← All free guidesFree guide · CTOs and engineers
The Payout Security Checklist
Twelve flaws in M-Pesa, NIP and wallet code that fraudsters use. How each is exploited, how to fix it, and the test that proves you did.
- Forged payment callbacks, and how to verify Daraja, Paystack and NIP
- Double-spend races and missing idempotency keys
- Detail changes and payouts without step-up
- Weak, reusable OTPs and test backdoors
- A test for every fix, ready for your CI
Inside the guide
Who it’s for
CTOs, backend leads and security engineers at fintechs.
More free guides
Risk and fraud teams
The SIM-Swap Fraud Playbook
How a SIM swap empties a wallet in under an hour, and how to stop it.
7-page PDFGet the guide
Founders
The Fraud Readiness Scorecard
Twenty questions and a score out of 100. Find your gaps in fifteen minutes.
7-page PDFGet the guide
Risk and fraud teams
The Fraud Rules Starter Pack
The rules every African fintech should run, each with a starting threshold.
7-page PDFGet the guide