Product Vision Document
Banking the Unbanked
through Trusted Community Finance
LocalLoyalty as the onramp — isusu circles as the proving ground — Bank X as the destination. A layered fintech architecture that turns informal savings culture into a regulated financial identity.
R40B
Estimated informal ROSCA value/yr
~80%
isusu failures from fraud/trust
0%
Formal digital ROSCA penetration
01 — Context
The isusu problem is a trust problem
The informal rotating savings club (isusu/stokvel/ROSCA) is one of the most proven financial instruments in the developing world. The mechanism is sound. The infrastructure around it is not.
Pain A
No identity verification. Any member can claim a payout turn and disappear. The whole scheme collapses, and the remaining members lose everything they contributed.
Pain B
Manual coordination by a human "facilitator" who collects cash, manages the rotation, and holds float. This single point of failure creates both fraud risk and a bottleneck.
Pain C
Cash disbursements are unsafe and leave no trail. There is no recourse, no credit history built from consistent contribution behaviour, and no path to formal financial products.
Pain D
No off-ramp. Even when a payout lands, the recipient has no account to receive it in, no way to spend it digitally, and no documented income event for future credit assessment.
The opportunity: every one of these failures is a technology and trust problem, not a behaviour problem. The behaviour — regular contributions, community accountability, rotation discipline — is already there. It just needs a trusted digital rail underneath it.
02 — Architecture
The four-layer trust stack
Each layer solves one of the four failures above. Each layer is a product that already exists, or is buildable now. The stack compounds — users who complete all four layers are fully onboarded into regulated finance.
⬡
LocalLoyalty — the rail
Digital wallet, stokvel ledger, merchant network, QR payment infrastructure. The entry point for every unbanked user.
🪪
Verilink — identity assurance
Liveness check, ID document scan, face-to-ID match. Creates a biometric anchor for every LL user. POPIA-compliant. Enables biometric auth on sensitive actions.
📋
TermsCon — smart governance
Digitally signed cap tables and rotation agreements. Replaces the human coordinator with a self-executing, legally witnessed document. Rotation triggers automatically when conditions are met.
Live
Integration
In-build
🏦
Bank X — the off-ramp
Account provisioned automatically at LL onboarding. Payouts clear to a real transactional account. The user's contribution history becomes a credit-scoring input. Path to formal banking.
Earmarked
The TermsCon angle: a signed cap table on the stokvel agreement means no human coordinator can manipulate the rotation. When member N's turn is reached and the signed trigger conditions are met, the payout fires — provably, auditably, without discretion. This removes the single biggest failure mode in informal ROSCAs.
03 — Product Flow
How a digital isusu circle works end-to-end
Five members. R400 each per month. R2 000 rotates monthly. Below is the full lifecycle — from a new user joining LL to receiving a verified, digitally-cleared payout.
User joins LocalLoyalty
Phone number + name registers an LL wallet. At this point, a Bank X account stub is provisioned in the background — account number reserved, KYC pending. The user can earn and spend LL credits immediately; the full bank account activates after Verilink completes.
LL onboarding
Bank X stub
Verilink KYC — once-off identity anchor
Selfie liveness check → face encoding stored → SA ID/passport PDF417 barcode scanned → face-to-document match. On success, verilink_verified = 1 on the user record. Biometric re-auth (fingerprint/face) now available for sensitive actions. Bank X account activates.
Verilink
FICA Tier 1 satisfied
Stokvel created, cap table signed via TermsCon
Owner creates the circle: R400/month, 5 members, random rotation. Each member signs the TermsCon agreement digitally — a witnessed, timestamped document specifying contribution schedule, rotation order, and default terms. No human coordinator. The document governs itself.
TermsCon
Legally binding
Monthly contributions — LL credits or gift card topup
Members contribute R400 to the shared stokvel balance each month. Contributions can come from: LL merchant earnings (change credit), direct LL wallet topup via EFT, or an employer gift card (see Section 5). Contribution events are timestamped and hashed to the TermsCon agreement.
LL stokvel ledger
Gift card topup
Rotation triggers — biometric-gated payout
When all five members have contributed for the month, the TermsCon agreement checks the rotation schedule and triggers the payout to the designated recipient. The recipient authenticates with biometrics (fingerprint or Verilink face). R2 000 clears: LL credit that can be redeemed at merchants, or swept to Bank X as fiat.
Automated trigger
Biometric auth
Off-ramp — tap-to-pay, EFT, or Bank X withdrawal
The recipient can use the R2 000 as LL credit at partner merchants (immediate, no fees), or initiate a TPPP-enabled tap-to-pay transaction at any NFC-capable terminal, or sweep to their Bank X account as a standard EFT. Each cleared payout is a documented income event — building formal credit history from informal savings behaviour.
TPPP tap-to-pay
Bank X EFT
Credit history
04 — Strategic Angle
LL as the stepping stone to formal banking
The unbanked don't need convincing to participate in financial systems. They already do — in cash, informally, at scale. LL meets them where they are and walks them into a regulated financial identity.
