E-Financial
Banking Security in Africa Reaching Tipping Point

Despite some consolidation in the African banking market, most of the banks we are speaking to remain confident about future opportunities on the continent.
However, we have noticed security steadily making its way towards the top of the agenda for bank executives, and rightly so.
Africa’s relative lack of infrastructure is both a blessing and a curse for banks. While access to traditional services is still a challenge, innovation in technology can offer big opportunities.
Mobile has become the de facto means of banking in many parts of Africa and, as mobile penetration – particularly smartphone penetration – increases, this is allowing banks to connect with more of the population than ever before, and to do so in a more targeted, personal way.
A study looking at trends in banking in Sub-Saharan Africa, released in June 2015 by the European Investment Bank, noted that the Sub-Saharan Africa (SSA) region leads the world in mobile money accounts.
While just 2 percent of adults worldwide have a mobile money account, in the SSA region, 12 percent have one. Although the base is still low, financial inclusion through mobile is growing fast.
While this is encouraging for the continent and the banks involved, banking CEOs are increasingly concerned about systemic risk and, more importantly, about the growing risk of cybercrime.
Cybercrime Cutting into Operational Profits
The Kenyan government alone is losing KSh five billion (US$50 million) yearly on cybercrime and the number is expected to grow. In fact, in March last year, 79 percent of African banking executives surveyed by PWC saw cyber-risk as an inhibitor of growth.
Frankly, we are not surprised. Globally, security is too often seen as a grudge purchase, and is brought in as a last resort and, even worse, often after a critical breach has already taken place. This can cause serious reputational damage to the banking and payments ecosystems.
Complacency around the security technology employed to authenticate a customer in particular is still rife. Despite all the international best practice, many banks still seem comfortable with using one-time password (OTP) technology as their primary means of authenticating their customers. Technology, one must add, that is already decades old.
Back in 2012, the Australian telcos warned their local banks that SMS was not secure and urged them to re-look at how they protected their customers.
At the time, “SMS is not designed to be a secure communications channel and should not be used by banks for electronic funds transfer authentication.”Communications Alliance chief executive John Stanton said it plainly:
This is not the end of the challenge. Many banks have shifted to two-factor authentication (where users have a password and make use of a token or phone as the second factor), but Gartner warned back in 2009 that any two-factor authentication relying on a browser can be beaten. The company went on to suggest banks make use of a fraud prevention approach that uses stronger authentication, fraud detection and out-of-band transaction verification.
Over the years we have seen a marked rise in man-in-the-middle attacks and these are receiving particular attention from African security analysts. These are best described as attacks criminals designed to secretly intercept and possibly tamper with messages between two parties who believe they are communicating only with one another. Many unsuspecting banking clients have become victims of phishing attacks through clicking email links, downloading fake or altered mobile apps or through the use of unsecured public wifi connections.
This is a real challenge for banks. They do work to educate their clients on safer browsing habits, but this is simply not enough. Banks must take responsibility for securing financial or personal data. The same is, of course, true for all organisations that hold sensitive information. Regulations around this are growing incredibly onerous and, if companies can’t guarantee they are protecting the consumer, they will be subject to very hefty penalties.
But this is not just a compliance challenge
If banks want to improve their bottom line, they must own the channel through which they communicate with their clients.
This channel is the proverbial goose that lays the golden egg. In a downturn economy especially, financial institutions are developing and rolling out incredibly innovative new products. This is all pointless, however, if the end user – the client – doesn’t trust your technology enough to complete a transaction.
One thing we know for sure is that criminals are constantly evolving and refining the ways they access data and funds. Each year, we send our developers to top global cybersecurity conferences.
We expect them to know exactly what the latest exploits are and to build technology at least 12 to 18 months ahead of the fraud curve. We also engage white-hat hackers to stress test our systems, exposing potential flaws and allowing us insight into problems before they exist.
In short, if banks want to ensure they can leverage the mobile channel for increased profits, they cannot afford to be complacent about security. We know that the criminals are thinking three steps ahead. Shouldn’t our banks be doing the same for their clients?
Schalk Nolte, CEO, Entersekt
E-Financial
UBA Beefs Up Mobile App Security to Stop Fraudulent Debits, Withdrawals

United Bank for Africa (UBA) has said that it has strengthened the security of transactions on its mobile application to stop fraudulent debits, unauthorised transfers and withdrawals.

Oliver Alawuba, Group Managing Director and CEO of United Bank for Africa
UBA announced this in a memo forwarded to its customers via email recently.
“We are pleased to inform you that we have further strengthened the security of transactions on the Mobile App.
“Updated authentication options now apply based on the value of transfers,” the memo reads in part.
UBA said in the memo that it had introduced authentication options for transactions of varying amounts to detect and prevent fraud.
According to the bank, transactions of N200,000 or more will now require customers to provide their Personal Identification Number (PIN) and a token number.
For transactions above N200,000 and N250,000, customers will be required to provide their PIN and a One-Time Password (OTP).
They can make use of their PIN and Biometric or PIN and Token numbers to authenticate such transactions.
Customers will be required to provide a PIN and OTP, or a PIN and Token number, when carrying out transactions between N250,000 and N500,000
For transactions between N500,000 and N10 million, customers must enter their PIN and Token to authenticate the transaction.
For transactions above N10 million, customers must use their PIN, Token, and Biometric to complete the transaction.
“The app will guide you, no need to memorise these thresholds,” the bank assured customers in the memo.
E-Financial
CBN Plans New Payment Systems Vision

Central Bank of Nigeria (CBN), has said that it will be launching a new payment systems vision that will outline where the entire ecosystem is expected to be heading in the next three years.

