Fintech Weekly Digest: 9/03 -Klarna IPO Targets $14B; PayPal Outage in Germany; $130M Pix Heist

Welcome to this week’s edition of ONSEC Fintech Cyber Weekly, brought to you by the ONSEC team. The past seven days have been pivotal for global fintech. Klarna finally pressed ahead with its long-awaited U.S. IPO, signaling a reopening of public markets for digital finance, while fresh funding rounds in India showed strong regional momentum. Banks and fintechs alike accelerated their AI and open-banking strategies, from Santander’s ChatGPT rollout to new cross-border API suites. At the same time, security stories dominated headlines—Brazil’s Pix network suffered a $130M heist, German banks froze billions in PayPal flows, and regulators from London to California tightened cyber and disclosure mandates. Here’s what mattered most this week.

Trends & Innovation

• Klarna targets up to $14B valuation in U.S. IPO — September 2, 2025 – [Reuters]. BNPL giant Klarna launched its long-awaited U.S. IPO roadshow, seeking to raise up to ~$1.27B at a valuation of as much as $14B, signaling renewed appetite for fintech listings after a tariff-rocked summer. Reuters
• Fall IPO window reopens: Gemini & Figure join the queue — September 2, 2025 – [Reuters]. With market jitters easing, the U.S. IPO market reopened post-Labor Day as crypto exchange Gemini and blockchain lender Figure kicked off roadshows alongside other tech names—another sign of capital markets thawing for digital-finance players. Reuters
• UK open banking tops 15 million users — September 1–2, 2025 – [Finextra / Open Banking Limited]. Adoption hit a record ~15.1M users and 2B monthly API calls, underscoring A2A payments and VRP momentum as open banking shifts firmly into the mainstream. Finextra Research
• Wise explores applying for a UK banking licence — September 1, 2025 – [Finextra]. To deepen its money-movement stack, Wise is weighing a UK bank charter—potentially enabling interest on e-money and tighter integration with domestic rails as it scales a “globally connected” network. Finextra Research
• FATF presses countries on shell-company transparency (crypto risk in focus) — September 3, 2025 – [Reuters].The global AML watchdog warned that opaque beneficial ownership remains the “getaway car” for illicit finance, with online crime and crypto misuse still key challenges as new national assessments get underway. Reuters

Security & Cyber Threat

• $130M siphoned via Brazil’s Pix using Sinqia credentials — September 3, 2025 – [BankInfoSecurity]. Attackers used valid third-party credentials tied to fintech provider Sinqia to push unauthorized transfers through Pix; the central bank froze a chunk of funds while forensics continue. Bank Info Security
• German banks halted ~€10B in PayPal payments over fraud-checking concerns — August 27–29, 2025 – [Reuters]. A PayPal processing disruption led banks to block billions in transactions; PayPal said the issue was resolved and it’s working with partners to reconcile accounts. Reuters
• TransUnion breach impacts ~4.4M consumers — August 28, 2025 – [Finextra]. The credit bureau disclosed a significant data exposure tied to a third-party provider—another reminder of supply-chain risk across financial data ecosystems.
• FCA warns of spike in “fake FCA” impersonation scams — August 27, 2025 – [Finextra]. The UK regulator flagged thousands of reports of impostor calls/emails—often citing “crypto recovery” or court-order claims—to dupe victims into handing over funds or credentials. Finextra Research
• El Salvador splits state bitcoin reserves into multiple wallets to counter future “quantum” threats — September 2, 2025 – [Finextra]. The move aims to harden custody against long-term cryptographic risk, highlighting sovereign-level crypto security postures. Finextra Research

Product & Platform Launches

• TrueLayer launches in Poland — Pay-by-Bank expansion — September 2, 2025 – [Finextra]. The open-banking network went live in Poland, adding PLN as its third supported currency to extend account-to-account payments across Central Europe for merchants and fintechs. Finextra Research
• Klarna rolls out debit-first card across the EU — September 3, 2025 – [The Paypers]. Klarna expanded its Visa-backed debit product across Europe, letting customers pay upfront anywhere Visa is accepted—broadening its “beyond-BNPL” push. The Paypers
• Stripe Terminal launches in Japan — September 3, 2025 – [The Paypers]. Stripe extended its in-person payments stack to Japan, giving platforms and retailers unified online/offline acceptance and fleet-manageable smart readers. The Paypers
• BharatPe + Unity Small Finance Bank debut RuPay credit card linked to UPI — September 3, 2025 – [The Paypers]. The new “BharatPe Unity Bank Credit Card” brings credit-on-UPI with a zero-fee structure and flexible EMI prepayment—aimed at accelerating card-over-UPI adoption. The Paypers
• Verto unveils “Atlas Suite” for cross-border finance — September 2, 2025 – [The Paypers]. The B2B payments firm launched an API-first suite bundling FX liquidity, virtual business accounts, and international payments via a single multi-currency API for marketplaces and FIs. The Paypers

This week highlighted three clear threads. First, public markets are reopening to fintech—from Klarna’s roadshow to crypto and blockchain names lining up—signalling a thaw in risk appetite and a broader reset for late-stage fintech capital. Second, product momentum stayed hot, with open-banking rails and card innovation (from TrueLayer in Poland to Klarna’s EU debit and UPI-linked credit in India) tightening the loop between digital and point-of-sale, and giving merchants more unified options. Third, cyber resilience remains a frontline issue, as the Pix heist, PayPal’s German disruption, and large third-party breaches underscore how intertwined platforms and vendors are—and why regulators (like FATF and the FCA) keep pressing for stronger controls and transparency.

Book a call with Onsec Team