Today's briefing, and why it matters to you.
Top 3 · Systemic Impact
TODAYUAE becomes the first country in the world to eliminate ALL SMS OTPs — deadline today
The Central Bank of the UAE (CBUAE) enforces today March 31 the total elimination of SMS and email OTP authentication across all financial institutions. It is the first country in the world to completely ban traditional OTPs. Mandatory alternatives: Emirates facial biometrics, FIDO2 passkeys, in-app push approval, or behavioral biometrics. Banks are financially liable for all 3D Secure fraud via SMS OTP since July 2025. Penalty: AED 250,000 per violation. Tomorrow India enforces mandatory 2FA. The week of the end of the simple OTP has arrived. [BioCatch](https://www.biocatch.com/blog/uae-phasing-out-otp-authentication)
Alipay launches the first "Payment Integration Skill" for AI agents — China enters the agentic war
Alipay unveiled the first standardized modular component that packages core payment capabilities so AI agents and developers can integrate payment functionality via a standardized interface. With this, the agentic protocol war is no longer just Western: Stripe MPP, OpenAI ACP, Mastercard Agent Pay, Visa Agentic Ready, Google UCP — and now Alipay. China will not let the West define how machines pay. [Mobile Payment Network 移动支付网](https://www.mpaypass.com.cn/news/202603/31145604.html)
RBA Australia eliminates card surcharges from October 2026 — $1.2B annual savings for consumers
The Reserve Bank of Australia published its final conclusions: debit and credit card surcharges will be eliminated from October 1, 2026. Interchange caps are being lowered. eftpos, Visa, Mastercard, and major acquirers will be required to publish their fee schedules. 76% of consumers wanted this elimination. Direct impact on acquirer and card network margins in a market of $600B+ in transactions. [Reserve Bank of Australia](https://www.rba.gov.au/payments-and-infrastructure/review-of-retail-payments-regulation/2026-03/)
---
News by Impact
28 STORIESRBI enforces mandatory 2FA for ALL digital payments in India starting tomorrow April 1 — OTP alone is not enough, issuers must fully compensate if fraud occurs due to non-compliance. 800M+ daily transactions affected.
FTC warns Visa, Mastercard, PayPal, and Stripe about political "debanking" — account restrictions based on political affiliation could be unfair practices under the FTC Act.
CLARITY Act in recess without resolution — bans passive yield on stablecoins. Polymarket
72% probability of approval. Circle -20%. Senate markup late April.
LINE Pay officially dissolves — merger by absorption into LY Corporation.
PayPay near-monopoly QR Japan ($12.7B, Nasdaq). 72M+ users.
PIX suffers second outage in a week — Banco do Brasil affected, 172+ complaints on Downdetector.
BCB Resolution 554 enforces automatic Conta PI blocking.
REPAY acquires KUBRA for $372M — combined entity will process $130B+ in annual volume.
Expansion into utilities/government payments.
Nium launches first dual Visa/Mastercard platform for stablecoin cards — businesses issue cards that convert stablecoins to fiat at POS.
40+ licenses across 190+ countries.
Wise launches UK current account with 3.26% interest — £250B in UK accounts at zero rate, 3M+ UK users.
Pivot from remittances to full banking.
Indian parliamentary panel recommends tiered fees for UPI — ₹9,000 crore annual deficit.
End of free UPI?
PSD3 explained: mandatory name/IBAN verification, PSP liability for fraud, impersonation reimbursement, mandatory human support.
Compliance H2 2027 / H1 2028.
Eurosystem accepts DLT assets as collateral starting today — tokenized securities are ECB collateral.
Pontes Q3 2026.
Revolut record profits $2.3B, revenue +46% to $6B.
UK banking license obtained. Applying for US banking charter.
"Invisible" stablecoins in SE Asia — StraitsX
40x in stablecoin card volume, 83x in issuance. Project BLOOM Thailand-Singapore with QR.
SCBX creates BankX Bank in Thailand — partners KakaoBank (Korea) + WeBank (China).
Capital THB 5,000M. Virtual banking.
MobiFone Digital Payments launches in Vietnam — 22+ banks + Visa + NAPAS.
"4th generation payments infrastructure."
Bank of Korea extends BOK-Wire+ until 20:00 (+2.5h) — acknowledges that 9-to-5 settlement is obsolete.
M&A March: Mastercard-BVNK ($1.8B), Ramp-Billhop, Saxo Bank (~€1.1B), ICE-OKX ($25B valuation), Ripple-BC Payments Australia.