Olayemi Cardoso, governor of the Central Bank of Nigeria
The vision was co-created with the financial technology players, the mobile money operators, payment service providers across the board.
This was announced by Muhammad Abdullahi, deputy governor, Economic Policy Directorate at the CBN, after the inaugural meeting of the Payment Service Providers Committee.
Olayemi Cardoso, governor of the Central Bank of Nigeria, inaugurated the first meeting of the Payment Service Providers Committee, to reinforce policy coordination, knowledge sharing, and also ensure collective problem-solving by the industry and by the central bank.
The committee is being chaired by Muhammad Abdullahi, CBN deputy Governor, Economic Policy, and co-chaired by Philip Ikeazor, deputy Governor, Financial System Stability Directorate.
Other members of the committee include stakeholders from all the key payment service providers that are licensed to operate in Nigeria as well as a number of regulators, the Nigerian Communications Commission (NCC), Nigeria Deposit Insurance Corporation (NDIC) and the Securities and Exchange Commission (SEC).
According to Abdullahi, the committee is expected to convene on a quarterly basis to interface with players in the industry, to ensure that they collectively solve some of the challenges that are facing the industry.
“The committee is to put Nigeria on the best footing forward in terms of payment system space. As we already know, Nigeria is a world leader in payment service provision.
“The kind of technology and fintechs deployed in Nigeria are far ahead of regional and continental peers. And what we want to ensure over the next five to 10 years is that we continue to maintain this leadership and be able to do much more for the Nigerian economy,” he said.
He stated that setting up the committee had become relevant with the remarkable growth trajectory seen in the digital payment landscape in Nigeria.
“In 2024 alone, the system processed over 11.2 billion electronic transactions, amounting to over N1.07 quadrillion. This is the first time that digital payments crossed the quadrillion naira threshold, representing significant growth.
“The momentum has continued. In 2025, we’ve seen significant growth, and of course, in the first few months of 2026 as well. This is an ecosystem that is significantly growing, that has significant implications for growth in Nigeria, for inclusive growth, for trade, and other significant positives for our country, he said.
The Deputy Governor, Financial System Stability Directorate, and co-chair of the committee, explained that the inaugural meeting, featured discussions such as preliminary issues around how participation is going to be, what the top-line issues are, and some of the committees that would be set up eventually.
He said, “What we intend to do is to be able to solve this in a much faster way. So in the past, companies would have to wait a significant amount of time to interface or lay their concerns to the central bank, and the central bank would have to do supervisory visits—on-site, off-site—to be able to carry out its responsibilities.
“But today, now, we have a platform that brings us all together, that has committees that are working towards specific mandates that can advance the payment systems space, you know, payment service provider space. So what we really have now is that a major bottleneck has been removed, which is the bottleneck of coordination, collaboration, and joint systems thinking”.
On her part, Foyinsolami Akinjayeju, chief executive officer of Enhancing Financial Inclusion and Advancement (EFInA), said that the inaugural meeting of the Payment Services Providers Committee was to ensure that innovation was not stifled.
She said, “The Payment Services Providers Committee will more importantly, allow for inclusive and sustainable growth through access, expansion, strengthening of trust to ensure that no segments of our economy is left behind”.
Also, Premier Oiwoh, managing director and chief executive, Nigeria Inter Bank Settlement System (NIBSS), lauded the initiative describing it as historic and a win for all Nigerians.
For Jay Alabraba, chairman, Association of Licensed Mobile Payment Operators, the initiative is a good one which will help sustain the nation’s growth through active participation of industry stakeholders.
E-Financial
Ghana Makes History as First African Country to Integrate Payment National Identity Card

Ghana becomes the first African country to integrate payment into its Citizens’ Identity Card, ditching US-based payment giants Visa and Mastercard in Africa.

The card is now widely accepted in over 190 countries for online, in-store, and ATM use.
It allows for secure purchases, international payments, and offers perks like insurance and emergency assistance.
Ghana Card holders can activate their card using the MyCitizens App or by dialling *402#
Recall that Ghana’s National Identification Authority (NIA), statutory body mandated to establish a national identification system, first announced in September 2025, that the card would allow users to make use of Automated Teller Machines (ATMs), make payments in stores and online, make international payments with over 200 countries, and access other services such as insurance and emergency assistance.
The NIA’s aim for developing this feature is to bolster financial inclusion within the country.
In Ghana, the credit card penetration rate was forecast at 0.6% in 2024 and was forecast to continuously decrease between 2024 and 2029.
News2 days agoMicrosoft Revamps Copilot in Workplace AI Push
E-Business2 days agoKaspersky Warns of a New Phishing Technique Leveraging Bubble, a no-code AI Platform
Telecom2 days agoHow Recycled SIM Card Linked to N50m Kidnapping Nearly Landed me in Jail – Businesswoman
E-Financial2 days agoCBN Directs Banks, Fintechs to Complete Cybersecurity Audit Tool
Telecom2 days agoOuranos Technologies Strengthens Board with Key Leadership Appointments
General News2 days agoSenate Gives Tinubu Nod to Borrow Fresh $6Bn
General News2 days agoFG Launches CLHEEAN to Streamline Access to Government Services
E-Financial1 day agoCBN Says 33 Banks Raise Fresh N4.65 Trillion in Recapitalisation Exercise













