# The payment keys were a listing

2026-10-20

n0n listed Finzly and said it would publish payment-infrastructure secrets and cloud keys. Finzly says it learned of an online claim and is investigating. Eleven bank names on a vendor homepage are not a dump.

Canonical: https://www.fabiocti.com/notes/the-payment-keys-were-a-listing/
Author: Fabio Correia

The vendor sits on ACH, Fedwire, RTP, FedNow, and Swift. The page does not come with a key.

American Banker says n0n added Finzly to a leak site over the weekend and is threatening to publish access secrets for payment infrastructure and cloud keys if no settlement lands Friday night. Finzly’s site lists eleven banks and credit unions, among them Synovus, First Citizens, and First Horizon. Finzly said it recently learned that a cyber-extortion group had named it in an online claim and that it is investigating.

I do not have a field list. I do not have a confirmed take. A homepage client roster is the company’s marketing. It is not a row count. It is not a finding that those rails were reached.

## What Friday night is for

It is for a reply they can screenshot. Silence is not a finding that the listing is fake. “We are investigating a claim” is not a finding that a key left. If Finzly is a processor you sit behind, the work is whether anything in your own logs moved before the clock becomes a second post.

A bank on that homepage does not need to wire a stranger. It also should not brief itself as safe because the logo has not numbered a file. Watch for a mail that already knows a FedNow enrollment. That mail would be a fact. The leak-site sentence is not.

I have watched this pattern trade a deadline for a headline. Payment keys on a listing are a publication schedule. They are not eleven confirmed archives.