Bill Deng, Founder & CEO of XTransfer, has shared “Three Lessons from the Front Line” in response to the growing threat of cyber-enabled fraud, with a focus on why fraud prevention in B2B payments starts with understanding the business, not just the transaction.
The Scale of the Problem
Deng cites the World Bank's Global Findex 2025, which puts account ownership at 79% of adults, up 28 points in a decade — a quiet success for financial inclusion. But the Global Anti-Scam Alliance reports nearly 60% of adults encountered a scam in 2025, and a quarter lost money. Faster payment rails, he notes, speed up legitimate and fraudulent payments alike.
The Bangkok Blueprint, launched by the IMF, World Bank Group and Bank of Thailand at the 2026 Annual Meetings, frames the response correctly in Deng's view: cyber-enabled fraud is an ecosystem problem no single institution can solve alone. XTransfer joined a closed IMF/World Bank panel to share insights on digital safety.
Deng argues that a framework sets direction but does not tell an operator what to do when a payment looks unusual. He offers three lessons from the front line.
Speed Is Not the Same as Judgement
Automation has transformed screening, Deng writes. It absorbs volume no team could handle and flags anomalies in seconds. But consistency is not understanding: a model can say a transaction deviates, but it cannot say whether that reflects a new customer, a seasonal order-book shift, or a fraud typology never seen in training.
In B2B payments, the payment message carries almost none of the commercial history behind it — the inquiry, purchase order, shipment and invoice. Reading the underlying trade is often what separates an unusual but legitimate payment from a suspicious one. Frontline teams who know how a small exporter operates, Deng argues, belong inside the control environment.
Share the Principles; Calibrate the Controls
Asia-Pacific is the best test bed precisely because it is heterogeneous, according to Deng: regulation, rails, customer behaviour and fraud patterns differ sharply across markets. Exporting one operating model is a category error. What travels is a common language, shared risk principles and typology frameworks describing how schemes are structured — not one prescribed technical response.
Controls must be calibrated locally. A multi-market compliance footprint earns its keep here, Deng writes: operating under several regulators forces you to separate what is universal from what is merely habitual.
Intelligence Should Move as Fast as Fraud
Fraud techniques migrate, Deng notes; a pattern seen in one corridor reappears, adapted, in another. If every institution treats detection as a private asset, everyone downstream starts late. Regulator-supervised, privacy-protecting sharing can turn one market's signal into another's early warning, without identical rules everywhere.
More connected SME payment infrastructure helps too. Today it is fragmented among banks, providers and jurisdictions, each seeing a narrow slice. The chain rarely starts in finance at all, Deng writes; it may begin on a social platform, marketplace or telecom network. Institutions, platforms, regulators and law enforcement each hold a fragment, which is why public-private engagement is not a courtesy but the mechanism of trust.
Making the Safe Path the Easy Path
Access will keep expanding, Deng concludes, but whether it endures depends on trust — the cumulative result of fast technology, experienced people, controls that fit their market, and institutions willing to share what they learn. For those building infrastructure for small traders, he frames the obligation simply: make the safe path the easy path. Security that excludes legitimate users, he writes, defeats the inclusion it protects.
Deng notes he first set out related views in a WEF Financial and Monetary Systems discussion on 23 October 2026. The piece is described as an original expansion for XTransfer's own channels that does not reproduce or adapt the WEF text. The views are the author's own, not those of the WEF, IMF, World Bank Group or Bank of Thailand. XTransfer contributed private-sector experience to the Annual Meetings' digital safety discussions; no endorsement is implied.

Comments 0
Join the discussion with the PLAYDASH Media community
Log in to join the discussion
Your perspective enriches the conversation. Log in to post comments, reply to others, and interact with the community.
⚡ You will automatically return to this article after logging in
No comments yet. Be the first to share your perspective!