Kenya's crypto-to-M-Pesa rail. Pay any Paybill or Till, or send money, straight from USDT, BTC, ETH or SOL. Live rate, settled in seconds. No P2P. https://xitter.cf/t.co/wksIZJyqV9
Sasa hapa ndio inakuwa noma - the account they spent 33 hours hammering was our Play Store REVIEW login. Yaani the dummy account we hand Google just to get CPay approved ๐
And kumbe, the M-Pesa name registered to that number? Amos Kibet ๐ญ you cannot make this up.
One fix: swapped "app-store" for "Play Store" since you're handing it to Google โ App Store is Apple's term.
cpay.co.ke
Someone spent 33 hours straight this week trying to break into CPay. They didn't move a single shilling, but it's such a good lesson in what building fintech in Kenya actually looks like that I had to share it.
It started with a boring ops email - our daily summary flagged 4,845 failed logins in 24 hours, when normal for us is... a handful. Not a signup spike, not a bug, this was a straight up attack.
All 4,845 attempts hit ONE account, from one Nairobi IP, one guess every ~16 seconds, non-stop for 33 hours. Hio si mtu, hio ni script on autopilot, and that pattern? Straight out of the Mulot fraud network playbook.