MTN Uganda is seeking input from stakeholders on a plan to structurally separate its mobile money service, MoMo, from its core telecoms business.

According to the company, the proposed change will be discussed at the upcoming extraordinary general meeting on July 2.

If approved, the telco’s fintech business will be run by a new company controlled by MTN Group Fintech Holdings B.V. and a trust benefiting minority shareholders following a merger.

Additionally, the restructuring also aligns with MTN Group’s ambition 2025 strategy which aims to unlock value, attract new investors, and strengthen regulatory compliance by creating standalone fintech entities in Uganda, Ghana, and Nigeria.

The company’s fintech division has over 13 million customers, with an 18.4% revenue increase in the first quarter of 2025, driven by 19.0% growth in mobile money services, 19.8% growth in transaction volumes, and a 31.4% increase in transaction value.

Reports say the decision is part of the telco’s compliance with the National Payment Systems Act 2020, which mandates mobile money businesses to operate as standalone entities, and to align with MTN Group’s regional fintech strategy.

MTN Uganda, which is led by CEO Sylvia Mulinge, highlighted that the implementation of the proposed transaction will be subjected to a number of conditions and regulatory procedures.

“The implementation of the proposed transaction shall be subject to a number of conditions, including the company and MTN MoMo receiving all required regulatory approvals and no-objections and complying with any regulatory conditions,” said MTN Uganda in notice.

Nigeria Computer Emergency Response Team (ngCERT) has raised alarms over a new wave of advanced cyberattacks targeting Android mobile phones through a malware campaign dubbed Tria Stealer.

The malicious software is designed to infiltrate Android devices, hijack messaging accounts, intercept One-Time Passwords (OTPs), to steal sensitive personal and financial data.

According to ngCERT, Tria Stealer spreads primarily through deceptive tactics, such as fake event invitations distributed via popular messaging platforms like WhatsApp and Telegram.

Unsuspecting users are enticed to download an infected  (APK) file, often disguised as a harmless system application, to evade detection.

Once installed, Tria Stealer requests extensive permissions, including access to SMS, call logs, and app notifications.

It immediately commences data harvesting activities, sending stolen information to a Command and Control (C2) server operated via Telegram bots.

This trojan spreads through fake links, usually disguised as wedding or event invites, and tricks users into downloading malicious APK files

“Account takeover of messaging platforms. Impersonation of victim for fraudulent money transfer requests. Compromise of banking and financial applications. Identity theft and credential harvesting.”

In plain terms, if your phone is compromised, the consequences could be catastrophic.

Your financial apps are vulnerable, your reputation could be ruined by impersonation and even simple personal messages could be twisted into tools for scams.

Here’s what users should be doing now:

Don’t download apps outside the official Play Store.

Be suspicious of random invites or links, even from people you know.

Turn on 2FA for everything—banking, emails, social platforms.

Get a reputable antivirus and keep it updated.

If you run an organisation, you should already be taking this seriously.

ngCERT’s guidance says you should raise awareness, monitor mobile devices, and not let your team click on unverified links.

“Deploy network monitoring for suspicious outbound connections to known C2 domains,” it said, meaning, keep an eye on every digital door in and out.

This isn’t one of those cases where you wait to see if it affects you. By the time you realise it, it may already be too late.