Security guides and articles

12 articles from eSMS Africa about security. Newest first.

• CBN's 2026 Mobile Banking Security Rules and SMS OTP: A Fintech Guide The CBN's 2026 circular requires MFA for limit changes and one active device per banking app. Here is where SMS OTP fits as a possession factor, with a device-binding flow you can build today. Developers· 7 min read
• Receiving Delivery Reports: Webhooks and HMAC Verification Get delivery status pushed to your app in real time - and verify the signature so you can trust every webhook you receive. Developers· 1 min read
• Security & Data Protection Encryption in transit, strict access control, data-subject rights and IP allowlisting. Help· 1 min read
• Turn on two-factor authentication Add a one-time code from your phone to every sign-in for stronger account security. Help· 1 min read
• OTP best practices Make one-time passwords fast, secure and high-converting. Help· 1 min read
• API key scopes and Live vs Test environments Give each API key only the access it needs (full, sending or read-only) and keep live and test traffic separate with per-key environments. Help· 1 min read
• Whitelisting Your IP Address for SMPP Why SMPP connections require IP whitelisting and how to get your server IPs approved. Help· 1 min read
• Are payments secure? Yes. Mobile money is paid on a secure hosted checkout, Mukuru in the Mukuru app or at an agent, and crypto on-chain. We never see your PIN. Help· 1 min read
• How do I keep my API keys safe? Never expose keys in browser or mobile code. Store them as server-side secrets, rotate periodically, and revoke immediately if a key leaks. Help· 1 min read
• Is my data secure? Yes. Web, dashboard and API traffic uses HTTPS (TLS 1.2 or 1.3), SMPP binds accept connections only from the IP addresses on your allowlist, and API keys are scoped and revocable. Staff access follows least privilege and is logged, and we never expose your keys. Help· 1 min read
• Two-Factor Authentication (2FA) with SMS in Africa SMS 2FA is the most widely-adopted second factor in Africa. Here's how it works and how to implement it reliably for your users. Guide· 1 min read
• How African Fintechs Use SMS OTP to Prevent Fraud From KYC onboarding to transaction approval, SMS OTP is how African fintechs stop fraud before it starts. Here's how it works. Insight· 1 min read