PAFON 1.0: Experts Harp on Stricter Data Privacy Measures in Payments Ecosystem in AI Era

PAFON 1.0: Experts Harp on Stricter Data Privacy Measures in Payments Ecosystem in AI Era

·      Tasks Payments System Operators on the Need for Consumer Education

 

The Chairman of the Committee of Chief Information Security Officers of Nigerian Financial Institutions (CCISONFI), Mr. Festus Amede, has identified Data Minimization Principles, User Consent and Control, as well as Compliance with Privacy Regulations as important elements in protecting privacy in payments.

 

Amede who was represented by an executive member of CCISONFI, Mr. Olusola Odediran (also, the Chief Information Security Officer) Nigeria Inter-Bank Settlement System (NIBSS), spoke during his keynote presentation at the maiden edition of Payments Forum Nigeria (PAFON 1.0) held at Oriental Hotel, Lagos on Thursday.

 

His presentation themed, ‘Payments: Trust, Security and Privacy in the AI Era,’ explored the critical aspects of trust, security, and privacy in payments, and provided insights into the challenges, solutions, and future trends in safeguarding transactions in the digital landscape.

 

The CCISONFI chairman stated that although the payment industry enjoys such regulatory oversights arising from the Nigerian Data Protection Act (NDPA) and Data protection laws, the Payment Card Industry Data Security Standard (PCI DSS), and the compliance requirements for businesses, the industry has balanced security and convenience relying on user experience in payment security, seamless authentication methods, and biometric and tokenized payments.

 

On how emerging Technologies will impact the payment industry, he disclosed that while Blockchain will be deployed to ensure secure transactions, Artificial Intelligence and Machine Learning will be used in fraud prevention even as privacy-preserving computing impact cannot be underestimated.

 

Amede called on players in the payment industry to continue to educate consumers by providing them with tips on how to secure online payments, how to recognise phishing attempts, and the importance of keeping software updated.

 

He listed some of the best practices for businesses including regular security audits and penetration testing; employee training on security protocols; and ensuring collaboration with payment security experts.

 

Speaking further on the need to build trust in payment systems, Amede, who is also the CISO of Zenith Bank Plc emphasised the importance of trust for consumer adoption, transparency in transactions, and commitment to securing the payment infrastructure.

 

He stated that the Payment Systems are exposed to such threats and vulnerabilities as Cyber Attacks and Data Breaches, Phishing and Social Engineering, and malware and ransomware.

 

Ikenna Ndugbu, the chief compliance officer, represented by Isoken Aigbomian, the regional sales Manager, Moniepoint, highlighted the evolution of Moniepoint into a leading payment processor, stating, “We started off with a virtual account service where we automated payments or transfers, allowing customers and businesses to make and receive payments seamlessly through transfers. This was what catapulted and was modified into the limelight and household name that seems to be.”

 

Aigbomian emphasized the company’s focus on providing flexible payment options to businesses across various sectors, stating, “Today, Moniepoint offers a wide variety of payment options to businesses. There is an online payment platform, in-person payments option and then there are the cash payments via our ATM network, which is almost, I think, one of the largest, as well.”

 

She explained how Moniepoint MFB identified the need for a seamless payment experience and developed innovative solutions to address it. “So, what we did was we looked inward, and we said the most popular means of payment in Nigeria is transfer. So we worked with our engineers and were able to build an infrastructure.”

 

Roosevelt Elias, the founder of Payble, noted the importance of data privacy and security in the age of digital payments, stating, “It is essential to preserve the details of such trusted transactions, as they often hold significant importance for the company’s outcomes and operations.”

 

He endorsed cautious use of data and highlighted the need for AI encryption and compliance-based companies to protect user privacy and ensure regulatory compliance.

 

On the other hand, Peter Evbota, sales director at inq. Digital Nigeria Limited, spoke on artificial intelligence (AI) and its ability to transform sectors, particularly in data analytics and security.

 

He emphasized the power of AI in processing both structured and unstructured data, highlighting its ability to detect patterns and provide valuable insights.

 

Earlier in his welcome address, Mr. Chike Onwuegbuchi, co-founder of TechCastle Foundation, organisers of the event, while giving insight into why the forum was berthed, said payments are very critical in the economy of every country including Nigeria.

 

“Last year, before the elections, we witnessed what Nigerians faced in the payments system- ATMs were not working to dispense cash, and at merchant locations, it was difficult to make payments with banks’ PoS thanks to Moniepoint and few others that came to the rescue,” he said.

 

Onwuegbuchi noted that there had been issues of declined transactions and customers’ accounts debited, in addition to an existing systemic fraud, misinformation and lack of information that have led to customers losing their money to fraudsters.

 

“After looking at these issues and many more, we at TechCastle Foundation decided to create a platform where stakeholders could discuss these issues with the objective of making our Payments systems better,” he said.

 

He stated that the essence of the forum was to make the ecosystem better for every Nigerian as operators, regulators and end users are expected to discuss to find a way to make the system better.

 

He added that trust issues in payments, security and other industry-related issues were to be discussed at the forum by cybersecurity experts who have distinguished themselves in working with money deposit banks to ensure that cybercriminals didn’t steal money in the bank.

 

The inaugural edition of the Payments Forum Nigeria was a cross-industry platform that focused on addressing issues that require broad cooperation and coordination across many constituents in the payments industry.

