BriefingRegulationArchiveProfile
PaymentLeaksFreshly baked payment news
2026-03-29
ES|EN
Access

🔴 WAR ROOM DASHBOARD — March 29, 2026

2026-03-29

Yesterday's data

This briefing is generated using artificial intelligence and public sources. Data and links are automatically verified, but we recommend cross-checking critical information with original sources. This content does not constitute financial, investment, or regulatory advice.

1. Anthropic Mythos AI leak — Chinese group uses Claude to infiltrate ~30 financial institutions

A Chinese state group was discovered using Claude Code to infiltrate ~30 organizations, including financial institutions. Anthropic accidentally leaked details of "Claude Mythos", an unpublished model with capabilities to discover zero-day vulnerabilities in production code. Cybersecurity stocks fell sharply. This is not a theoretical risk — it's an operational weapon in the hands of state actors. Every PSP and acquirer with legacy code (i.e., all of them) needs to reevaluate their attack surface assuming that the adversary has foundation model-level code analysis tools.

  • Fortune
  • CoinDesk

2. USDC surpasses USDT in volume for the first time — $2.55T vs $1.49T in Q1 2026

Structural shift in stablecoins. Circle won the institutional volume battle while Tether retains market cap dominance ($184B). The catalyst: GENIUS Act + Circle's compliance-first stance. Simultaneously, Fiserv launched FIUSD with distribution to 10,000 FIs and 6M merchants. The question for PSPs and acquirers is no longer "do we adopt stablecoins?" but "which one, and when do we get left out if we don't?"

  • Motley Fool

3. Weekend of deadlines: 4 regulations in effect in 48 hours

Unprecedented confluence: DORA Register of Information (Monday, only 6.5% passed quality checks), Indonesia TIKMI (new payments architecture), PayPay absorbs LINE Pay (near-monopoly Japanese QR, 67M+ users), and RBI mandatory 2FA for ALL digital payments in India (Tuesday, 1.4B people). Four markets representing >2B people change regimes simultaneously. Whoever isn't ready Monday morning is already too late.

  • CSSF DORA

[HIGH] OpenAI launches Agentic Commerce Protocol with Walmart, Target, Best Buy, Sephora — Morgan Stanley projects $385B in agentic commerce by 2030. The battle to be the AI agent checkout is open and card schemes aren't the only possible rail. CNBC

[HIGH] Mastercard LTM — foundation model for transactional data with 300% fraud detection improvement. MC builds 3-layer stack (LTM + behavioral biometrics + Decision Intelligence) with no public Visa equivalent. DevX

[HIGH] Wero: Trump fears accelerate European sovereignty — 52.5M users. The adoption argument shifted from cost/UX to geopolitical sovereignty. Reuters

[HIGH] Fed vs Wall Street: market pricing 3 cuts, Fed says 1 — biggest disconnect in years. If the Fed is right, BNPL, auto loans and mortgage rates get more expensive than expected. MarketMinute

[HIGH] SEC publishes Post-Quantum Financial Infrastructure Framework. Google shortened PQC timeline to 2029. 16 global banks already have quantum programs. Migration is no longer optional. SEC

[HIGH] LankaPay + WeChat Pay: cross-border QR in Sri Lanka, 400K merchants, MDR capped at 1.8%. China weaves QR network that completely bypasses Visa/MC in Asia. Fintech Singapore | Daily FT

[HIGH] Brazil: 3 new PIX measures in effect — MED 2.0, self-service fraud, new limits. Brazilian BC executed 3 regulatory actions in one week. Estado de Minas

[HIGH] 80% of acquirers say they're ready for agentic commerce, but merchants aren't — gap creates opportunity for intermediaries. PYMNTS

[HIGH] Palo Alto Unit 42: Iran cyber threat against financial sector escalating. FIs with US/Israel ties are priority targets. Unit 42

[MEDIUM] PayPay +24.6% after NASDAQ Composite inclusion — Japan's most valuable fintech. Monday closes LINE Pay absorption. SoftBank retains 92% vote. Simply Wall St

[MEDIUM] Indonesia PP Tunas forces payment apps to block under-16s. Impacts wallet onboarding in country with high youth mobile penetration. MataMata

[MEDIUM] Mexico: 86M digital users projected, 795 active fintechs, but 85% of <500 peso payments still cash. Fintech Law 2.0 on horizon. EbankingNews

[MEDIUM] Africa mobile money exceeds $2T — MTN MoMo processes $500B alone. PayPal announces cross-border wallet for Africa in 2026. Technext

[MEDIUM] Zepz (WorldRemit/Sendwave) — CEO resigns. Signal of remittance consolidation: pure-play loses to super-apps. Fintech Futures

[MEDIUM] Credit Agricole JV with Worldline + Barclays explores options for Barclaycard. European acquiring map redrawn while Adyen leads in revenue. Business of Payments

[MEDIUM] Nacha deadline forces proactive ACH fraud detection. Sub-100ms latency is the new standard. Sardine.ai

[MEDIUM] ECB DLT collateral — tokenized assets accepted as collateral from tomorrow March 30. Milestone for European institutional tokenization. ECB

[MEDIUM] MercadoLibre increases Argentina investment 30% to $3.4B — Mercado Pago 78M MAUs with super-app ambition. Simply Wall St

[MEDIUM] Bre-B Colombia +29% growth, QR for individuals in H1 2026. Colombia Fintech

[MEDIUM] Recorded Future: payment fraud increasingly automated — Mastercard defines future as "AI vs AI". Mastercard

[MEDIUM] SAMA updates Saudi payment oversight framework — applies to all Kingdom payment system operators. Lexis.ae

[MEDIUM] Fiserv FIUSD — first banking stablecoin with scale distribution (10K FIs, 6M merchants). Forbes

[MEDIUM] MENA fintech: tokenized wallets and GCC-Africa corridors dominate. UAE $212.4B in digital payments. GlobeNewswire

[MEDIUM] BCG: "Beyond Payments" — Africa needs to move from payments to credit and interoperability. Nigeria captures 35% of African tech investment. BCG


OPPORTUNITY: Agentic commerce intermediaries for merchants — 80% of acquirers ready, merchants lagging. Whoever simplifies integration between AI agents and merchants captures a $385B market by 2030. Timeline: 12-18 months for first clear winners.

