Fintech Weekly Digest: 7/2 – Crypto Accepted for Mortgages, Stablecoin Launches, Catwatchful Spyware Breach Exposes Thousands

Welcome to this week’s edition of ONSEC Fintech News Weekly Digest, your concise guide to the global financial technology landscape. From surging UK gilt yields and record European junk bond sales to Klarna’s strategic pivot into digital banking, we unpack the major macro shifts shaping fintech. This issue also covers landmark crypto adoption by U.S. mortgage giants, powerful AI and stablecoin launches, and cybersecurity risks—from stalkerware breaches to student loan data leaks. Whether you’re leading compliance, innovation, or security, this digest brings you the insights you need to navigate an industry in rapid transformation.

Trends & Innovation

• UK Borrowing Costs Surge Amid Political Uncertainty. UK 10-year gilt yields jumped to their highest level since October 2022 after political turbulence surrounding Chancellor Rachel Reeves spooked bond markets. The spike raises private borrowing costs and adds pressure on the Bank of England to delay future rate cuts. Source: Reuters
• Global High-Yield Bond Market Heats Up. European sales of high-risk corporate bonds reached a record €23 billion in June, driven by falling borrowing costs and investor rotation away from U.S. debt amid rising trade tensions. Complex instruments like payment-in-kind (PIK) bonds are back in favor. Source: Financial Times
• UK Regulator Expands Non-Financial Misconduct Oversight. The UK Financial Conduct Authority (FCA) will expand its conduct rules in September 2026 to include bullying and discrimination across approximately 37,000 regulated firms beyond traditional banks. The move follows a surge in misconduct reports and aims to rebuild industry trust. Source: Reuters
• U.S. Futures Steady Ahead of Tariff and Payroll Data. U.S. equity futures remained flat as investors awaited the July 9 tariff deadline and June non-farm payroll reports. Persistent inflation and mixed economic signals are likely to push Fed rate cut expectations into mid-to-late 2025. Source: Reuters
• Swedish Fintech Klarna Prepares for Digital‑Bank Pivot. Klarna is evolving into a digital bank by launching U.S. debit card services and expanding mobile banking ahead of its planned IPO. The shift aims to diversify revenue beyond buy‑now‑pay‑later amid market and regulatory challenges. Source: Financial Times
• Fannie Mae & Freddie Mac to Accept Crypto as Mortgage Asset
• The U.S. Federal Housing Finance Agency (FHFA) directed Fannie Mae and Freddie Mac to consider crypto holdings—if stored on regulated platforms—as part of a mortgage applicant’s asset base. This removes the need to convert digital assets to fiat for home loan eligibility. Source: Fox Business

Security & Cyber Threat

• Southwood Financial Data Breach. Private student-loan servicer Southwood Financial LLC disclosed that a breach between March and May exposed sensitive customer data, including names, Social Security numbers, birthdates, addresses, emails, and account details. Notification letters were issued starting June 27. Source: Strauss Borrelli PLLC
• Fintech Supply Chain Threat via Malicious Updates. A report by CXO Digitalpulse outlined a critical fintech supply-chain threat: malware inserted via software updates at mobile payments providers could compromise banking APIs, intercept OTPs, and drain digital assets. The analysis urges financial institutions to strengthen third-party risk management and conduct breach simulations. Source: CXO Digitalpulse
• Ahold Delhaize Data Breach Exposes 2.2 Million Individuals. A ransomware attack disclosed on June 30, 2025, revealed that major U.S. grocer Ahold Delhaize suffered a breach in November 2024. The INC Ransom group exfiltrated sensitive data—including names, Social Security numbers, driver’s license information, financial account details, and health records—affecting approximately 2,242,521 current and former employees, their dependents, and beneficiaries. Victims are now being offered two years of free credit monitoring and identity protection. Security analysts emphasize that this breach highlights critical weaknesses in managing employee data and third-party vendor access.
  Source: SecurityWeek
• Catwatchful Spyware Breach Exposes 62,000 Customers and 26,000 Victims
  A critical vulnerability in the Catwatchful stalkerware app exposed its entire user database, including plaintext passwords of over 62,000 customers and the private data of 26,000 Android devices. The app covertly harvested photos, messages, location data, and even live microphone and camera feeds. Most affected devices were located in Mexico, Colombia, India, and Peru. The spyware’s developer, Omar Soca Charcov, was also unmasked in the leak. Despite Google’s involvement, the spyware’s Firebase-hosted backend remains online. Source: TechCrunch

Product & Platform Launches

• FCA & Nvidia Launch UK AI Sandbox. The UK Financial Conduct Authority (FCA) partnered with Nvidia to launch an AI sandbox starting October. The initiative will allow financial firms to test AI-powered tools in a secure environment, with access to Nvidia’s tech stack and regulatory oversight. Source: FinTech Futures
• Fiserv Introduces FIUSD Stablecoin. Fiserv unveiled FIUSD, a USD-backed stablecoin integrated into its payment and banking infrastructure. With over 10,000 financial institutions and 6 million merchants in its ecosystem, the stablecoin enables instant, programmable digital transactions. Source: Yahoo Finance
• Ant International Unveils Alipay+ GenAI Cockpit. Ant International launched the Alipay+ GenAI Cockpit, an AI-as-a-service platform designed for fintechs and super-apps. It delivers tools for fraud detection, compliance automation, dynamic risk analysis, and payment orchestration, tailored for Southeast and South Asia. Source: Business Wire
• Papaya Global Partners with Citi for Cross-Border Payroll. Papaya Global integrated Citi’s banking services into its Contingent OS platform, boosting its ability to manage cross-border freelancer payments and payroll operations efficiently. Source: PYMNTS
• Fintech Sandbox Welcomes Six New Startups. Fintech Sandbox introduced six new startups in its latest cohort, including Atlas Money, an AI-driven platform for personalized cash-flow management. Other startups are focused on document fraud detection, SME liquidity optimization, and regtech tools. Source: LinkedIn via Fintech Sandbox

Final Words

As fintech continues to redefine the contours of global finance—through AI innovation, evolving regulations, and rising security threats—staying informed is no longer optional. From bold monetary shifts and digital asset integration to advanced cyber risks and breakthrough product launches, this week’s developments highlight the urgency of resilience and innovation. If you found this digest valuable, feel free to forward it to your colleagues and peers. The more we share insight, the stronger and more secure the fintech ecosystem becomes.

Book a call with ONSEC team