Current analysis on payment security, fraud prevention, AML/KYC, and PCI DSS compliance.
Payment EcosystemWhat Changed The UK government is dissolving the Payment Systems Regulator (PSR) and transferring its functions to the Financial Conduct Authority (FCA) . This move aims to streamline oversight and re
incident-responseWhen BridgePay s ransomware attack forced restaurants to operate on a cash-only basis and halted municipal payment portals nationwide, it highlighted a critical question for every payment platform: ho
PCI DSS ComplianceNew AI Requirements in PCI Secure SLC Standard v2.0 The PCI Security Standards Council (PCI SSC) opened a 30-day Request for Comments (RFC) period from May 15 to June 15 for the Secure Software Lifecy
PCI DSS ComplianceThe question at hand Your company outsources its entire eCommerce operation to a third party. Are you still in scope for PCI DSS compliance? The answer hinges on a detail most merchants overlook: who
Get weekly security insights and compliance updates delivered to your inbox.
Fraud Detection AnalyticsScope This guide outlines the operational and technical compliance requirements introduced by the Third Payment Services Directive (PSD3) and the Payment Services Regulation (PSR). It s designed for c
Fraud Detection AnalyticsVerification of Payee (VoP) helps reduce misdirected payments but doesn t stop fraud. Erwin Kulk from EBA Clearing highlighted that fraud remains a growing challenge despite VoP s introduction. Your t
cryptography-key-managementThe Conventional Wisdom At payment security conferences, the buzz is that organizations using HSMs must start transitioning to PCI PTS HSM v5.0 . The standard s release has many believing their curren
authentication-access-controlYour compliance team needs documented consent before collecting facial biometric data for payment authentication. This script template covers regulatory requirements across GDPR, CCPA/CPRA, BIPA, and
aml-kycYour institution just onboarded a new customer. The ID document passed automated checks. The selfie matched. The address validated against a credit bureau. Three months later, you re filing a Suspicio
Fraud Detection AnalyticsThe Challenge In May 2026, a federal court found Cliq Inc. (formerly Cardflex Inc.) and its executives, Andrew Phillips and John Blaugrund, in civil contempt for violating a 2015 FTC order designed to
PCI DSS ComplianceThe Problem An organization using PCI DSS v4.x opted for the customized approach for several requirements. They enlisted their Qualified Security Assessor (QSA) early on, seeking help to design custom
aml-kycThe Question at Hand Your team collects a bank statement from a high-risk customer, checks the source-of-funds box, and moves on. But what does that statement actually prove? It shows money moved from
Fraud Detection AnalyticsYou ve just received a call from an 82-year-old customer trying to wire $15,000 to help a grandson who contacted her via text. Your fraud detection system flags nothing unusual. The customer insists i
Payment EcosystemThe Question at Hand When your bank underwrites a merchant payment processing relationship, you re taking on fraud exposure, reputational risk, and regulatory scrutiny. The FDIC has issued new guideli
authentication-access-controlThe FFIEC s final authentication guidance urges financial institutions to adopt risk-based authentication, but many teams struggle with implementation. The challenge isn t understanding the concept; i
aml-kycThe FCA s shutdown of Euro Exchange Securities UK Limited wasn t just a fine or a warning. It was an operational death sentence. The regulator identified systemic weaknesses in financial crime control
