Mastercard launches Africa Cyber ​​Security Center of Excellence. Kenya is not part of the first phase

Mastercard has launched a new cyber security initiative for Africa. The first two countries to get it are South Africa and Nigeria. Kenya is not on the list yet.

The initiative is called the Africa Cyber ​​Security Center of Excellence. Mastercard made the announcement on 28 June 2026 during a visit by global CEO Michael Meibach to Johannesburg and Abuja. President of South Africa Cyril Ramaphosa and President of Nigeria Bola Ahmed Tinubu both appeared with MasterCard to support the launch. The company says that this idea emerged from earlier discussions with both the governments. those things happened partly around Last year the G20 summit was held in JohannesburgFor the first time, the G20 met on African soil.

“Africa is dynamic, fast-growing and ready to accelerate its digital future,” Meebach said at the launch. “Without trust it won't happen. People don't use what they don't trust.” Ramaphosa called it “a welcome step forward” by drawing on “the country's best and brightest”. Tinubu described secure systems as “crucial for inclusion and development” as Nigeria deepens its digital transformation.

What does the center actually do?

Remove the corporate language and it's a shared defense system. Banks, government agencies and big businesses that join get three things. First, threat intelligence: early warning about attackers currently active in the area. Second, to regularly check how exposed their own systems are. Third, a platform where security teams compare the notes with counterparts elsewhere. Mastercard says it will conduct cyber risk assessments at 50 organizations in South Africa and Nigeria during the centre's first year. It also plans regular practice exercises, so organizations are prepared before the actual attack, rather than panicking once it begins.

The intelligence behind all this comes from the Recorded Future. It is a company that scans the open internet and dark web around the clock. (The dark web is the part of the Internet that is not indexed by normal search engines, often used to trade stolen data.) It looks for warning signs such as leaked credentials or conversations about planned attacks. Mastercard is not a neutral bystander here. It bought recorded futures outright $2.65 billionA deal was completed in December 2024. Cybersecurity has since become not just overhead for MasterCard, but a business of its own. The company says it has invested more than $12.6 billion in cybersecurity innovation since 2018 and has backed more than 20 cybersecurity-focused startups.

why now

Two trends explain the timing. The first is development. Mastercard's own estimate, from a 2025 commissioned study, puts Africa's digital economy at $1.5 trillion by 2030. The second is risk. MasterCard estimates that only about 35% of cyber incidents on the continent are officially reported. This is partly because many organizations lack the tools to detect an attack. Partly this is because some people may not want to disclose it publicly. Either way, the real scale is certainly worse than any official calculations.

Mastercard has described South Africa as its most targeted market on the continent. It said about 29% of Africa's ransomware attacks originate from the country, where criminals lock victims' data and demand payment to unlock it. It is also responsible for about 40% of phishing attempts in Africa, meaning fake messages designed to trick someone into handing over passwords or financial details. MasterCard says Nigeria is one of the countries most affected by ransomware and dark web activity.

Independent research supports the broad picture, even if the exact figures vary. INTERPOL's latest Africa cyber threat assessment found that cyber incidents could cost the continent more than $3 billion between 2019 and 2025. It also found that using Trend Micro data, South Africa recorded approximately 17,850 ransomware detections in 2024. This was the highest compared to any African country that year.

A commercial rationale also exists within the framework of public interest. MasterCard built its business on a small fee every time someone swiped a card. Now it is also preparing itself to make money and ensure that the swipes do not happen when a fraudster comes in. Visa has also changed tactics.

Where does Kenya fit in now?

Kenya's absence from phase one is notable, given how central the country is to East African fintech. We've talked about Kenya being left out on some things. When Apple brought Tap to Pay to South Africa in May, we already reported on it. Kenyan merchants are still waiting for the local bank and network partnerships that the facility still needs. Mastercard has not said which market it will enter next, or what will be required to include Kenya.

This does not mean that Kenyan cybersecurity stands still, or that Mastercard is absent locally. Kenya's national KE-CIRT/CC, operated by the Communications Authority of Kenya, detected more than 3.3 billion cyber threat incidents between January and March 2026 alone. Kenya also saw more than 3,000 ransomware detections in 2024, in the same Trend Micro dataset that ranked South Africa first. Mastercard is already running separate initiatives with Kenyan partners such as Safaricom on payments and remittances.

The phase that one affirms is narrower than that of complete absence. The specific threat intelligence feed, joint risk assessment and executive level collaboration under this specialized centre, is, for the time being, the product of South Africa and Nigeria.

Anyone in Kenya's banking or fintech sector who wants to know what changes are in store should look directly to Mastercard's future Africa announcements. Don't assume the rollout has expanded automatically. The center is described as multi-year and phased in, leaving room for other markets. But Mastercard has not committed to any timeline and has not named any next countries.