Sunday , October 25 2026
WellxPay

“Wellxpay” fraud trap around Bangladesh

By using the name of Bangladesh Bank license, mobile financial services (MFS) top organization Bkash and the name of one of the entrepreneurs of the information technology sector, Sonia Bashir Kabir, Wellxpay has started spreading false propaganda.

Source: Times of India

The company told various foreign media that Wellxpay has received a Payment Service Operator (PSO) license from the Central Bank of Bangladesh and signed an agreement with Bkash. Apart from this, the founder and managing director of Wellxpay is the entrepreneur of the information technology sector, Sonia Bashir Kabir.

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Update now! PHP2Shell: Critical PHP vulnerabilities patched

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
Update now! PHP2Shell: Critical PHP vulnerabilities patched

Trump says data centres should pay dividends to local community

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...
Read More
Trump says data centres should pay dividends to local community

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...
Read More
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...
Read More
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

According to an advertisement in India’s Hindustan Times on November 16 last year, WellxPay has received a Payment Service Operator (PSO) license from the Central Bank of Bangladesh. However, it has been found that the company has not taken any license from Bangladesh Bank even didn’t submit any application. The central bank has so far granted PSO licenses to 10 institutions. Transactions can be made with money from any bank, MFS in PSO institutions.

Bangladesh Bank Executive Director and Spokesperson Mejbaul Haque told that no PSO license has been given to any company named WellxPay. The list of those who have been given license is available on the website of Bangladesh Bank.

Meanwhile, an advertisement in another foreign media said that WellxPay has signed an agreement with Bkash, a mobile-based financial service provider in Bangladesh.

Shekh Md. Monirul Islam, Chief external and corporate affairs of Bkash said that they do not have any agreement with any organization named WellxPay. The organization is sending the wrong message.

Sonia Bashir Kabir said, i have no connection with Wellxpay. I filled case and informed the issues to BTRC.

According to the WellxPay website, their head office is in Indonesia. It serves India, Pakistan and Bangladesh. Apart from various currencies, crypto currencies are also traded through this service.

At the time of publishing the report the Wellxpay website seem to be unavailable.

Source: wellxpay website screenshot

Check Also

VPN

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around …