 

PAFON 1.0, sponsored by Moniepoint, Digital Encode Limited, Cybervergent, inq.Digital and Payble with support from the Central Bank of Nigeria (CBN), provided participants with an inside look at the Payments industry, offering perspectives from key stakeholders, including payment networks, technology innovators, leading merchants, issuers, acquirers, and payment processors.

 

 

 

PAFON PHOTO 1:

 

L-r: Olusola Odediran, Chief Information Security Officer, NIBSS/representative of Chairman, Committee of Chief Information Security Officers of Nigerian Financial Institutions; Chike Onwuegbuchi, co-founder, TechCastle Foundation; Adekunle Ajayi, Product Manager, Cloud and Digital Solutions, inq. Digital Nigeria Ltd; Abidemi Akinola, Chief Compliance Officer, Remita; Efemena Ogie, Head, Partnership, Monipoint Inc., and Peter Oluka, Editor, Techeconomy, during, the Payments Forum Nigeria (PAFON 1.0) event on, ‘Payments: Trust, Security and Privacy in AI era’ held in Lagos recently.

 

Why PalmPay Is Playing Big in the Digital Banking Space- Chika Nwosu

Why PalmPay Is Playing Big in the Digital Banking Space- Chika Nwosu

 

 

 

PalmPay, a leading Africa-focused fintech platform, has said that the future of money is now; therefore, the company has put in place adequate infrastructure, and the right measures to ensure that its millions of customers are guaranteed adequate security.

 

Speaking while making a presentation titled “Future of Money, Security, Customer Experience (CX)” at the Africa Tech Alliance (AfriTECH 3.0) held at The Providence Hotel, Ikeja GRA, last week, Mr. Chika Nwosu, the Managing Director of PalmPay, said that besides the operator putting the right things in place, the consumers also must the aware of how to protect themselves.

 

Nwosu who was represented at the Forum by Temitayo Oduwole, Head of IT and Payments at PalmPay, recounted the origin of money and its evolution to this moment and said that people are gradually moving away from paper money, where physical cash transactions are made, to what is today known as digital money where online and digital transactions now hold sway.

 

“All the services that we need are driven by technology, even the medium of exchange is also driven by technology. And the future of money right now is digital. If you look at the before and the now, right now because money has gone digital, we are experiencing a kind of transformation in the digital space. In terms of convenience, in terms of the ease of payment, that is what the future of money holds and that’s what we’re getting right now.

 

“I’m sure most people don’t even go around with cash again. Any transaction that you want to do, you can easily do that transaction on your phone, using your mobile wallet, using your card. So that is how money has transformed from being a cash-oriented medium to a digital medium right now,” he said.

 

Nwosu said PalmPay was prepared for this new regime of money and put a lot of robust infrastructure in place for risk management aimed at balancing the user experience with security in its app, adding that it has ensured that at any point in time, it puts measures in place that forestall a customer’s account being compromised.

 

“We have an AI in place, a logic that understands the pattern of your account, the pattern of your transaction. If it sees that somebody is doing something irrational or something out of the ordinary that you do on a normal day, because of the pattern that we’ve been able to build, we can block that transaction.

 

“And because we’re also going to have to look at technology-as-a-service, rather than having our infrastructure on prep, we’re having our infrastructure on the cloud. These are things that speak to infrastructure as a service, and technology-as-a-service, and are driving our reliability and sustainability today,” Nwosu said.

 

Nwosu admitted that though digital money is essential due to its speed, convenience, and accessibility, it also comes with its own threats and its own security challenges, especially in the face of nefarious activities around cybercrime.

 

“There are different channels by which people can access their money. However, in accessing this money, there is a potential challenge of having your funds being taken over by some people that you don’t want them to have access to it. There are lots of things happening around the future of money in terms of safety and in terms of security.

 

“We have online fraud. We have a local simulation. Identity theft is on the rise. We are being infused into devices, into servers. We have phishing in which e-mails are sent to deceive you to believe that the e-mails are coming from a genuine source. These are things that can affect or impact the digital money currency.

 

“The most important thing, again, is that at any point in time, as much as we are creating the environment to make sure that fraud is actually reduced in terms of cyber security, we are addressing all the things that need to be addressed so that from a digital money perspective, we are able to access the money without any fear. We can do a transaction without any fear.

 

“It’s also very important to understand that any time a fraud happens, a notification is very important. Next slide, please. Lack of security awareness is top of the reasons why consumers are scammed or defrauded. And what we try to do in PalmPay is to raise that awareness, to let our customers know that their personal information is only personal to them,” he said.

 

The Managing Director stated that lack of knowledge to protect personal information, patronizing fake sites and social media pages, and attempts or pivots on unofficial channels, are some of the things that could lead to customers being scammed or defrauded.

 

On PalmPay’s approach to enhancing customer security on its app, Nwosu said over the past four years it has been in the Nigerian market, it has been able to marry security with customer experience, which has remained the attraction to its brand.

 

“What we’ve done is binding. Your phone is bound such that even if you change your phone, you put in your credentials, and there’s an OTP that has been sent to revalidate and authorize the customer who is trying to do that transaction. One of the other things that we’ve also done to make sure that our customers are well protected is to have an inactive session set up.

 

“An inactive session has to do with if you’re not doing anything on your app, then it’s time out. It doesn’t give room for people to have access to that phone or your mobile app and try to do something. Because if you keep the mobile app up, anybody could actually have access to it, and they could do any transaction. Not to forget the fact that for every transaction that you do as well, it’s been enabled. We have a metric just to make sure that it is the right person that is accessing your account at any point in time,” Nwosu concluded.