GSMA: global mobile money surpasses $2T, but 1.7B of 2.3B accounts are dormant.
Fraud extracts $4B annually from Africa.
Standard Bank processed $8.69T in payments in 2025 — 31% South Africa market share, connects clients to Asia via CIPS ($503M since 2018).
AUSTRAC: VASP regime takes effect today in Australia.
Crypto-to-crypto exchanges and custodial wallets covered for the first time. Travel Rule deferred to July.
AI makes financial decisions without human oversight — in retail it governs refunds, in legal it models litigation.
PYMNTS calls it an infrastructural shift.
Square activates Bitcoin Lightning for 4M+ merchants by default — opt-out, not opt-in.
Free until end of 2026, then 1% flat. [Social media + Block ToS]
Nigeria: CBN bank recapitalization deadline expires — banks attracted ₦4.61T in fresh capital.
~42 banks comply. The rest face license downgrade. [BusinessDay NG]
Fed rejects CBDC while China expands e-CNY with interest — geopolitical contrast in digital currency.
e-CNY = "digital deposit money" since January 2026.
BofA issues buy recommendation on PicPay ($434M IPO January) and Payoneer — "multi-trillion dollar" opportunity in B2B cross-border payments.
IDnow + Trustfull: post-onboarding fraud prevention.
Continuous monitoring throughout the entire customer lifecycle.
mylo enables installment payments via InstaPay in Egypt — first credit company with full digital registration and FRA fintech license.
Bank of Namibia launches NPS Vision 2026-2030 — ISO 20022, Open Banking, NAMQR standards.
Exposure Check
- PIX Brazil: Second outage in a week. If you operate with Brazilian merchants or depend on PIX for settlement, monitor system stability. BCB enforces automatic blocks with Resolution 554.
- Circle/USDC: CLARITY Act with 72% probability of approval would ban yield. If your treasury uses USDC to generate yield, plan contingencies.
- Nets/Mastercard: RTP unit sale in progress. European PSPs that depend on Nets as a rail should evaluate continuity under a new PE owner.
- UAE OTP ban: If you process payments in the UAE and rely on SMS OTP for 3D Secure, TODAY is the deadline. Penalty AED 250K.
- India 2FA: TOMORROW April 1. If you have merchants in India without full 2FA, they will lose conversion immediately.
Connect the Dots
[UAE bans OTP today, Mar 31] + [India enforces 2FA tomorrow, Apr 1] + [PSD3 strengthens name/IBAN verification] → The week of the end of the simple OTP. Three jurisdictions representing ~2.5B people impose fundamental changes in payment authentication within 48 hours. Biometrics and passkey providers are the structural winners. Those still relying on SMS OTP have months, not years, to migrate.
[Alipay Payment Integration Skill, Mar 31] + [Stripe MPP, Mar 18] + [Visa Agentic Ready EU, Mar 28] + [Mastercard Agent Pay LatAm, Mar 30] + [Google UCP, Mar 30] → 5 agentic protocols in 13 days. This is not a race — it is a Cambrian explosion of standards. PSPs that don't pick a side within 90 days will be left out of the transaction flow where the user never sees a checkout.
[PIX goes down twice in a week] + [Indian parliamentary panel recommends charging for UPI] + [BCB Resolution 554 automatic blocks] → Sovereign instant payments enter their maturity crisis. Free pricing drove mass adoption. Now volume threatens infrastructure. PIX and UPI need to choose: charge (and lose inclusion) or subsidize (and risk stability).
Active Follow-ups
- Mastercard/Nets sale: Still in progress. PE groups evaluating. ~$370M revenue. European PSPs in "wait and see" mode for who buys.
- DORA ROI: Deadline was yesterday March 31. Expect a wave of enforcement in April. Only 6.5% passed quality checks.
- PayPay/LINE Pay: Merger completed today. PayPay = super-app QR monopoly Japan.
- Wero/EPI: 52.5M users last week. E-commerce live in spring. Worldpay as Principal Member.
- CLARITY Act: Recess until April 9. Senate markup late April. Polymarket 72% approval.
- CIPS: Processed $26.4T cumulative, 193 participants. Standard Bank connects Asian clients via CIPS ($503M since 2018).
Notable Silence
- Apple Pay: In a week where the UAE bans OTP, India enforces biometric 2FA, and Australia eliminates surcharges, Apple has said nothing about how these changes affect Apple Pay in those markets. Are they ready?
- Google Pay: Same silence. Google launched UCP (agentic protocol) but says nothing about post-OTP authentication or the impact of surcharge elimination in Australia.
