The SmashPay waitlist is open — be first in line.Join now

Security & reserves.

SmashPay is built on institutional-grade infrastructure. Here is how we protect your USD.

Reserves & custody

USD value is held 1:1 as fully-reserved stablecoin in institutional-grade custody

Balances are not deposits and are not FDIC-insured. Reserves are audited monthly; attestations are published.

  • 1:1 reserve ratio — no fractional reserve
  • Institutional-grade fully-reserved custody
  • Monthly third-party reserve attestations (published)
  • Funds not loaned or rehypothecated
Card 3Card 2Card 1

Compliance certifications

PCI DSS

Card-grade data security

Same payment-data standard used by Visa and Mastercard processors.

ISO 27001

Information security management

Independent audit of our security controls for data storage, transmission, and protection.

GDPR

EU data privacy

EU-grade data rights, applied globally to every SmashPay user.

FinCEN MSB

Registered Money Services Business

SmashPay Inc. is registered with the Financial Crimes Enforcement Network as a Money Services Business.

AML/KYC

RegTech-powered compliance

Continuous monitoring against sanctions and financial-crime risk, powered by Sumsub.

SOC 2

Security controls audit

Independent audit of our security, availability, and confidentiality controls. In progress.

Reserves & custody

SmashPay uses industry-standard encryption in transit (TLS 1.3) and at rest. Phone number verification (OTP) is required for all accounts. No seed phrases or private keys are stored or exposed to users.