The UAE moved first beyond SMS OTP, and GCC beneficiary checks preceded Europe. Neither confirms genuine payment intent. UK data shows what followed: takeover losses down 27%, authorized push payment up 19%.