Products / Covariance Trust Fabric
Industry standard · Patent pending

If it's not in the app, it's not your bank.

Covariance Trust Fabric is a proposed industry standard for verified bank–client contact. The bank contacts app-using clients inside the app, for calls and messages, and the bank and the client's device prove themselves to each other before anything sensitive is said.

Verified contactThe rule, in principle
TWO-WAY
The bank proves itself to the clientRequired
The client's device proves itself to the bankRequired
Then the call or message beginsIn the app
A call or SMS outside the appNot your bank
Calls · messages · both waysPatent pending (ZA)
The problem

Verification runs in one direction. Criminals exploit the other.

A client is asked to prove who they are, but has no dependable way to prove who is calling. A convincing call or SMS that claims to be from the bank is hard to tell apart from the real thing.

R2.41bnreported digital banking crime losses in 2025
110,074reported digital banking crime incidents
+29.2%increase in losses on the previous year

Source: SABRIC Annual Crime Statistics 2025, which identifies vishing-led authorised payment fraud as a dominant pattern.

One rule a client can learn

Simple enough to remember. Strong enough to rely on.

For clients who bank through an app, the bank contacts them inside the app, for calls and for messages. Before anything sensitive is said, the bank and the client's device prove themselves to each other.

A client who follows one rule, if it's not in the app, it's not my bank, can treat any other call or SMS claiming to be the bank as suspect.

A rule like this protects clients best when many banks keep it. That is why we are developing it as an industry standard.

A standard, not a product

Neutral by design. Run by each bank.

Each bank keeps its own keys, client data and choice of integration partner.

01

Vendor-neutral

Designed as an open industry standard for verified bank–client contact, intended to be governed by the industry.

02

Run by each bank

Each bank runs its own implementation in its own environment, keeps its own keys and client data, and chooses its own integration partner.

03

Built on what banks have

Designed to work with banks' existing apps and contact centres, not to replace them.

04

Didusec licenses; it never operates

Didusec authors the standard, licenses it and certifies implementations. It does not operate any bank's channel. No central platform, no single vendor to depend on.

Where we are

Working proof. Protected design.

  • A working technical proof, including a verified in-app call on an Android phone.
  • Engaging with industry stakeholders.
  • Patent pending: South African applications 2026/09174, 2026/09341 and 2026/09784.
Confidential briefings

For banks, integration partners and industry bodies.

Detail is shared under a mutual non-disclosure agreement.

Request a briefing

Stan Molema, Founder and Managing Director
[email protected] · +27 81 356 8989