Security & reserves.
SmashPay is built on institutional-grade infrastructure. Here is how we protect your USD.
Self-custody
Your USDC is held in your own self-custodial wallet.
Only you can authorise transactions from it. Balances are not deposits and are not FDIC-insured.
- Your wallet, your keys — SmashPay cannot move your assets
- SmashPay does not hold customer assets, so it cannot lend or rehypothecate them
Compliance certifications
Card-grade data security
Card data is handled by our PCI DSS-certified card partner. SmashPay does not store full card numbers.
EU data privacy
Data rights modelled on GDPR
Registered Money Services Business
SmashPay Inc. is registered with the Financial Crimes Enforcement Network as a Money Services Business.
RegTech-powered compliance
Continuous monitoring against sanctions and financial-crime risk, powered by Sumsub.
Account security
SmashPay uses industry-standard encryption in transit (TLS 1.3) and at rest. Phone number verification (OTP) is required for all accounts. No seed phrases or private keys are stored or exposed to users.