Platform

• Business till sessions carry the business's PayID. An 88Pay till request created for a business now shows and shares the business's own PayID everywhere it is displayed, copied or shared. Scanned QR payments always settled to the business and are unchanged.
• Businesses without a PayID receive one when a till opens. A business approved before PayIDs were issued automatically is assigned one on its first till session.

• A correctly-filled trade is no longer rejected over a rounding difference. The safety check that compares a fill against what you asked for now derives its tolerance from the precision each venue actually reports, and adjusts per venue.
• More of a favourable fill is put to work. A buy that fills at a better price now invests the headroom rather than returning it unspent. Price protection itself is unchanged.
• Price lookups ask at each venue's minimum tradable size , so every instrument returns a live price instead of falling back to a cached one.

• Wallet creation survives a busy provider. A provider rate limit is now paced and retried rather than failing the wallet outright.
• Monitoring that can see a real gap. The wallet-provisioning health check now verifies the wallets themselves, not only the custody account behind them.
• A replay path for delayed trade receipts , so anything held back is reprocessed rather than left behind.

• 88Pay Air — proximity discovery, peer resolution, tap-to-pay, request-a-payment and split-with-the-room, with send limits set by the platform and mirrored by every client.
• Bands — pairing and resolution, plus an operator freeze that makes every tap resolve to a safe answer without altering any band.
• Card pay-in, end to end , and direct ZAR settlement through a new instant-payment partner.
• The business money rail — a business holds its own pay identity, and its pay-ins route to the business ledger.
• Per-operation balance reservations replace a single pooled counter, so concurrent activity on one balance is accounted for exactly.
• One explicit money-rounding policy in place of nine separate ones.

• A legacy donation endpoint has been retired and now returns 404, along with an unused payment-reversal call.
• A limit order whose assets contradict its pair is rejected rather than accepted.

• A provider and payment-method catalogue. Payment providers and the methods they offer are described in one typed registry, with a readiness gate so a method only becomes available once it genuinely can be used.
• Effective-dated rate cards and a margin ladder. Pricing is defined with explicit start dates and a cost floor that fails closed, with floor, cap and shadow modes so a change can be measured before it applies to anyone.
• A resolved payment-methods endpoint carrying its own disclosures , plus a charge simulator that returns how a price was reached.
• Business invoices as PayLinks.

• Live FX rates over a streaming feed , currency charts at every range, and streamed market data.
• Feed health is visible. Live rates and rate history are reported as independent signals, so a feed serving prices but no history shows up as a problem instead of a permanently empty chart.

• A publishing platform for the blog, press releases, press kit and media coverage, with authors as first-class entities and a slim website content system behind it.

• Narrower permissions, enforced. Role-scoped gates enforce their named subsets, customer personal data is gated on an explicit capability and checked on every listing, credential creation and business money routes are gated, and non-custodial crypto withdrawals fail closed.
• A view-as-role preview , so the effect of a permission change can be checked before it is applied.

• A frozen step-up contract , device enrolment protected by your PIN, and a device assertion accepted as a second factor.

• Fiat deposits credit exactly once. Deposits run through a single crediting primitive with the fee applied consistently, and one deposit reference is recorded on every path.
• A ledger reconciler runs in shadow, comparing balances against the ledger so any drift is visible.

• Write-once verified proof publishing , an environment-driven chain configuration with a fail-closed connectivity check, and the token's true six-decimal precision.

• Attribution stays first-party. Signup attribution and funnel milestones are recorded by us and sent to no third party. No conversion data leaves the platform.

• Capability-based permissions. Every privileged internal action is now gated on a specific, named capability rather than a general administrator role, so access is granted narrowly and deliberately instead of in bulk.
• Read and write tiers are genuinely separate. Roles intended for viewing only are enforced as read-only everywhere they appear.
• Named-role enforcement on sensitive operations. Resetting a customer's two-factor, editing banking details, handling trade requests, granting access and advancing an asset listing each require their own explicitly named role.
• Governed, audited roles. Role definitions live in one place as templates, and access grants and role changes are recorded.

(No web, app or API changes — customer-facing products were not part of this release.)

