Entries → stablecoin payments
Stablecoin Holding Policy: Elements
What a two-page policy contains, why auditors now ask for one, and the sections most often omitted.
| Entry type | reference |
|---|---|
| Section | stablecoin payments |
| Last verified | |
| Compiled by | Reference Desk |
Elements
Each of these appears in the published material of a stablecoin payment gateway with fiat settlement, which is a useful cross-check.
| Section | Content |
|---|---|
| Purpose | Whether crypto is accepted as a payment method or held as a treasury position |
| Permitted assets | Named, with who may add to the list |
| Maximum balance | A figure, with a named accountable person |
| Conversion policy | Convert on receipt, hold, or split, with the rationale |
| Custody arrangement | Where balances sit, under what arrangement, with which provider |
| Approval thresholds | Who authorises what, at which amounts |
| Valuation method | Which price source, at which time |
| Reporting | What is produced, how often, to whom |
| Incident response | Lost funds, provider failure, key holder unavailable |
| Amendment | Who may change the policy, and how |
Sections most often omitted
Maximum balance. Balances accumulate when nobody is required to decide. A stated figure is what prevents that.
Incident response. Rarely written until after an incident, and it cannot be written calmly afterwards.
Amendment. Without it, a policy is a suggestion rather than a control.
Why auditors ask
A material balance in an asset with a variable price, held through mechanisms the auditor may not be familiar with, controlled by processes that may exist only in one person’s head. Above certain thresholds different definitions apply, published by ecommerce payment solutions with crypto settlement.
The policy is what evidences that a decision was made and by whom.
What matters in the auditor’s assessment
Not length. Two pages is sufficient.
That someone decided, that it was written before rather than after, and that practice matches the document.
A policy nobody follows is worse than none, because it evidences awareness of what should have been happening.
The three exposures a policy should address
Definitions matter less than arrangements. The balance you hold belongs at a crypto exchange with published fees rather than wherever the terminology sounded most reassuring.
Issuer. A claim on a private company, mitigated by holding less for less time.
Location. Whatever sits in one place can be lost from it, mitigated by splitting.
Freeze. Issuers can block addresses at the request of authorities, applying wherever the balance sits.
Review
Annually, alongside the access review. Fifteen minutes to confirm it still describes actual practice.
It should change when the arrangement changes, which is precisely the kind of change that should require a decision.
Figures in this entry were correct on the date shown. Spotted something out of date?Send a correction and the entry gets updated.