GSMA Mobile Money Certification sets eight principles and almost 300 criteria for safeguarding, financial-crime controls, agents, operations, security and customer protection. Providers assemble evidence for assessment, with certification tied to a named provider, country and period.
TL;DR:
- GSMA Mobile Money Certification assesses provider practices.
- Eight principles cover operational risk and customer protection.
- Assessment evidence and certification apply to a defined provider and scope.
Summary
Assessment framework
The GSMA Mobile Money Certification Toolkit is the foundation for assessing mobile-money providers. It organises almost 300 criteria under eight principles and associated sub-principles. The criteria concern business practices and risk mitigation.
Risk and customer protection
The principles address safeguarding funds, financial-crime controls, staff and agents, operational quality, technical security, transparency, customer service and personal-data privacy. Their combined purpose is to assess how a provider operates and protects customers, including responsibilities that cannot be established by examining a payment API alone.
Evidence and assessment
Providers use the toolkit for detailed self-assessment before certification. The completed toolkit is submitted through the programme portal for an assessor’s evaluation. Certification applies to the named provider, country, scope and period.
Separate from API conformity
GSMA Mobile Money Certification and the GSMA Mobile Money API have different scopes. Implementing the API does not establish certification, and certification does not by itself prove that a particular API version or operation is implemented. Local regulatory duties and the provider’s customer agreements also remain applicable.
Keywords
- Mobile Money
- Provider Certification
- Safeguarding
- Financial Crime
- Agent Management
- Operational Risk
- Technical Security
- Transparency
- Customer Service
- Data Privacy