FREESanctions, PEP & AML/CFT screening database. Search any name.
Autogon AI
download →
← All industries
Operators · PSBs · Data CentersEdge · Application Shield · Omniguard4 min read

Security for Telecom Operators & Data Centers

Protect the network, the money and your data center, from one agent, with a security line you resell.

How Nemesis protects Security for Telecom Operators & Data Centers in one pass
Live flow: attacks stopped at each layer, your real users served.

No other business defends this much at once. A telecom is three targets in one company, and Nemesis covers all three from a single agent.

You are three targets in one company

  • The network. Self-care apps and the recharge, data, USSD, KYC and mobile-money APIs that sit directly on your billing and value stores. Telecom is now the most-attacked industry for DDoS, and APIs are the fastest-growing attack surface.
  • The money. Account takeover, insider abuse of billing and recharge APIs, mobile-money and wallet fraud, and the bank-grade AML load on your PSB arm. A single insider-credential fraud ring recently generated billions in fraudulent airtime.
  • The data center. Enterprise, government and fintech workloads sitting in your colocation and cloud. Today you carry their risk. Tomorrow you can sell them protection.

What Nemesis does

One agent, deployed inside your own environment:

  • Edge stops the DDoS and floods aimed at your portals.
  • Application Shield protects every subscriber app and API with positive security, no DNS change, blocking exploits and API abuse a firewall never sees.
  • Omniguard flags transaction fraud (account takeover, wallet fraud, SIM-swap-linked transfers) in real time and files the STR for your mobile-money arm. For network-layer fraud like IRSF and SIM-box, it complements your existing fraud-management system rather than replacing it.

Turn the data center into a revenue line

Your colocation and cloud already host other people's workloads, and you carry their security risk for free. One agent per server protects every tenant automatically, and you sell that protection back to them under your own brand, a new recurring line on infrastructure you already own.

Getting started

Start with a 30-day pilot on one service or one tenant, observe-only, in your environment. It runs inline at scale and fails open, so it never becomes a single point of failure.

Integrate Nemesis

Plug Nemesis into your stack

One agent runs all three. Start with whichever you need. Most begin with Omniguard for the money, add Application Security for the apps behind it, and Edge to keep it all standing.

See it working - live demo

A real, working app for this sector, deployed twice: one build protected by Nemesis end to end, one left unprotected. Run the same attacks on both - fraud, injection, account takeover, BOLA and mule cash-outs - and watch the protected build block what the other lets through. It opens a guided walkthrough so you can run the end-to-end tests yourself.

Open the protected demo →Open the unprotected demo →

Airtime and wallet balances move like cash. Score every transfer and top-up, catch SIM-swap takeover, agent float fraud and mule cash-out, and file the STR, on your own wallet ledger or through your bank partner.

Free to start

Screen wallet and airtime beneficiaries against sanctions and PEP lists, free. 100 screens a day, no card, no function to build. Search it now or wire the API, then grow into full transaction scoring when you are ready.

POST https://shield.nemesislabs.xyz/api/v1/omniguard/verify   { "check":"sanctions_pep", "subject":"…" }   # free · no function needed
1 Who are you?

You build the product and own the payment code end to end.

Your access to transactions

Full code control - insert Omniguard inline on the payment path.

Recommended: Inline API / SDK
What you are fighting
Card testing & BIN attacksMule & payout fraudChargeback / first-party fraudAccount takeoverStructuring & scam payoutsSanctions & PEP screening
CBN / NFIU obligations Omniguard covers for you
✓ Real-time monitoring✓ Sanctions & PEP screening✓ STR to the NFIU (goAML)✓ KYC/CDD (BVN/NIN)✓ PCI-DSS for card data✓ PSP / switch licensing conditions
2 How do you reach your transactions?

Inline API / SDK

You call Omniguard from your payment, transfer or checkout path, before you post the entry. The verdict comes back in one request; you block, hold or allow.

LatencyReal time · sub-second
EnforcementDecline before the transaction commits
Best forFintechs, PSPs, wallets, e-commerce and digital-first banks - anyone who controls their own transaction code.
1

Create a function, get your key

A function is region × app × event (e.g. NG × payments × transfer). Create it in the Omniguard console, or via the API with your developer key. You get a function id and an ingest token (your API key). Sector rules are seeded automatically.

curl https://shield.nemesislabs.xyz/api/v1/omniguard/functions \
  -H "authorization: Bearer $DEV_KEY" \
  -H "content-type: application/json" \
  -d '{"name":"NG payments","industry":"banking","event":"transfer","region":"NG"}'
# → { "functionId":"fn_…", "ingestToken":"og_…", "rulesSeeded":16 }
2

Score every transaction before it commits

Send the transaction to /score on the payment path. Include what you have; Omniguard enriches the rest (BIN, first-time-payee, velocity, graph, breach). Any custom field you add is scored too.

curl https://shield.nemesislabs.xyz/api/v1/omniguard/score \
  -H "authorization: Bearer $OMNIGUARD_KEY" -H "content-type: application/json" \
  -d '{"function_id":"fn_…","customer_ref":"cust_913","amount":1500000,
       "currency":"NGN","channel":"web","country":"NG",
       "counterparty_account":"0123456789","beneficiary_name":"A. Bello"}'
# → { "verdict":"block", "overall_score":97, "rule_score":97, "ai_score":null,
#     "reasons":[{"signal":"Beneficiary is a flagged mule","contribution":55}],
#     "transaction_id":"txn_…", "ctr":{"reportable":false} }
3

