Red Team testing for BNPL providers