Accounts are created by a compliance admin.
5 failed attempts locks the account for 15 minutes.
Mamlaka/ImpalaPay transaction monitoring suite - reads the gateway via a
SELECT-only user; the only gateway write path is blacklisted_numbers (block/unblock, audited).
Production roadmap: sanctions/PEP screening feed, per-merchant thresholds, all-rail block enforcement.