Entry: phone number only
LL registration requires nothing more than a phone number. The user immediately has a digital wallet, can earn change credit at partner merchants, and can join or create a stokvel circle. No bank account. No ID. No proof of address. Just a phone.
Step 1: Verilink KYC unlocks full features
Once the user wants to own a stokvel or redeem a larger balance, Verilink prompts. Completing it satisfies FICA Tier 1, anchors their biometric identity to the LL account, and provisionally activates a Bank X account stub. At this point the user has a provable financial identity — possibly for the first time.
Step 2: Stokvel history becomes credit profile
12 months of consistent monthly contributions, biometric authentication at each payout, and a clean TermsCon agreement trail is a prime-facie credit behavioural profile. Bank X can use this to offer formal credit, debit, and savings products. The user graduates from the informal economy into the regulated one — without ever having had a bank account before.
The PDEF angle: LL positioned as a dual PeSP + PrSP under the Payment Systems Act creates the regulatory foundation for this entire stack. The QR+/ISO 20022 enrichment layer means every transaction carries the metadata SARB needs to satisfy TCIB and cross-border compliance. This is not a consumer fintech play — it is financial infrastructure.
05 — Product Flow
The x → y → s flow: employer gift card as stokvel topup
One of the most elegant aspects of the LL architecture is how it connects employer incentives to community savings — using a mechanism that already exists.
🏢
X — Employer
Purchases an LL gift card (via a Payfast-style flow) as a worker incentive, bonus, or benefit in kind. Fully deductible as a staff expense. No EFT, no payroll complexity.
→
👷
Y — Worker
Receives the LL gift card digitally. Can spend it at LL partner merchants immediately, or — critically — contribute it directly to their stokvel circle as their monthly input.
→
🤝
S — Stokvel
The stokvel receives a verifiable digital contribution. The gift card topup is timestamped and linked to the worker's biometric identity — clean, auditable, fraud-resistant.
This flow closes a gap that no existing product in SA addresses: the last mile between employer benefit and community savings. The employer gets a clean expense line and a motivated workforce. The worker gets a no-friction stokvel contribution. The stokvel gets a verified, digital deposit. And LL gets a distribution channel via corporate HR departments — without needing to market to individuals.
06 — Off-ramp
Tap-to-pay as fiat off-ramp via TPPP
The payout is only as useful as what the recipient can do with it. LL credits need a fiat off-ramp that doesn't require a bank account, doesn't involve cash, and works at existing merchant infrastructure.
The Zapper model, with identity
Zapper proved that QR-code wallet payments work in SA at point of sale. The TPPP integration extends this to NFC tap-to-pay — the user opens LL, taps their phone at any NFC-capable terminal, and the transaction clears against their LL balance. No bank card required.
The difference from Zapper: every tap is tied to a Verilink-verified identity and a biometric authentication event. This is not just a payment — it is a signed financial transaction with a provable chain of custody from the stokvel contribution to the merchant payment.
SARB / PDEF compliance path
The PEM and QR+ framework already defines the enrichment metadata required for SARB oversight on low-value digital payments. LL's TPPP integration would implement the ISO 20022 message structure, making every tap-to-pay transaction TCIB-reportable and cross-border ready from day one.
ISO 20022
QR+
PEM
SARB NPS
PDEF PeSP/PrSP
TCIB
FICA Tier 1/2
POPIA
07 — Progression
Payout instrument ladder
Not every user is ready for every off-ramp on day one. The instrument ladder lets users progress as their financial identity matures.
Now
Stage 1
LL Credit Voucher
Spendable at partner merchants. No KYC required beyond LL registration. Immediate.
Now
Stage 2
TPPP Tap-to-Pay
NFC payment at any compatible terminal. Requires Verilink + TPPP onboarding. Fiat value.
Stage 3
Prepaid Card
Physical or virtual Mastercard/Visa linked to LL balance. Requires FICA Tier 1 (Verilink). Works anywhere.
Stage 4
Bank X EFT
Sweep to transactional bank account. Auto-provisioned at LL join, activated after KYC. Full banking access.
Stage 5
Credit Product
12 months stokvel history → Bank X behavioural credit score → formal credit offer. The graduation event.
08 — Sequencing
Near-term roadmap
What's built, what's in-progress, and what's earmarked. Ordered by dependency.
Live
LL wallet + QR payments
Stokvel ledger + earn/redeem
Change credit at POS
Merchant partner network
Biometric app open (fingerprint)
In build
Verilink KYC page
Verilink gate on stokvel redeem
DB migration
set Verilink Verified + proxy
Next up
Run DB migration 018 on live
Deploy Verilink proxy + KYC endpoints
Add VERILINK_API_KEY to server config
TermsCon stokvel agreement template
Employer gift card purchase flow
Earmarked
TPPP onboarding + NFC tap-to-pay
Bank X account provisioning API
Prepaid card issuance integration
PDEF PeSP/PrSP registration
QR+ ISO 20022 transaction enrichment
Stokvel credit scoring model
Cross-border TCIB compliance layer