FINOBOD Forum Discussed Use of AI Agents and Cross-Border QR Payments
Read more
UzDaily
uzdaily.uz

FINOBOD Forum Discussed Use of AI Agents and Cross-Border QR Payments

Representatives from the banking and payment sectors discussed the application of artificial intelligence in financial services, the costs of QR payments, and the integration of national payment systems for international operations at the FINOBOD forum held in Tashkent.

During a session titled 'Banks and Payment Platforms,' Anna Savina, president of Right Outdoor Media group and session moderator, presented data from the Central Bank indicating that Uzbekistan received $15.9 billion in international payments during the first nine months of 2026, while outgoing payments amounted to $2 billion.

Roman Tretyakov, Deputy Chairman of the Board of Octobank, noted that AI agents capable of making payments independently are already used abroad. He cited Stripe as an example of a payment system that allows an agent to select tickets, book hotels, and pay for services on behalf of a client. According to Tretyakov, Visa and Mastercard lag in this area due to extensive internal regulations.

Octobank is developing a 'banking as a service' model, through which partners connect to the bank's platform and create their own products. Key functions, such as anti-money laundering (AML), fraud protection, and interaction with government systems, remain under the control of the bank itself.

Sergey Kozlov, Advisor to the Chairman of the Board and Chief AI Officer of Uzpromstroybank, stated that artificial intelligence should remain a tool for scaling the bank's activities, not an end in itself. He reported that the bank uses the unified Nova platform, reusing common components across various services. These components include speech recognition, used in call centers, debt collection, branches, and quality control, as well as image and document processing.

Kozlov emphasized that the bank can delegate some functions to external solutions, but it cannot delegate the responsibility for decision-making. He added that credit decisions must be explainable, and the impact of new scoring models must be assessed through A/B testing. Instead of a simple refusal, banks should offer alternatives to applicants, such as flexible repayment schedules or installment loans.

He also noted that for seasonal businesses, including restaurants, repayment schedules can be adjusted based on income fluctuations: higher payments during peak seasons and lower ones during downturns.

Naima Mirzaeva, a member of the supervisory board of Click, reported that the platform has 24 million users. Click uses AI to personalize services and is developing an AI-based assistant that already has over 60,000 users. Meanwhile, she noted that fraud schemes are becoming increasingly sophisticated, and the platform informs clients about potential risks while constantly improving fraud prevention systems. Click is also certified according to PCI DSS 4.0 Level 1 standard.

Islam Diyarov, Director of Acquisition and Issuance at HUMO, stated that the company has integrated with Apple Pay and the Indian payment system UPI, and is working on a project with Kazakhstan. He identified the main challenges in cross-border integration as aligning KYC and AML requirements, as well as customer data exchange standards. However, the responsibility for verifying sellers and customers remains at the national level.

Diyarov also mentioned that QR payments in Uzbekistan are about five times more expensive than acquiring POS, whereas internationally, the opposite is usually true. The final commission for the seller is calculated through a series of fees set by the payment system, the issuing bank, and the acquiring bank.

Tretyakov added that seven Uzbek banks launched Apple Pay about a month ago, but this has not reduced the popularity of QR payments. He also quoted data showing that the turnover of stablecoins in US dollars increased by 1.5 times compared to the previous year.

Ekaterina Zemskova, COO and Head of Digital Assets at PAY10, reported that the company holds central bank licenses in the UAE, Bahrain, India, Morocco, and Hungary. According to her, national QR payment systems can be linked via Application Programming Interfaces (APIs), allowing travelers to use familiar payment services abroad. In her opinion, stablecoins are necessary not for end consumers but for the broader financial ecosystem, as they can speed up and reduce the cost of cross-border transfers in jurisdictions where they are permitted. Zemskova noted that regulation in the UAE is developing rapidly, while Morocco still lacks a regulatory framework in this area.

Similar stories

SA FinTech Awards: Banks and FinTech Companies Demonstrate Collaboration in Industry Development
Read more
techcentral.co.za

SA FinTech Awards: Banks and FinTech Companies Demonstrate Collaboration in Industry Development

It became evident during the SA FinTech Awards that the boundary between traditional banks and fintech companies has practically blurred. Today, there is a trend towards partnership, where the best achievements in the industry are realized through joint efforts.

As part of the second SA FinTech Awards, organized by Finasa (Fintech Association of South Africa) and presented by PayInc, a list of finalists will be unveiled. The event will take place in Cape Town on November 26th.

