Location
Kumasi, Ghana & Virtual
Start Date
6-8-2026 11:30 AM
End Date
6-8-2026 12:00 PM
Description
Mobile money transacted more than USD 2 trillion globally in 2025 across 2.3 billion registered accounts, with Sub-Saharan Africa holding over half of all accounts and two-thirds of transaction value. Between 58 and 72 percent of mobile money fraud on the continent exploits trust rather than technology, yet current security architecture authenticates the sender and merely notifies the receiver, leaving the transaction execution moment structurally unguarded. This paper introduces the Receiver-Consent Transaction Protocol (RCTP), a USSD-native protocol requiring the receiver's active PIN consent on their physical SIM before any credit completes, grounded in Design Science Research with Routine Activity Theory as sensitising lens. Two theoretical contributions are advanced: the Parsimonious Security Reorientation Framework, and the Symmetric Participation Principle, a prescriptive design principle derived from RAT's guardianship construct. RCTP remains a conceptual artefact pending sandbox prototyping and user acceptance studies in Ghana; structural analysis indicates interception of five dominant social engineering vectors.
Included in
Computer and Systems Architecture Commons, Digital Communications and Networking Commons, Management Information Systems Commons, Operational Research Commons
Robbed With Permission: Toward a Receiver-Consent Architecture for Trust-Preserving Mobile Money Transactions in Africa
Kumasi, Ghana & Virtual
Mobile money transacted more than USD 2 trillion globally in 2025 across 2.3 billion registered accounts, with Sub-Saharan Africa holding over half of all accounts and two-thirds of transaction value. Between 58 and 72 percent of mobile money fraud on the continent exploits trust rather than technology, yet current security architecture authenticates the sender and merely notifies the receiver, leaving the transaction execution moment structurally unguarded. This paper introduces the Receiver-Consent Transaction Protocol (RCTP), a USSD-native protocol requiring the receiver's active PIN consent on their physical SIM before any credit completes, grounded in Design Science Research with Routine Activity Theory as sensitising lens. Two theoretical contributions are advanced: the Parsimonious Security Reorientation Framework, and the Symmetric Participation Principle, a prescriptive design principle derived from RAT's guardianship construct. RCTP remains a conceptual artefact pending sandbox prototyping and user acceptance studies in Ghana; structural analysis indicates interception of five dominant social engineering vectors.