OPPORTUNITY: Compliance-first stablecoins (USDC stack) — The USDC>USDT flip in institutional volume + Fiserv FIUSD signals the institutional market chose the regulated rail. Long position on stablecoin settlement infrastructure. Timeline: 6-12 months for acceleration post-GENIUS Act.

RISK: European processors without DORA compliance — Q2 enforcement actions against FIs who didn't deliver ROI. Risk of fines up to 2% of turnover or 2M EUR. Those who didn't pass quality checks (93.5%) are exposed. Timeline: immediate.


Gains power:

  • Mastercard — LTM foundation model + BVNK acquisition ($1.8B) + agentic live in LatAm. Builds 3-layer AI stack with no public Visa equivalent. MC plays long-term: data + AI + stablecoins.
  • OpenAI — ACP with Walmart/Target/Sephora/Best Buy. Positions as discovery and checkout layer alternative to Google Shopping and Amazon. If ChatGPT becomes the entry point for consumption, card schemes are a rail, not the destination.
  • WeChat Pay/China QR network — Sri Lanka, Thailand, Malaysia, Singapore, Indonesia. Parallel network to Visa/MC growing silently with lower MDR.
  • PayPay — +24.6% on stock market, absorbs LINE Pay Monday, QR near-monopoly in Japan with 67M users + US capital via NASDAQ.

Loses power:

  • Visa — No public response to MC LTM. Wero grows with anti-Visa narrative. WeChat Pay undercuts in Asia. Agentic Ready Programme launched but MC ahead in real execution.
  • Circle — -20% due to CLARITY Act. USDC institutional volume rises but equity falls. Tension between winning product and hostile regulation.
  • Worldline — Needs JV with Credit Agricole to survive in France while Adyen surpasses it in European revenue. Utrecht court forced it to maintain coffeeshops. Defensive position.
  • Pure-play remittance (Zepz, etc.) — CEO resigns, restructuring. Super-apps (Revolut, Wise, PayPay) absorb remittances as feature.

Fragmentation advances steadily:

  • CIPS (China): First renewal in 8 years — dual settlement, multi-currency. Processed $26.4T, direct participants +40% to 193. Standard Bank (Africa) joins. Key data: mBridge registered 95.3% of volume in digital yuan (387.2B CNY). CIPS is no longer alternative — it's operational parallel infrastructure.

  • WeChat Pay / QR network (China): Sri Lanka (400K merchants) joins the network. MDR capped at 1.8% by central bank — direct undercut to Visa/MC. With Thailand, Malaysia, Singapore and Indonesia already connected, China has a cross-border QR network covering >2B people without touching Western infrastructure.

  • UPI (India): 240B transactions projected FY26, >800M daily. Expansion to Sri Lanka via LankaQR. RBI in talks with 4-5 central banks about cross-border CBDC. On April 1, mandatory 2FA changes rules for the entire ecosystem.

  • PIX (Brazil): MED 2.0 operational — real-time cascading fraud recovery. BCB executed 3 regulatory actions in one week. Liquidated Entrepay/Acqio/Octa (first 2026 shutdown). PIX doesn't just scale — it aggressively regulates its ecosystem.

  • Digital Dirham (UAE): Launched with mBridge cross-border. UAE positions as Gulf CBDC hub connecting with Chinese system.

Verdict: Fragmentation is no longer trend — it's operational reality. Each system has its own scale, own regulation, and zero dependence on US infrastructure. The only real bridges between these systems are regulated stablecoins (USDC) and bilateral QR agreements.

Advanced IntelligencePRO

🔗Connect the Dots
📌Active Follow-ups
🔇Notable Silence
🔍Weak Signals
🔮Convergence — 6-12 Month Thesis

Today we detected 3 weak signals from Japanese and Korean sources that haven't appeared in English-language media yet...

CIPS processed record volume this week while UPI expands its correspondent network...

The convergence between asset tokenization and programmable payments accelerates with 2 new regulatory pilots...

PaymentLeaks Pro — 9.99€/mo

  • ✓Weak Signals (news in 18 languages nobody else covers)
  • ✓Connect the Dots (cross-story connections nobody else makes)
  • ✓Active Follow-ups (daily tracking of how key stories evolve)
  • ✓Convergence + Notable Silence (predictions + what is NOT published)
  • ✓Full briefing archive
  • ✓Cancel anytime
Subscribe
See a full sample Pro briefing→
See a full sample briefing→

Never miss a briefing

Get notified every morning when the briefing is ready.

PaymentLeaks is created by Ignacio De Navascués, a payments professional with over 12 years of experience in the payments and settlement industry. Daily payments intelligence analysis in 18 languages.

© 2026 PaymentLeaks. All rights reserved.

The opinions expressed are those of the author and do not represent any organization. This content is informational and does not constitute financial advice.

About|Privacy Policy|Terms of Service