The list of candidates demonstrates the practical application of innovations. For example, Mama Money and Mukuru help people make cross-border money transfers to families, while Lesaka creates financial services for small traders and consumers whom banks previously could not reach. This activity is part of users' daily lives, although it rarely makes news headlines.

The significance of fintech has also led it to become the focus of regulators. In April, the national treasury published a draft Capital Flow Management Regulations that for the first time include crypto assets in the foreign exchange control system, although the treasury stated its intention to review these rules. Regulators are also studying how to regulate the 'buy now, pay later' model, taking input from providers on developing rules that align with the product's actual functioning.

These awards contribute to forming a comprehensive market picture, showing what is already working effectively. The second edition of the awards, hosted by Finasa and presented by PayInc, laid the groundwork during the first competition in 2025, when Koen Jonker received the first Lifetime Achievement Award. The selection process is not based on presentations or flashy scenes; each finalist had to justify their candidacy in writing, based on the criteria of their category.

An independent panel of five judges reviews all applications. The panel includes individuals with diverse experience in the sector. Lee Yi Naek, CEO and Regional President of TransUnion Africa, returned as a judge. He was joined by Gita Erling, Independent Advisor at GE Advisory; Mohammed Nana, Senior Vice President of Digital Partnerships in Eastern Europe, the Middle East, and Africa at Mastercard; Enoch Malisa, Head of Business Development at PayInc; and Sepathi Nekhondela, Director of Financial Sector Development at the National Treasury. Their expertise covers credit data, card networks, the national payment system, and public policy, requiring the winner to consider all these aspects simultaneously.

This year's list of finalists features various categories: Best Fintech Startup (Happy Pay, NjiaPay, and SAPay); Best Regulatory Technology (Comcorp, Facephi, and Sumsub); Innovations in Digital Assets and Cryptocurrencies (ARREL, Luno, and VALR); Excellence in Payments (Ozow and Paymentology); Impact on Financial Inclusion (Lesaka, Mama Money, and Mukuru); Fintech Innovation of the Year (Halo Dot, Intengo Market, and TurnStay); Ecosystem Collaboration of the Year (Jumo and Mukuru; Mama Money and Capitec; Ozow and Happy Pay); Best Fintech Application of the Year (Franc, GoTyme Bank, and Karri); Outstanding Thinker of the Year (Cheslyn Jacobs (GoTyme), Simon Just (Standard Bank), and Thalia Pillay (Orca Fraud)); Fintech Entrepreneur of the Year (Lincoln Mali (Lesaka), Marius Brits (360 A&S), and Simon Ellis (JEM)); as well as Lifetime Achievement and Vision awards, which will be announced on the day of the event.

The awards also serve a simpler function: they show those working in this field, often in small teams and under strict regulation, that the industry notices them. Many of the current finalists are young companies that have quietly built serious businesses, and such an event allows them to be in the same space as banks and policymakers with whom they will work in the future.

Daniel Lawrence, COO of Finasa, noted: 'South African fintech has matured. This year's list of finalists is full of banks and fintech companies working together to solve problems that most South Africans never see but rely on every day. This work deserves a stage, and on November 26th, it will get one.'

The event will take place in Cape Town on November 26th. Finasa plans to use this night for an important announcement for the entire industry. Attendance is by invitation only, and Finasa allocates spots. Applications are accepted until November 12th on the website www.finasa.org.za/awards, and voting closes on November 13th. The full list of 2026 winners will be published by TechCentral on November 30th.

Central Asian Countries and Azerbaijan are Developing a Unified System of Non-Cash Payments via QR Codes
Read more
podrobno.uz

Central Asian Countries and Azerbaijan are Developing a Unified System of Non-Cash Payments via QR Codes

Residents of Uzbekistan in the future will be able to simplify the process of paying for purchases in Kazakhstan, Kyrgyzstan, Tajikistan, and Azerbaijan, as they will not need to install additional applications or use exchange bureaus. The central banks of the five countries have reached an agreement to work on the integration of their national instant payment systems, which will allow tourists to use QR codes through their regular banking applications.

The preliminary agreement was reached during a meeting of representatives of national and central banks held in Dushanbe. Uzbekistan, Azerbaijan, Kazakhstan, Kyrgyzstan, and Tajikistan are participating in this initiative.

A joint working group will be formed to develop the project, comprising specialists from banks and national payment systems. The group's task is to agree on technical aspects, including the format for exchanging payment messages, the structure of necessary details, and transaction security standards. Upon completion of its work, a roadmap for the gradual implementation of this system will be presented.

It is expected that the introduction of a unified mechanism will significantly ease daily financial operations for citizens traveling throughout the region, as well as stimulate the growth of mutual trade and tourism exchange.

