Fintech & Digital Assets
PCI DSS v4: what changed for merchants and acquirers
The requirements that were "best practice" until March 2025 are now mandatory. Most of them land on payment pages, authentication and the way risk is documented.
Fintech & Digital Assets
We design, build and operate the technology behind modern money: payment platforms, exchanges, digital-asset services and neobanks, together with the AI, data-centre and security layers they depend on.
Overview
Money now moves through many rails at once: cards, instant payments, wallets, exchanges, stablecoins and tokenized assets. Each comes with its own technology, its own risks and its own rules. Our fintech practice brings these rails together so that banks, payment providers, exchanges, merchants and enterprises can offer them through one dependable platform.
Our team has hands-on experience across the full stack of modern finance: payment gateways and acquiring, currency exchange and remittance, brokerage and crypto trading engines, custody and wallets, token issuance, neobank cores, blockchain networks, AI for fraud and credit, and the data centres and hardware security that keep all of it running.
We work as the technology partner of regulated institutions. Licensed banks, payment service providers and exchanges remain the foundation of every regulated service, and our cybersecurity practice reviews every platform before it goes live.
Solutions
Nine solution lines, from card acceptance at a shop counter to the data centre that keeps a ledger running. Each page lists what we build, the components involved and what a typical project looks like.
-
Payment Solutions
Card, QR, wallet and account-to-account acceptance for merchants, banks and billers.
Learn more -
Exchange & Remittance
Branch, online and mobile systems for exchange houses, remittance companies and corporate treasury.
Learn more -
Trading Platforms
Brokerage front ends, matching engines, liquidity and surveillance for brokers and exchanges.
Learn more -
Crypto & Digital Assets
Exchange, custody, wallets and stablecoin payments, built for licensed virtual-asset providers.
Learn more -
Tokens & Tokenization
Real-world assets, gold and commodities issued and managed as digital tokens.
Learn more -
Neobanking & Embedded Finance
Mobile-first banking, digital onboarding, Islamic products and lending on licensed balance sheets.
Learn more -
Blockchain & Decentralized Payment Networks
Permissioned ledgers, smart contracts, stablecoin rails and DLT settlement between institutions.
Learn more -
AI, Risk & Compliance
Fraud detection, AML monitoring, credit scoring, Arabic AI assistants and regulatory reporting.
Learn more -
Data Centre & Financial Infrastructure
In-country hosting, GPU compute, blockchain nodes, HSMs and disaster recovery for financial platforms.
Learn more
How we deliver
Discovery and regulation
We map the product, the users, the licences required and the partners who hold them.
Architecture
A modular, API-first design that adds rails, currencies and assets without a rebuild.
Build and integrate
Platform engineering and connections to banks, schemes, exchanges, custodians and blockchains.
Secure and certify
Penetration testing, PCI and ISO controls, and audit evidence before launch.
Operate and grow
Monitoring, reconciliation, support and continuous improvement under service levels.
Standards we build to
- ISO 20022
- PCI DSS v4.0
- PCI PIN and P2PE
- EMV® 3-D Secure
- ISO/IEC 27001
- SWIFT CSP
- FATF Recommendations
- FATF travel rule
- ERC-3643
- Central Bank of Oman regulations
Regulated financial services, including payments, exchange, lending and virtual-asset services, are provided only through, or in partnership with, appropriately licensed institutions and subject to the approval of the Central Bank of Oman, the Financial Services Authority and other competent authorities. Nothing on this page is an offer of financial or investment services.
From our insights
Articles from the team that works on this.
-
-
Fintech & Digital Assets
ISO 20022 and the remittance counter: what exchange houses need to change
Cross-border payment messages have moved to ISO 20022. The richer data only helps if it is captured correctly at the counter and in the app.
-
Fintech & Digital Assets
Digital asset custody: hot, warm and cold, and the controls between them
Losses at exchanges and custodians rarely come from broken cryptography. They come from weak controls around keys, approvals and withdrawals.
Discuss a Fintech & Digital Assets requirement
Send us the details and the practice lead will reply within one business day.