• Request-to-pay, group collections, and goals. Send a request that opens straight to a pre-filled payment, split a bill across a group, or run a collection toward a shared goal — all tracked in one place.
• Open-amount, reusable, and never-expiring links. Create a link that lets the payer choose the amount, reuse a single link again and again, or keep one open with no expiry — with reminders and per-link analytics.
• A clearer picture of what you've received and paid. New views surface the links you've been paid on and the links you've paid, with per-asset totals rolled up for you.
• Polished share images. PayLink share previews got a premium redesign, with proper handling of longer names and non-Latin scripts so every link looks right wherever it's shared.
• Safer settlement under the hood. Payment settlement is now replay-safe, so a retried or duplicated request can never double-count — your balances stay exactly right.

• Weighted-average cost basis. See a true weighted-average cost basis per asset, so your gains and returns reflect what you actually paid — for personal and business accounts alike.
• Your chart, your way. Your preferred chart type is now remembered across sessions.
• Faster charts, fresher prices. Charts warm their data on first request instead of returning empty, and our pricing engine resolves cross-rates and inverse pairs more accurately for tighter, more dependable quotes.

• Execution and near-execution alerts. Get notified the moment an order executes, plus a heads-up as one approaches its trigger — so you're never caught off guard.
• Live order tracking (rolling out). A new live-activity rail brings real-time, on-screen order and transaction updates to your device. It's arriving gradually as we complete the rollout.
• Cleaner trade emails. Trade confirmation emails are tidier and more accurate.

• Business API keys and a developer sandbox. We're introducing business-scoped API keys as the single, secure way to connect systems to 80eight, alongside a developer sandbox and portal and a curated set of public events to build against. These are rolling out to early partners first.
• Business payout rails. New payout rails for business accounts, plus a business account request history and more targeted withdrawal controls.

• A smoother path when a check doesn't pass. If an identity check is declined, you can now request a retry, and our team has admin-controlled tools to reset and re-run verification cleanly — so nobody gets stuck.
• Stronger business onboarding. Business (KYB) onboarding now requires a valid company country up front and surfaces director-confirmation details more reliably.

• A real help experience is taking shape. We're building end-to-end support — tickets with a full lifecycle, service-level tracking, satisfaction follow-ups, and email and WhatsApp channels that flow into one place. This is rolling out progressively behind the scenes ahead of a wider launch.

• Private attachments. Files shared in support and elsewhere are now served through short-lived, signed links, so only the right people can open them.
• Privacy-preserving contact matching. Finding friends already on 80eight now uses a privacy-preserving match, with a clear opt-out for being discoverable by contact.
• Stronger sign-in safeguards (rolling out). We're introducing an additional verification step on sensitive actions like withdrawals and payment-link creation. It's being enabled gradually so we can tune it without adding friction to everyday payments and trades.

• More reliable money handling. Deposit and settlement paths are more resilient, with automatic detection and replay of any missed provider notifications and stronger safeguards against duplicate credits.
• A dedicated ledger foundation. We began mirroring transfers into a standalone, double-entry ledger, laying the groundwork for even stronger financial integrity and reporting.
• Operational visibility. New internal health reporting spans every provider and dependency, and administrative changes now flow through a consistent approvals and audit path.
• Leaner, faster infrastructure. We retired unused trading integrations and tightened background-job controls for cleaner, more predictable performance.

• Clearer, more honest trade pricing. Buy and sell prices now come from a single, transparent pricing engine, and rates are shown the way you'll actually receive them.
• Business accounts — foundations. The backend for team accounts, roles, invitations, and business verification (KYB) is now in place, ahead of the Business Suite rollout.
• A richer asset experience. Clearer asset classification and finer per-asset controls, so the assets you trade are managed more carefully.

• Stronger crypto custody. Our custody integration was upgraded and hardened, with extra safeguards on deposits and withdrawals so funds credit reliably and correctly.
• Faster wallet & portfolio. Balances, portfolio value, and account screens load faster and more accurately.

• More reliable sign-in. Reopening the app no longer occasionally signs you out.
• Stronger money-movement protection. Extra safeguards across money-moving actions, including protections that help prevent duplicate or mistaken transactions.

• Dozens of reliability, correctness, and performance improvements across trading, payments, and custody — shipped on a hardened, well-tested release pipeline.

• Adding a bank account no longer fails validation. The request from the app was being rejected before it reached the platform because it did not carry a field the app never collects. The account holder now defaults to the account owner's legal name, so every saved account still carries one. The web app was unaffected.
• Also in this window — a corrected effective trade rate, compatibility with older app builds on the trade path, and additional safeguards on deposit and withdrawal amounts.

