African banks & insurers mandate phishing-resistant MFA to combat soaring credential-stuffing attacks. Identity professionals must adapt to stronger security.