Act on the verdict

block → decline. review → hold or step-up (OTP, call-back). allow → proceed. Test everything with dry_run:true first (free, persists nothing).

if (r.verdict === "block")  decline(txn);
else if (r.verdict === "review") holdForReview(txn);
else                            proceed(txn);
4

Screen the parties

One call, no function needed. Screen a name against sanctions/PEP, or verify identity (BVN/NIN/passport). Screening is free; KYC is metered.

curl https://shield.nemesislabs.xyz/api/v1/omniguard/verify -H "authorization: Bearer $OMNIGUARD_KEY" \
  -d '{"check":"sanctions_pep","subject":"Ibrahim Musa"}'
# → { "risk":"hit", "data":{"lists":["OFAC (US)"]}, "usage":{…} }
5

Enforce, learn, report

Flip the function to enforce so block is binding. Send true outcomes back to sharpen the model, and file goAML STR/CTR from the case.

curl https://shield.nemesislabs.xyz/api/v1/omniguard/outcome -d '{"transaction_id":"txn_…","outcome":"fraud"}'
# STR for the NFIU:  GET https://shield.nemesislabs.xyz/api/v1/omniguard/reports/{id}/goaml  (goAML XML)

Mapped to CBN & NFIU compliance

Transaction monitoring
CBN AML/CFT/CPF Regulations - ongoing, risk-based monitoring of every transaction.
Real-time /score with the fraud + AML rule engine (structuring, mule, velocity, cross-signal, graph).
Sanctions screening
Screen parties against the Nigeria Sanctions List (TPCA 2022) plus UN, OFAC, EU and UK.
/verify sanctions_pep + the Nemesis watchlist (OFAC / UN / EU / UK / PEP / EFCC).
PEP identification & EDD
Identify politically exposed persons and apply enhanced due diligence.
PEP screening flags the party and routes it to review / EDD instead of a silent pass.
Suspicious Transaction Reports
File STR/SAR to the NFIU on the goAML platform, with a valid predicate, category and indicators.
goAML-format STR export, auto-tagged and validated to survive NFIU auto-reject.
Currency Transaction Reports
Report cash at or above ₦5m (individual) / ₦10m (corporate).
Aggregated-cash CTR rule flags reportable cash; export the CTR XML.
KYC / CDD
Verify customer identity at onboarding (BVN, NIN) and keep it current.
/verify bvn / nin / passport against the identity network.
Fraud reporting & records
Report fraud (NIBSS) and keep records for five years.
Every scored transaction is logged with its reasons, source provenance and verdict - a ready audit trail.
Risk-based approach
Apply controls proportional to risk.
Calibrated 0-100 risk score with tiered review / block thresholds per function.

The whole flow in four calls

# 1 · create a function → get your key (or do it in the console)
POST https://shield.nemesislabs.xyz/api/v1/omniguard/functions   { "name":"…", "industry":"…", "event":"…" }
# 2 · score a transaction before it commits
POST https://shield.nemesislabs.xyz/api/v1/omniguard/score       { "function_id":"fn_…", "amount":…, "counterparty_account":"…" }
                         → { "verdict":"block", "overall_score":97, "reasons":[…], "transaction_id":"…" }
# 3 · screen a party (no function needed, screening is free)
POST https://shield.nemesislabs.xyz/api/v1/omniguard/verify      { "check":"sanctions_pep", "subject":"…" }
# 4 · report the outcome + file the STR
POST https://shield.nemesislabs.xyz/api/v1/omniguard/outcome     { "transaction_id":"…", "outcome":"fraud" }
GET  https://shield.nemesislabs.xyz/api/v1/omniguard/reports/{id}/goaml   → goAML STR XML for the NFIU
Create an Omniguard account →About Omniguard
Vibe-code it - Nemesis MCP

Wire all of this from your AI coding agent. Add the Nemesis MCP server to Claude, Cursor, Windsurf or VS Code, then just ask - the agent calls the real tools (create a function, score a transaction, screen a name, protect the app) and ships it for you. Sanctions and PEP screening is free.

1 · Add the server
{
  "mcpServers": {
    "nemesis": {
      "command": "npx",
      "args": ["-y", "@nemesis-shield-autogon/mcp"],
      "env": { "NEMESIS_API_KEY": "nsk_your_key" }
    }
  }
}
Or one command: npx -y @nemesis-shield-autogon/mcp
2 · Ask your agent
Add Nemesis to my mobile-money wallet: create an Omniguard function for wallet transfers and airtime top-ups, score for SIM-swap and mule fraud, screen recipients against sanctions, and protect the self-care and USSD APIs.
Would rather we set it up with you?

Not every team wants to wire this in themselves. Tell us your setup and our engineers will map the integration to your stack and walk you through it end to end, from first call to enforce.

Contact us for hands-on help →

Recommended reading

Positive Security

You Can't Blocklist What Doesn't Exist Yet

AI generates novel attacks faster than any signature can be written. The only defense that scales is learning what your systems are supposed to do, and refusing the rest.

Read · 14 min →

Other industries

Shared · cPanel/WHM · VPS · Reseller · Cloud

Security for Hosting & Cloud Providers

One agent per server protects every site, with no DNS change, and a security line you sell under your own brand.

Read →
B2B SaaS · Platforms · APIs

Security for SaaS & B2B Software

Positive security for the app and APIs that are your product, plus the pen-test proof enterprise buyers demand.

Read →
Banks · Fintech · PSPs · Microfinance

Security for Banks, Fintechs & PSPs

Cut fraud and cover the AML mandate, from the app layer to the transaction, on one agent.

Read →