• Crypto deposits and withdrawals credit reliably. The credit, debit and refund steps now complete as a single unit and retry a transient interruption, so a movement is never left half-applied. A completed deposit is reconciled against the amount that actually arrived on-chain before it is credited, and any divergence beyond the network fee raises an alert.
• Network fees on a crypto send release correctly. The fee is held with the send total, so nothing stays reserved once the send completes.
• Trades show the correct rate. A trade now stores the canonical quote-per-base rate as its customer-facing price, correcting the rate displayed on a sell. Historical trade records were corrected to match.

• Faster account, wallet and market reads. Profile, portfolio and asset lookups now run in parallel.

• Sharper operations. Production alert paging, plus reconciliation tooling for unmatched withdrawals and reserved balances.

• A uniform 0.38% spread, both ways. Every tradable pair now resolves to the same default spread — our interim buffer for slippage and provider costs — instead of its own rate.
• Legacy per-pair rates cleared. Pairs that previously carried 1% or 1.5% now resolve to the uniform 0.38%.
• ZAR8 ↔ ZAR carries no spread. The native 1:1 peg is exempt.

• Reopening the app after a while keeps you signed in. A cold start no longer sends you back to the sign-in screen.

(An interim default — a dedicated pricing service will replace it.)

• The recurring-buy premium is applied consistently. The 1% AutoStack premium is now taken the same way on every plan and booked to the platform ledger at settlement, so what you are charged and what you receive always reconcile. The rate is configurable rather than hard-coded.
• Every scheduled buy runs exactly once. Additional safeguards guarantee a single run per slot, recover a plan left stuck mid-run, and reschedule after a failure instead of ending an active stack.
• Historical records are accurate. Imported data from the previous platform no longer produces buy orders that never happened.
• Full operational control. A stack can be paused, resumed, stopped, skipped or retried, and the premium adjusted — every action audited.

• A dedicated profit-and-loss ledger. Trading now records fees into a typed, duplicate-safe ledger with a single source of truth for fee resolution. It runs in shadow for this release — customer pricing is unchanged.

• Withdrawals initiated outside the app are recognised. On-chain withdrawals that originate outside our normal flow are adopted and reconciled rather than left unmatched, with guards against acting on one mid-broadcast.

• Business portfolio performance figures, redesigned HTML emails, and the ability to resend a verification email during onboarding.

• Password resets now run through our identity provider. Requesting a new password uses the same hardened, hosted flow that protects sign-in, replacing the older in-house reset path.

• Trade recovery is a single atomic step. The background process that clears a trade left mid-execution now claims and releases it in one operation, so a trade can only ever be handled once.

• Email delivery is monitored. A failed send raises an operational alert, and the platform verifies its email configuration at start-up rather than discovering a problem when the first message is due.

• Safer trades by default. Every instant trade now requires a stable safety key, so a network retry or double-tap can't fire a second trade — replays are de-duplicated instead of executing twice.
• No deposit left behind. Crypto deposits that can't be matched to an account are now held safely in a suspense ledger and resolved by support, instead of being dropped.
• A constant watch over every balance. Continuous reconciliation and crash-recovery hardening across trade settlement — automatic unwinding of partial trades, recovery of stuck trades, and guarantees that a settlement can never debit without crediting.

• Clearer trade history. Failed trades now appear in your history with a clear status and no balance impact, and trades no longer show as two separate rows.
• More accurate trade records. Trade records now carry a precise, consistently-denominated execution rate for clearer display.
• Business wallet fixes. Improved account resolution for business wallets, including more flexible handling of quote amounts.

• Stronger pair controls. Pair availability is now enforced server-side — an unavailable pair is either declined clearly or transparently resolved to the right market, with no change needed on your side.
• Slimmer trading data. Internal operator-only fields are no longer included in the public pairs response; every field the apps read is unchanged.

(A note on integrations: instant trades now require a non-empty safety key — all shipped 80eight apps already send one; only direct API integrations need to check.)

• More assets settle first time. Fixes buys of certain assets (for example, ETH and SOL) that were failing at the final step after a precision regression. Your funds were always released untouched, and the trade now completes.
• A clear message when a trade can't complete. When a trade can't go through, the app now receives a clear, human-readable message instead of a generic server error.

