The defendants appeared before the Nyarugenge Intermediate Court, where the prosecution alleged that they used bank card details to carry out unauthorised transactions through the bank’s electronic payment systems.

They include Manirakiza Obed, a former BPR Bank IT system employee; Uwitonze Jean Paul, founder of Nyungwe Sideview Hotel; Bikorimana Innocent, who owns a mining company in Kinihira Sector, Rulindo District; Bayingana Denis, an international commission agent; Urimubenshi Dismas, a former employee of Uwitonze; Nzatunga Ruvuguta Emmanuel; and Mutangana Parfait Sixbert.

The case began after customers reported unauthorised withdrawals from their accounts using their bank card details. Following an internal investigation, BPR Bank referred the matter to the Rwanda Investigation Bureau (RIB).

The defendants face charges including fraudulently obtaining another person's property, fraudulent use of an electronic data processing system, unlawfully providing or obtaining access to computer programmes or data, identity fraud and money laundering.

Prosecution alleges payment security was manipulated

The prosecution alleges that Manirakiza exploited his position at BPR Bank to weaken security controls governing electronic payments.

It told the court that he moved customers from the 3D payment verification system, which provides stronger authentication, to the less secure 2D system, allegedly allowing transactions to be processed without the same level of verification.

The prosecution further alleges that Manirakiza gave Uwitonze, Mutangana and others access to CyberSource, a platform used to process electronic payments. Their communications allegedly showed that they coordinated their activities.

Manirakiza denied wrongdoing, arguing that his actions were part of his responsibility to assist bank customers and that determining which payment system should be used for a particular card was not his duty.

The prosecution said the problem came to light in October 2025, prompting the bank to block cards used in transactions dating back to August 7 that year and shut down the system at the centre of the allegations.

It also alleged that Manirakiza shared the proceeds with other defendants, including funds channelled through Nyungwe Sideview Hotel. Uwitonze is accused of defrauding the bank of $127,000.

Defendants dispute allegations

Bikorimana denied all charges, arguing that his dealings with BPR Bank were based on legitimate commercial agreements. He said his company was established in 2018, well before the alleged offences, and that he did not know the other defendants.

“I have absolutely nothing else connecting me to these people,” he told the court.

His lawyer argued that the use of the 2D and 3D systems was not criminal because the bank had provided customers with access to them through legitimate arrangements. He said Bikorimana initially used the 2D system before the bank informed him that it was not secure and switched him to 3D.

Bikorimana also cited a chargeback dispute involving payments that were reversed or became the subject of discussions over reimbursement. He said he approached the bank after discovering that he had received money that did not belong to him.

“For that reason, I believe discussions should take place, just as we had already begun doing,” he said.

Uwitonze similarly maintained that his dealings with the bank were legitimate. He argued that the prosecution had not established whether he continued using CyberSource after the system was shut down in October 2025, or demonstrated that he engaged in money laundering or received proceeds from criminal activity.

Urimubenshi said he became involved after Uwitonze asked him to open a company account in his own name, explaining that he could not do so because he was listed in the Credit Reference Bureau (CRB) system over outstanding debts.

“He told me he was in the CRB, and I accepted that explanation,” Urimubenshi said.

He said he provided his national identity card and telephone number to open the account because he worked for Uwitonze at a metalworking factory and believed he was following his employer's instructions. He maintained that he did not personally benefit from the transactions, but the prosecution argued that he would not have participated without expecting some benefit.

Bayingana says he expected a commission

Bayingana told the court that he worked as a commission agent across several countries and that Uwitonze had approached him to find customers for Nyungwe Sideview Hotel.

He said he helped Urimubenshi fill out bank deposit slips because the latter could not write, and expected to earn a commission under an agreement with Uwitonze.

Bayingana said he was entitled to 15% of payments made by customers he referred to the hotel.

The prosecution, however, alleged that he accompanied Urimubenshi to withdraw money deposited into a company account registered in Urimubenshi's name before the funds were redirected. It also accused Bayingana of participating in meetings to plan the alleged misuse of CyberSource and asked the court to scrutinise payments between him and the hotel.

Mutangana also denied using CyberSource unlawfully, saying the bank had provided him with access to the platform and that he had not altered it.

His lawyer argued that the agreement between Mutangana and the bank outlined how chargeback disputes should be resolved, asking the court to treat the matter as a commercial dispute rather than a criminal case.

A lawyer representing BPR Bank Rwanda countered that attempts to negotiate with the bank did not rule out criminal prosecution where evidence suggested that offences had been committed.

Prosecution seeks 10-year sentences

The prosecution maintained that Manirakiza played a central role because of his technical knowledge and access to the bank's systems.

It told the court that he had conducted several tests using his own bank card and asked others in their communications whether the transactions had succeeded.

“Without Manirakiza's help, this would not have happened,” the prosecution argued, adding that the defendants' communications showed coordination in planning and executing the alleged offences.

The prosecution sought prison sentences ranging from two to 10 years, depending on the charges against each defendant. However, citing the concurrence of offences and identifying money laundering as carrying the heaviest penalty, it asked the court to sentence each defendant to 10 years in prison.

It also sought fines ranging from Rwf2 million to more than $380,000.

BPR Bank Rwanda asked the court to order the defendants to pay $287,760 in compensation, equivalent to about Rwf424 million.

The court scheduled the delivery of its judgment for December 11, 2026, at 2 p.m.