When HBA First crossed our desk, we ran it through the same heads-up assessment we apply to every platform. The picture that emerged is one of elevated risk: HBA First operates without verifiable authorisation from…