(Operationally after release: two crypto-withdrawal reliability fixes so withdrawals reliably reach custody.)

• More assets settle first time. Fixes a case where buys of certain assets (for example, ETH) could fail at the final step. Your funds were always released untouched, and the trade now completes.

• Nothing left half-done. If a multi-step trade can't be completed after it has already partly executed, the executed part is now automatically unwound — so the platform never holds inventory you didn't ask for, and nothing is left half-finished.

• Trades complete from the latest build. Resolves a case where instant trades placed from the latest app build could fail at the first step. As always, your funds were released untouched — nothing was ever lost — but the trade now completes.
• Accurate display rates. Improves the accuracy of the displayed ZAR exchange rate so it matches the rate trades actually execute at.

(Operationally this window: a crypto-withdrawal reliability fix and recovery for any previously-stuck withdrawal transactions.)

• Smarter venue routing. For the major ZAR pairs, the engine now picks the venue by trade size automatically — small trades execute directly on the local exchange, larger ones via the OTC desk — so trades below the OTC desk's minimum, which previously failed, now complete.
• Two blocking cases hardened. Two upstream-rejection cases that were stopping trades are resolved, with the real reason now surfaced internally when a venue rejects an order.

(Operationally this window: ZAR withdrawal limits raised to R1m per day and R30m per month, and admin crypto approve/reject endpoints documented to fix a tooling error.)

• All-or-nothing trades. For instant trades that route through an intermediate currency (for example, buying an asset with ZAR via USDT), the engine now confirms every leg can be priced before it executes any of them. If a leg can't be priced, the whole trade is declined up front and your funds are released untouched.
• A guaranteed referral code. Every user now has a unique referral code — the code you share so sign-ups attribute back to you. Existing codes are preserved.

• Withdrawals unblocked. Resolves a regression where some mobile users hit "Something went wrong" on every fiat withdrawal — withdrawals work normally again.

• Safer operations. Hardened internal tooling so operator-set states are preserved by default, with safer maintenance routines and a read-only data-integrity audit.

• Trades that can't overspend. Orders to our liquidity layer are now slippage-bounded and attempted on a single assigned venue, so a transient error can never double-execute an order and a buy can never exceed the amount you requested.
• A more secure session model. Clients can now choose how their session token is delivered — browser-only secure cookies, or token-in-body for native apps that hold their own credentials — with native apps able to store a rotating refresh token in a secure device keychain.
• More predictable sign-in. An explicit email-and-password sign-in always authenticates with those credentials rather than a stale session, so you reliably get a fresh token back, with consistent error responses across the auth surface.

• Stronger admin tooling. New internal controls back multi-jurisdiction company settings, push-campaign broadcasts, per-pair fee and trade configuration, and admin reset of two-factor — all internal admin-console APIs, not part of the public contract.

(Every change in this release is additive — clients that send no new headers keep their exact current behaviour.)

• A unique, branded reference. Your account reference — and therefore your bank deposit reference — is now guaranteed unique and 8-prefixed for everyone, generated through a single, consistent path across every sign-up route.
• A careful one-off backfill. A migration tidies up older references and keeps a full record of any change, so deposits sent against a previous reference can always be reconciled.

(No action needed for integrators — note only that an existing user's deposit reference may change when the migration runs.)

• Stronger account security. Sign-in now uses secure, browser-protected sessions with built-in protection against cross-site request forgery — a meaningful step up in how your account and your money are protected.
• More reliable identity verification. We added a second verification provider and consolidated how identity checks work, so getting verified is faster and more dependable.
• Compliance, built in. Expanded regulatory and travel-rule tooling so transfers stay compliant as 80eight grows.
• More to hold and earn. New assets, a refreshed asset experience, and the ZAR8 yield programme.
• Faster wallet and trading. More reliable wallet, trading, and transaction experiences, with more accurate balances and pricing.

• Account protection throughout. Strengthened authentication, two-factor protection, and account-access controls across the platform, with sensitive and money-moving actions protected by additional verification.
• Hardened money movement. Strengthened payments and account data across the board, including safeguards that help prevent duplicate or mistaken transactions.
• A modern foundation. Re-engineered on a modern, fully-typed platform with expanded automated testing, new and more reliable hosting, and a hardened release pipeline.

• New ways to pay. We're putting the finishing touches on major new ways to pay people and businesses, rolling out gradually. (Not switched on yet — watch this space.)