- Adyen/Worldline: Europe's major processors are not reacting to the Nets sale or PSD3's impact. Buying time or buying Nets?
- FedNow: India enforces 2FA, Australia eliminates surcharges, PIX goes down — and FedNow still has no visible momentum or adoption statistics.
Weak Signals
Alipay Payment Integration Skill (China, 移动支付网): China is not waiting for the West to define agentic standards. Alipay packages payment capabilities as a modular "skill" for AI agents — first equivalent move in the Chinese ecosystem. Within 3-6 months, WeChat Pay will follow with its own version. The China bloc will have its own agentic standard incompatible with Western ones.
PIX as a tax tool (Brazil, Receita Federal): The Receita Federal pays tax refunds exclusively via PIX and deposits — 87K+ taxpayers. PIX stops being just a payment rail to become Brazilian state fiscal infrastructure. Implication: any PIX outage is no longer just a payments problem, it's a public administration problem.
China erases defaults <10,000 yuan from credit history (PBoC): New directive allows automatic deletion of minor debts settled before month-end. Signal: China prioritizes domestic consumption over strict credit discipline. In a slowdown context, the central bank uses credit policy as a silent stimulus.
BankX Bank Thailand with KakaoBank + WeBank: SCBX (SCB parent) creates a virtual banking subsidiary with Korean and Chinese partners. It is the first Thai virtual bank with Asian, not Western, technological DNA. If it works, it replicates across Indonesia, Vietnam, and the Philippines.
Convergence — 6-12 Month Thesis
Authentication + Regulation + Biometrics → The global end of OTP as a standard. UAE bans OTP (Mar 31), India enforces biometric 2FA (Apr 1), PSD3 mandatory name/IBAN. The convergence: passkeys + behavioral biometrics + device tokens replace SMS within 12-18 months globally. Legacy authentication providers (SMS aggregators) lose a $10B+ market.
Agentic Commerce + Stablecoins + Infrastructure → The rails of autonomous commerce crystallize. 5 protocols in 13 days + Nium dual stablecoin cards + Square Lightning default. The convergence: by 2027, an AI agent will be able to choose the cheapest rail (Lightning, stablecoin, card, A2A) for each transaction automatically. PSPs offering only one rail lose.
Instant Payments + Operational Stress + Pricing → The maturity crisis of sovereign A2A systems. PIX goes down. UPI is not profitable. SEPA Instant enforces compliance in 10 seconds. The convergence: free instant payments were the adoption catalyst, but the model needs to evolve toward sustainable pricing or permanently subsidized infrastructure.
📊 CONVERGENCE SCORECARD:
| Thesis | First mention | Evidence today | Status |
|---|---|---|---|
| Tokenization → market infrastructure | Mar 26 | ECB DLT collateral TODAY effective. March M&A includes ICE-OKX $25B | ✅ ADVANCING |
| Agentic payments → autonomous commerce | Mar 24 | Alipay Payment Skill + 5 protocols in 13 days | ✅ ACCELERATING |
| CBDCs + stablecoins coexistence | Mar 27 | Fed rejects CBDC, China expands e-CNY with interest. Total divergence | ⚠️ BIFURCATING |
| Instant payments → scale stress | Mar 28 | PIX 2 outages/week + UPI deficit ₹9K crore + India recommends charging | ✅ CONFIRMED |
| Post-OTP authentication | Mar 31 (NEW) | UAE bans OTP + India 2FA + PSD3 verification | 🆕 NEW THESIS |
🔇 NOTABLE SILENCE: Stripe has not responded to Alipay's Payment Integration Skill launch. They have MPP but haven't commented on China's entry into agentic payments. Preparing something or ignoring the elephant in the room?
Parallel sovereign rails
4 RAILSCIPS: Standard Bank (South Africa) processed $503M via CIPS since 2018 connecting clients to the Asian corridor. The data confirms that the migration from SWIFT to CIPS is no longer theoretical in Africa. 193 direct participants (+40%).
UPI: In existential crisis. 800M+ daily transactions but a ₹9,000 crore annual deficit. Parliamentary panel recommends charging. If they implement fees, 90% of the 60M merchants (billing <₹20 lakh) would be exempt, but the political message is devastating.
PIX: Two outages in a week. Resolution 554 introduces automatic blocks. Pix Automatico and Pix Contactless in development. Brazil balances functional expansion with operational fragility.
QRIS: Singapore-Cambodia Phase 2 operational via cross-border QR. The ASEAN network keeps growing without depending on SWIFT or card schemes.