Discussions on integrating QR payments in Central Asia have been ongoing for several months. The parties decided to forgo the creation of a separate supranational regulator, focusing efforts instead on unifying technical standards, digital identification procedures, and data exchange rules.

Some bilateral solutions are already operational; for example, in October 2025, Kyrgyzstan and Kazakhstan launched a QR payment mechanism between their banks. Additionally, Uzbekistan and Kazakhstan are in the process of preparing mutual payments using national QR codes, which will allow Uzbek citizens to pay for goods in Kazakhstan, and Kazakh citizens while visiting Uzbekistan.

I4C warns banks and fintech companies about the threat of AI-powered cyberattacks using 5884 IP addresses
Read more
www.aajtak.in

I4C warns banks and fintech companies about the threat of AI-powered cyberattacks using 5884 IP addresses

Artificial intelligence (AI) is transforming not only the technology and business sectors but is also becoming a new tool in the hands of cybercriminals. Due to the growing use of digital banking and online payments in the country, fraudsters have developed a new method of attack. Instead of traditional hacking, criminals are now using AI-based agents to attack the digital systems of banks, non-banking financial companies (NBFCs), and fintech platforms. These attacks allow for the exploitation of system vulnerabilities at machine speed to conduct unauthorized transactions amounting to millions of rupees.

The Indian Cyber Crime Coordination Centre (I4C), operating under the Ministry of Home Affairs, and the CERT-In agency, part of the Ministry of Electronics and Information Technology, have expressed serious concern regarding this matter. Both organizations have issued warnings to institutions related to banks, NBFCs, fintech companies, payment aggregators, and payment gateways. They indicate that cybercriminals are employing AI agents for financial gain. Cases of unauthorized large-sum operations through fund distribution systems and payment APIs have been recorded.

According to investigative agency sources, 5884 AI agents are constantly online and targeting fintech companies. This fact has heightened cybersecurity concerns. However, the official I4C warning does not mention the specific number of 5884 AI agents; the official document only confirms the threat of automated cyberattacks using AI and the risk of unauthorized transactions amounting to millions of rupees.

Data available on the AI Attacker Threat Research website identified 5884 IP addresses associated with cyberattacks. These addresses were registered based on incident reports, independent analysis, and other technical evidence. The presumed hosting network for these IP addresses is spread across 60 countries worldwide. Of the data available, 2954 are registered in Asia, and 2397 in North America. Nevertheless, this number of IP addresses cannot be directly considered the number of active AI agents.

The method of cyberattack using AI agents differs from traditional hacking. Criminals first discover weaknesses in the digital infrastructure of a bank or financial institution. Then, they attempt to exploit these vulnerabilities using AI-based tools and Agentic AI Framework. This technology allows for the automation of many stages of an attack, enabling a large number of digital operations to be conducted in a short time.

According to the threats outlined in the official warning, cybercriminals can execute such attacks in four main stages. First, they target outdated software and servers. Next come attempts to access payment APIs and fund transfer systems. Then, improperly transferred funds are directed to various accounts via mule accounts. Finally, they attempt to destroy digital evidence to evade investigation by law enforcement agencies.

Cybercriminals primarily identify software, servers, and digital platforms that have not been updated in a timely manner. The servers and IT systems of many financial institutions remain vulnerable due to incorrect configuration connected to the internet. Attackers attempt to gain unauthorized access to the system by exploiting these technical flaws. After gaining access, they may look for ways to penetrate other parts of the network.

Online interfaces created for customer complaints are also becoming targets for cybercriminals. If the security of such platforms is weak, attackers may try to gain access to the company's internal digital networks through them. Thus, even a regular external interface can pose a threat to the entire financial system. Therefore, companies must regularly check the security and configuration of all their internet-facing systems.

After gaining access to a digital system, the next target for hackers are APIs related to payments and fund transfers. APIs, or Application Programming Interfaces, are digital interfaces through which various software and systems interact. Banks and fintech companies use them to carry out payments, money transfers, and fund distribution operations. If there is a failure in the security of these APIs, it can affect financial operations.

This is where AI agents can become a dangerous weapon for cybercriminals. With the help of the Agentic AI Framework, many attack processes can be automated. This allows for the simultaneous execution of multiple actions and rapid exploitation of system vulnerabilities. Where cybercriminals previously required human intervention for each procedure, AI automation can now accelerate the attack. This leaves banks and fintech companies with very little time to detect and prevent the attack.

After unauthorized transactions occur through the payment system or fund distribution API, ...

Popular