would unravel the defensive system (21 clean sheets, 12 conceded) that underpinned the treble. Khoza's public reframing of the drought narrative is institutional positioning: setting the expectation that Pirates' standard is sustained excellence, not one-off vindication. Watch for Bafana's 27 May squad announcement — nine Pirates players in the provisional 32.
Johannesburg is requesting council approval for approximately €200M (R3.8 billion) from German development bank KFW to fund City Power infrastructure over three financial years, binding the municipality to a 15-year repayment plan. This follows Energy Minister Ramokgopa's two-day intervention to prevent Eskom from disconnecting bulk supply over the R5.26 billion debt, resulting in a preliminary Distribution Agency Agreement embedding Eskom engineers into City Power for technical support. Separately, AfriForum is challenging the city's proposed 65.6% increase in the water demand management levy (R65.08 to R107.74/month) over lack of cost justification.
Why it matters
Three developments in one week paint the picture: emergency debt negotiation to keep the lights on, a long-term infrastructure loan to fix aging distribution, and a contested water levy increase with no transparency. For Johannesburg homeowners, the €200M loan creates 15-year tariff obligations that will compound on top of Eskom's 9% bulk hike already baked into July tariffs. The Distribution Agency Agreement — embedding Eskom engineers into City Power — is structurally significant: it's the first step toward operational oversight that could eventually lead to a full distribution handover. The water levy challenge may set a precedent on whether municipalities must justify increases before implementation.
Agentic payment protocols are converging on three competing trust layers FIDO Alliance published AP2+Verifiable Intent specifications, AWS shipped AgentCore Payments with atomic budget enforcement, and Alipay went live with AI Wallet and Token Pay at 100M+ users. The competing stacks (Google/Mastercard/FIDO, AWS/Stripe/Coinbase, Alipay/China Trust Protocol) are all answering the same question — how agents hold credentials, prove authorisation, and create audit trails — but with different mandate models and liability assumptions.
Kenya's Finance Bill is a case study in regulatory whiplash The same Bill reverses a Supreme Court ruling on card-scheme royalty taxes AND an August 2025 High Court judgment on mobile money VAT, while broadening betting excise duty and tightening crypto reporting. The pattern — legislating around court losses — signals unstable tax treatment for any payment rail touching Kenya, from M-Pesa to Visa interchange.
Tokenised deposits are quietly outpacing stablecoins in institutional flows McKinsey data shows stablecoin circulation flat at ~$300B against 2023 forecasts of $4T by 2030, while tokenised deposits already facilitate $4T+ in annual flows via Citi, BNY, and JP Morgan Kinexys. The institutional money is concentrating on deposit tokens embedded in existing banking plumbing, not on public-chain stablecoins.
African regulators are intervening directly in fee-setting for mobile money Bank of Ghana blocked MTN MoMo's 0.75% wallet-to-bank fee; Kenya is stacking VAT and withholding tax on PSP and card-scheme fees; South Africa is extending crypto capital-flow comment periods. The common thread: regulators prioritising consumer affordability and financial inclusion over operator margin, creating pricing uncertainty for payment infrastructure builders.
Enterprise Claude adoption is hitting governance maturity Anthropic shipped 28 security/compliance integrations via a new Compliance API, acquired Stainless for SDK auto-generation, launched a PE-backed services firm for mid-market deployment, and released a free security plugin for Claude Code. The week's moves are all about removing enterprise blockers — audit trails, DLP integration, credential management — rather than model capability.
What to Expect
2026-05-29—SARB Monetary Policy Committee interest rate decision — 25bps hike expected, prime to 10.50%.
2026-06-15—SARB NPS third draft comment deadline — activity-based licensing framework for non-bank payment providers.
2026-06-22—Nersa extended deadline for comments on SAWEM electricity market code and rules; virtual hearings 1 July.
2026-06-30—South Africa crypto capital-flow regulation comment deadline (extended from earlier date).
2026-07-01—South African metro electricity tariff increases take effect (Cape Town fixed charges +40%, Tshwane >R5/kWh).
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
739
📖
Read in full
Every article opened, read, and evaluated
209
⭐
Published today
Ranked by importance and verified across sources
12
— The Settlement Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste