[dtx1]

You should best be looking for a developer that happened to have written that API in the bank in the first place. If you can't get that, you need someone with either strong networking experience so they can RE the API from a network perspective or someone with RE experience to attack them from either their mobile apps or browser apps.

Either way, you are looking for a specialist in reverse engineering with knowledge in the networking field and no issues with doing the reverse engineering depending on what the law is in SA.

Where to look for that kind of developer? In the Hacker/Security Community. Your problem will be that you need that someone to stay on your payroll to quickly adapt to the banks changing their API because they won't like 3rd parties using them, so contractors are probably out. Now, Security Experts are not cheap, they are in high demand and if they are competent they won't be interested in doing busy normal dev work while they wait for an API Change.

Also, you don't need ONE you need A LOT of them, because when (not if) the banks change their APIs to fuck with your product, you don't want to rely on a single engineer as the only one able to do it, since it's likely core to your product, you'll need redundancy.

I don't know how the Sec/Hacking community in SA is, but if you need to rely on specialists outside of SA to do it, be prepared to pay... a painful amount.

[simonpurdon10]

Thanks, that is super helpful.

There are other products that have done exactly what I described above. They have instant EFT solutions etc. So I'm almost certain there are developers who can do it locally. But that helps.