The counterfactual: what should have caught this On June 6, 2025, a contractor with three-minute-old live backend access rewrote NCBA Rwanda’s mobile money integration so that 70 ghost accounts co...

The trigger-limit blind spot In April 2024, roughly ₦11 billion (about $7 million) moved out of Flutterwave into accounts across five financial institutions in four days. An insider later put the ...

Introduction Between February 2023 and April 2024, Africa’s most valuable fintech — Flutterwave, the Nigerian payment processor valued at $3 billion — was hit by four separate unauthorized-transfe...

Introduction In February 2024, a finance worker at the Hong Kong office of Arup — the British engineering firm behind some of the world’s most complex buildings — joined a video call with his chie...

The Week in AI A frontier lab pressing pause on its own flagship, a $2 trillion IPO in the making, and a continent-level stat on AI-driven cybercrime — the week of August 18–24 had all three. Here...

Introduction Kenya’s digital lending boom produced hundreds of app-based lenders — and a regulatory reckoning. In March 2022, the Central Bank of Kenya (CBK) gazetted the Digital Credit Providers ...

Introduction Conversational AI is no longer experimental in financial services. Capital One’s Eno, which Reuters covered at launch as the first natural-language SMS assistant from a US bank, handl...

The scandal that ended “scrape everything” lending Between 2022 and 2024, Kenya became a case study in what happens when fintech analytics outruns consent. Digital credit apps backed by Silicon Va...

Three minutes was all it took At 5:30 AM on June 6, 2025, NCBA Bank activated a vendor contract and granted a consultancy employee — Evans Nandwa of Nairobi-based Ronford Digital Limited — live ba...

The 5:33 AM Change That Cost USD 446,000 On June 6, 2025, during a scheduled maintenance window at NCBA Bank Rwanda, the bank activated a vendor contract that gave Evans Nandwa — a contractor from...