The sudden temporary outage of Syria’s primary state financial application, Sham Cash, has triggered intense scrutiny over its security infrastructure and governmental rollout. The incident forced company management to publicly defend the platform against hacking claims, revealing deep technical and policy debates surrounding the nation’s digital payment ecosystem.
Quick Facts
-
App currently manages approximately 3.7 million active user accounts.
-
Management denies hack, blaming a coordinated domain reporting attack.
-
Tech experts criticize application’s absence from official app stores.
The Security Dispute and Domain Outage
The controversy ignited when Sham Cash experienced a sudden service disruption, fueling immediate public concern regarding the safety of funds and user data. The panic intensified after Anas Ouyoun Al-Soud, a Syrian cybersecurity professional based in Germany, released a video claiming responsibility for shutting down the app. Al-Soud asserted he breached the platform to demonstrate its vulnerability, arguing it was inherently unsafe for managing state salaries and pensions.
Sham Cash management quickly mobilized to reject the hacking claims. In an official statement, the administration confirmed that all servers and databases remained fully operational and uncompromised. According to the company, the temporary downtime was not a security breach, but the result of a systematic and repeated reporting campaign against the Sham Cash domain. This mass reporting triggered the hosting provider’s automated policies, leading to a temporary domain suspension.
Ahmed Al-Kilani, Administrative Director at Sham Cash, reinforced this stance, stating the platform has never been breached since its launch. He emphasized that user accounts are entirely secure and operate under the direct supervision of a specialized technical team. Al-Kilani further clarified that all funds are held with and monitored by the Central Bank of Syria.
From Regional Tool to Syrian State Fintech
The rapid rise of Sham Cash highlights a major transition in Syrian financial technology. The application was initially adopted for financial transactions by the “Salvation Government” operating in Idlib. Following the fall of the Syrian regime at the end of 2024, the platform was subsequently adopted by the government in Damascus.
The Syrian Ministry of Finance officially designated Sham Cash as a primary channel for distributing public sector salaries. The move was framed as a government initiative to accelerate electronic payments and enhance transparency in state financial disbursements.
Addressing the platform’s massive growth, Al-Kilani suggested the recent targeted domain attacks were likely a byproduct of the app’s rapid expansion to 3.7 million accounts. He noted that the company heavily monitors the platform to prevent fraud, strictly limiting current offerings while exploring potential future products like loan services or Visa cards based on market demand.
Tech Experts Question Security Standards
Despite corporate assurances, independent tech professionals are raising serious questions regarding the government’s reliance on the platform. Syrian activist Radwan Ziadeh described the situation as a critical warning regarding governmental competence in managing financial institutions. Ziadeh criticized the mandatory state rollout, pointing out that the iOS operating system rejected the application—a major red flag for platform security. He urged the government to halt official transactions on the app and return to official banking channels, especially following the recent lifting of economic sanctions.
Labib Al-Nahhas, a Syrian politician and telecommunications engineer with international sector experience, echoed these concerns. Al-Nahhas noted that technical and legal issues surrounding Sham Cash reflect an outdated management philosophy inherited from the Salvation Government era.
Consulting with independent cybersecurity experts, Al-Nahhas pointed out that recent governmental social media breaches often stem from excessive centralization or poor basic security hygiene. He highlighted that Sham Cash remains a highly opaque entity with no presence on major app stores and zero independent technical or legal audits. With international sanctions lifted, Al-Nahhas questioned why the government did not prioritize a rigorous evaluation of the platform storing citizen data and managing national payrolls.
About Sham Cash
Sham Cash is a Syrian electronic payment and financial transaction application currently serving 3.7 million accounts. Originally utilized by the Salvation Government in Idlib, it is now the officially sanctioned e-payment platform adopted by the Syrian Ministry of Finance and the Central Bank of Syria for distributing public sector salaries.
Source: Al Araby
