Category: Banking

  • Sam Altman’s World Launches Iris-Verified ‘World Money’ App Across 150+ Countries

    Sam Altman’s World Launches Iris-Verified ‘World Money’ App Across 150+ Countries

    World, the identity and cryptocurrency project from Tools for Humanity co-founded by Sam Altman and Alex Blania, launched “World Money,” a self-custodial financial app now live in more than 150 countries supporting balances in eight currencies. The app integrates Stripe for converting Apple Pay funds to stablecoins, Circle’s USDC, Bridge for virtual bank and payroll accounts, Morpho for yield, and Kalshi for prediction-market trading.

    World ID, the platform’s iris-scan-based biometric identity credential, is positioned as an anti-fraud and anti-fake-account layer, with verified users unlocking additional rewards within the app. The launch extends World’s biometric identity infrastructure — built primarily to prove a user is a unique human rather than a bot — into mainstream consumer payments and cross-border finance.

    Why it matters

    Tying a biometric identity credential directly to a payments app is a significant step in normalizing iris-scan verification for everyday financial transactions, a use case with different privacy and consent stakes than the anti-bot verification World was originally built for.

    Sources

  • Cohere and Aleph Alpha Finalize $20B Merger to Build ‘Sovereign AI’ Alternative

    Cohere and Aleph Alpha Finalize $20B Merger to Build ‘Sovereign AI’ Alternative

    Canada’s Cohere and Germany’s Aleph Alpha signed a definitive merger agreement, combining into a single business that will operate under the Cohere name with dual headquarters in Toronto and Berlin. Aleph Alpha’s Heidelberg office will focus on research under the combined company, and Aleph Alpha co-chief Ilhan Scheer becomes chief operating officer of the merged entity.

    Lidl parent Schwarz Group is investing 500 million euros in the combined company as part of the deal, which was first disclosed in April 2026 at an estimated $20 billion valuation. The transaction remains subject to regulatory approval. Cohere chief executive Aidan Gomez said the merger is meant to meet demand from government and enterprise customers for AI systems that are “powerful enough to compete, but secure and governable enough to trust,” particularly customers wanting data residency and independence from US cloud providers.

    Why it matters

    Governments and regulated industries in Europe have been pushing for AI infrastructure they can host and control domestically rather than relying on US hyperscalers — a combined Cohere-Aleph Alpha is explicitly positioning itself to serve that “sovereign AI” demand.

    Sources

  • Group-IB Details ‘JWR’ Phishing Kit Powering Smishing Triad Bank-Fraud Campaigns

    Group-IB Details ‘JWR’ Phishing Kit Powering Smishing Triad Bank-Fraud Campaigns

    Group-IB has published a technical analysis of a phishing kit it calls JWR, used by an operator cluster it tracks as “Outsider” within the broader Smishing Triad ecosystem. In the campaign Group-IB analyzed, victims received fraudulent SMS messages impersonating official entities and were directed through a short link to a disposable domain, where a multi-stage form walked them through submitting identity details, payment card information, and one-time passcodes, sometimes for a second bank or a digital wallet.

    According to Group-IB, the kit’s landing page is built as a Vue 2 single-page application wired to a dedicated Web Worker that maintains a binary WebSocket channel, encrypted with an AES-256-CTR envelope, alongside a two-second HTTP long-poll fallback, letting a human operator monitor and steer victim sessions in near real time. Group-IB said code strings tie the kit to infrastructure known in operator circles as the trsb.top family.

    Group-IB, along with prior public reporting from Silent Push, Palo Alto Networks’ Unit 42, Resecurity and Fortra, has linked the wider Smishing Triad ecosystem to more than 194,000 malicious domains registered since 2024 spanning over 121 countries. Group-IB researcher Mohammad Gamal Younis authored the analysis, which included indicators of compromise for defenders.

    Why it matters

    Real-time, operator-steered phishing sessions raise the bar for defenders beyond static blocklists, since the kit adapts its lure mid-session to whatever the victim’s device or bank actually shows; financial institutions and their customers benefit most from the published indicators of compromise, not from generic awareness alone.

    Sources

  • Google Pay and Mastercard Plan Device-Biometric Card Payments in India

    Google Pay and Mastercard Plan Device-Biometric Card Payments in India

    Mastercard and Google Pay plan to introduce optional device-biometric approval for eligible card payments in India. Participating customers would use the fingerprint, face recognition or passcode already configured on their phone to approve supported transactions.

    The companies previewed the capability at Global Fintech Fest and expect rollout to begin by the end of 2026. Participating issuers and eligible card products have not yet been publicly specified, so availability should not be described as nationwide or universal.

    The design uses a consumer-device cardholder verification method and is separate from payment tokenization. Tokenization protects card details used in a transaction; local biometric or passcode verification confirms that the person operating the device is authorized to approve it.

    Why it matters

    India’s updated payment-authentication directions allow alternatives to SMS one-time passwords while retaining multi-factor requirements. Device-based verification can improve usability, but secure enrollment, fallback and issuer risk controls remain essential.

    For wider context, see SectechMedia’s related technical coverage.

    Sources

  • Banking and Financial Institution Security Technology

    Banking and Financial Institution Security Technology

    Financial institutions protect a mix of physical assets, sensitive data and public-facing customer environments, which means bank security spans branch design, vault protection, ATM networks and increasingly the cybersecurity of connected physical-security devices themselves.

    Branch video surveillance

    Branch camera systems cover teller lines, entrances, vaults and parking areas, supporting both robbery response and everyday operational and liability needs. Many institutions pair cameras with silent alarm capability at teller stations so staff can signal a robbery without alerting the person committing it.

    Vault and safe-deposit protection

    Vaults and safe-deposit areas typically combine reinforced construction with time-delay locks, dual-custody procedures and dedicated alarm and access-control zones. These measures are designed to resist both external attack and unauthorized access by an individual employee acting alone, reflecting the dual-custody principle common in financial-security design.

    ATM and self-service security

    ATMs and self-service kiosks operate outside normal branch hours and in some cases outside the branch itself, which creates distinct risks including physical attacks on the machine, card-skimming devices and network-based fraud. Financial institutions typically combine physical hardening, camera coverage, skimmer-detection technology and transaction monitoring to address these different attack types.

    Access control for staff and cash-handling areas

    Access control governs movement between public branch space and restricted areas such as cash rooms, IT closets and back-office operations. Role-based permissions and detailed audit trails support both security and the compliance requirements that apply to financial institutions in most jurisdictions.

    Cyber-physical convergence

    Modern branch security systems, including cameras, access controllers and alarm panels, are networked devices connected to the same infrastructure as core banking systems. That makes cybersecurity hygiene, including network segmentation, credential management and patching, a core part of physical-security design rather than a separate concern, particularly given how attractive financial institutions are as targets.

    Risk varies by institution type and location

    A large urban branch, a rural branch and a data center or operations facility carry different risk profiles, and security programs at most institutions are tailored accordingly rather than using a single standard branch design everywhere.

    Conclusion

    Banking and financial-institution security depends on a combination of branch video and alarm systems, vault and ATM-specific protections, disciplined access control, and cybersecurity practices applied to the physical-security network itself, reflecting the dual role of financial institutions as both cash-handling and data-handling environments.