InvestAlso reported elsewhere2 publishers2 min readPublished
KB Kookmin Card, SBI and Everspin sign Japan MOU to test AI-agent authentication and explore stablecoin payments for Japanese tourists
KB Kookmin Card and SBI Holdings signed an MOU with two security firms to test AI-agent identity checks and study stablecoin spending by Japanese tourists. The agent tests come with a sequence and a product; the stablecoin side is a study list.
The Investor · Invest desk

Everspin reports approximately 25 billion cumulative cybersecurity threat detections across more than 150 financial institutions in South Korea and overseas, an average of at most about 167 million per institution. The figures are company-reported.
- 25,000,000,000 detections Everspin cumulative threat detections, approximately, claim 8 company-reported
- 150 institutions Financial institutions, more than, claim 8 in South Korea and overseas
- 167,000,000 detections Detections per institution, at most about, claim 13 average of Everspin's reported figures
| Figure | Value | Note | Claim |
|---|---|---|---|
| Everspin cumulative threat detections, approximately | 25,000,000,000 detections | company-reported | 8 |
| Financial institutions, more than | 150 institutions | in South Korea and overseas | 8 |
| Detections per institution, at most about | 167,000,000 detections | average of Everspin's reported figures | 13 |
What happened
- KYA Trust Gateway, conceived by SBI Everspin and developed with Everspin, is the platform meant to verify an agent's identity, the services it can reach and the limits on its actions.
- After the first phase, the project moves to delegated authority, including which transactions agents may perform, and KB Pay integration comes in a later review.
- KB Pay is the planned payment surface: the proposed system would verify a user's consent and check an agent's permission within predetermined spending limits.
- SBI Holdings said it would pair its financial services experience with its partners' AI and security technologies and expects the tests to inform possible commercial services.
Why it matters
- constraint With no launch date and no supported stablecoin announced, the tourist leg cannot yet be priced against a card payment, so any claim about its cost or reach is untested.
- decision KB Kookmin Card has to settle user approvals, spending limits and access controls first; a commercial go-ahead for automated payments sits behind that review.
- exposure Everspin says it has already seen ARTEX, an AI-based attack method, in real financial environments, so the agent-permission layer is being designed against an attack its builder says exists.
The stablecoin half of the MOU is phrased as study, or rather as a list of things to study. The partners intend to look at how payments would move through existing financial systems, including settlement, cancellations and refunds, and their discussions will cover fraud prevention and operational procedures before any service reaches a customer [3]. In our view that makes the "early sign" real but small, because the partners describe tests and studies ahead of any service [3].
We'd expect refunds to be the slow item. The study list puts them beside settlement [3], and a card charge has a reversal path by design while a token payment needs one built. The counter-reading is that routing through "existing financial systems" [3] keeps card-style reversals intact and the study is short. We lean to the first reading: a team that expected reversals to come free would not list them as a study item.
Everspin's 25 billion cumulative detections across more than 150 institutions [8] work out to at most about 167 million per institution [13]. The count is company-reported and measures attacks seen, which supports Everspin's claim to know hostile traffic. It cannot be used to size agent payments.
On allocation, the first test phase is Japan-based agents authenticating to Korean services [7], and that phase needs no stablecoin to run. KB Kookmin Card can show progress on the identity leg while the payment leg waits, and the verb attached to KB Pay is still "examine whether" [6].
We would revise this if the tourist leg gets its own test phase with a named stablecoin. A second outcome is that the identity layer works and the stablecoin item stays on the agenda indefinitely. A third is that the identity work ships on its own and the tourist item drops off.
What to watch
- Any published result from the first-phase test of Japan-based agents authenticating to Korean services.
- A named stablecoin or participating-merchant list from KB Kookmin Card or SBI, the first sign the tourist leg has left the study stage.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+15
- Incentives
- Insufficient
- Confidence55
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
KB Kookmin Card said on October 13 that the memorandum of understanding involves SBI Holdings, South Korean cybersecurity company Everspin and their joint venture, SBI Everspin.
- [2]
The companies plan to explore digital asset payments that could allow Japanese tourists to spend stablecoins at participating South Korean merchants.
- [3]
The companies intend to study how payments could move through existing financial systems, including the handling of settlements, cancellations and refunds, and their discussions will cover fraud prevention and operational procedures required before any service becomes available to customers.
- [4]
No commercial launch date or supported stablecoin has been announced.
- [5]
KYA Trust Gateway, conceived by SBI Everspin and developed with Everspin, is a security platform that verifies an AI agent's identity, the services it can access and the limits placed on its actions.
- [6]
KB Kookmin Card will examine whether its KB Pay platform can support AI agents making payments for customers; the proposed system would verify a user's consent and check whether an agent has permission to complete a transaction within predetermined spending limits.
- [7]
In the initial testing phase, the companies will examine how AI agents operating from Japan can authenticate themselves when accessing South Korean services.
- [8]
Everspin reported approximately 25 billion cumulative cybersecurity threat detections across more than 150 financial institutions in South Korea and overseas; the figures are company-reported.
- [9]
Everspin said it had detected attempts involving an AI-based attack method known as ARTEX in real financial service environments.
- [10]
The companies expect to examine user approval procedures, spending limits and access controls before determining whether automated payments can be introduced commercially.
- [11]
SBI Holdings said it would combine its financial services experience with the participating companies' AI and security technologies, and expects the tests to provide information about possible commercial services, including stablecoin payments.
- [12]
After the initial phase, the project will examine delegated authority, including the types of transactions agents can perform and whether their permissions meet service requirements; KB Kookmin Card's planned KB Pay integration forms part of the subsequent review.
- [13]
Everspin's reported detections average at most about 167 million per financial institution.
Sources
2 independent publishers whose own reporting we read for this story.
- crypto.newsSBI, KB Card plan crypto payments for Japan tourists in South Korea
1 article · October 12, 2026
- cryptobriefing.comKB Kookmin Card and SBI Holdings separately explore AI identity checks and crypto payments
1 article · October 12, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.