{"id":374549,"date":"2026-08-12T11:26:13","date_gmt":"2026-08-12T11:26:13","guid":{"rendered":"https:\/\/www.europesays.com\/africa\/374549\/"},"modified":"2026-08-12T11:26:13","modified_gmt":"2026-08-12T11:26:13","slug":"embed-cybersecurity-in-product-design-japhet-aritho","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/africa\/374549\/","title":{"rendered":"Embed cybersecurity in product design, Japhet Aritho"},"content":{"rendered":"<p>The Uganda Communications Commission (UCC), in partnership with the Ministry of ICT and National Guidance, is holding its Inaugural National Cybersecurity Conference under the theme \u201cSecuring Uganda\u2019s Digital Future: Collaboration, Resilience and Trust\u201d at the Kampala Sheraton Hotel.<\/p>\n<p>The two-day conference has gathered cybersecurity experts, telecom operators, financial institutions, IT Leaders, regulators, and innovators, to mention but a few, to confront the growing threat of digital fraud in Uganda\u2019s fast-expanding mobile money and banking ecosystem.<\/p>\n<p>Speaking during a high-level panel discussion on \u201cPreparing for a More Secure Digital Future by Protecting Digital Financial Services: Addressing Social Engineering, SIM Swap, and Account Takeover,\u201d Airtel Money Commerce Uganda Limited (AMCUL) Managing Director, Japhet Aritho, said the industry must move beyond consumer awareness campaigns and build fraud prevention directly into the design of digital financial products.<\/p>\n<p>Social engineering, SIM swap fraud, and account takeover are rarely isolated incidents, but rather stages of the same attack chain. \u201cFor you to take over a mobile account, you have to do a SIM swap. For you to do a SIM swap, you have to start with social engineering, because there is some information that you have to pick,\u201d Aritho said, describing the three threats as deeply intertwined.<\/p>\n<p>He noted that telecom operators had been grappling with these challenges long before they became a mainstream public concern, pointing to an industry-led <a href=\"http:\/\/pctechmag.com\/section\/innovation-2\" target=\"_blank\" rel=\"noopener nofollow\">innovation<\/a> that has since become standard practice across Uganda\u2019s banking sector.<\/p>\n<p>\u201cWe created APIs, very simple, done internally, not even by any sophisticated developer, which we exposed to all banks,\u201d he said.<\/p>\n<p>Airtel Money Uganda subsequently pushed the Bank of Uganda to mandate that every commercial bank implement an IMSI check API, allowing banks to verify SIM swap activity in real time before authorizing transactions.<\/p>\n<p>Aritho also cited <a href=\"https:\/\/pctechmag.com\/2025\/04\/airtel-uganda-unveils-an-ai-powered-alert-service-to-combat-spam\/\" target=\"_blank\" rel=\"noopener nofollow\">Airtel\u2019s AI Spam Alert Service,<\/a> which the telco launched in 2025, uses data analytics and artificial intelligence to detect patterns in fraudulent SMS messages and alert subscribers before they fall victim to scams.<\/p>\n<p>He described how fraudsters exploit the very warnings telecom companies issue, often opening scam calls by repeating official security messaging to build trust before manipulating victims into isolating themselves and disclosing sensitive information. \u201cThey will tell you exactly what we are telling them\u2026 and then they will trick you into sharing your PIN,\u201d he said.<\/p>\n<p>To illustrate practical \u2018security by design,\u2019 Aritho recommended device-binding <a href=\"http:\/\/pctechmag.com\/section\/technology\" target=\"_blank\" rel=\"noopener nofollow\">technology<\/a>. Drawing on his own experience switching phones, he explained that being locked out of financial apps until re-verified with each provider, while inconvenient, is far preferable to fraud losses. Airtel Money now detects when a registered device or SIM card changes and automatically blocks transactions until the account holder is re-verified, even if a scammer has already obtained a customer\u2019s credentials.<\/p>\n<p>He was also careful to push back against victim-blaming, noting that sophisticated fraudsters are often fluent, confident communicators who put victims at ease. \u201cIt\u2019s very difficult to spot a scammer. They speak good English, they make you comfortable,\u201d he said, adding that the burden of protection should sit with service providers at the design stage, not solely with consumers.<\/p>\n<p>Responding to an audience question on how safe personal data is when shared with service providers, Macgyver Mugamba, Manager for Data Protection and Legal Advisory at UCC, cited Uganda\u2019s Data Protection Act. He noted that individuals have a right to ask private entities how their personal data is handled, including whether proper policies and notices are in place.<\/p>\n<p>Consumers with unresolved complaints can escalate to the Personal Data Protection Office under the Ministry of ICT and National Guidance. However, the public is urged to remain vigilant about how and with whom they share personal information.<\/p>\n<p>Closing the panel, Aritho urged stakeholders to embed cybersecurity into product design from the outset and to recognize that Uganda\u2019s digital ecosystem is only as secure as its weakest participant. \u201cWe are as strong an ecosystem as the weakest link within that ecosystem,\u201d he said, while calling for continued collaboration between telcos, banks, and regulators, both in technology and in addressing human vulnerability, as the sector works to build a safer digital future for Ugandan consumers.<\/p>\n","protected":false},"excerpt":{"rendered":"The Uganda Communications Commission (UCC), in partnership with the Ministry of ICT and National Guidance, is holding its&hellip;\n","protected":false},"author":2,"featured_media":374550,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[58],"tags":[18737,82641,178875,178876,153],"class_list":["post-374549","post","type-post","status-publish","format-standard","has-post-thumbnail","category-uganda","tag-airtel-uganda","tag-ministry-of-ict-uganda","tag-national-cybersecurity-conference-2026","tag-ucc-uganda","tag-uganda"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@africa\/117082297773643785","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/posts\/374549","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/comments?post=374549"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/posts\/374549\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/media\/374550"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/media?parent=374549"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/categories?post=374549"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/africa\/wp-json\/wp\/v2\/tags?post=374549"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}