---
title: "Are stablecoin payments safe? The risks businesses should check, and how to reduce them"
seoTitle: "Are stablecoin payments safe? Risks for businesses"
description: "Stablecoin payments are as safe as the issuer, the network, the provider, and your own controls. The seven risks to check, with real incidents and fixes."
date: "2026-09-26"
updated: "2026-09-26"
category: "stablecoins"
author: "BlindPay Team"
faq:
  - q: "Are stablecoin payments safe for businesses?"
    a: "They can be, when four things hold: the stablecoin is fully reserved and redeemable, the network is reliable, the provider is licensed and clear about custody, and your own team checks addresses and networks before sending. Most losses come from operational mistakes and fraud, not from the technology failing."
  - q: "Can USDC lose its peg?"
    a: "It has, briefly. In March 2023, USDC traded below 90 cents after Circle disclosed that $3.3 billion of its reserves sat at Silicon Valley Bank, which had just failed. It returned to about $1 within days, once US authorities guaranteed the bank's deposits. The episode showed that reserve quality and where reserves are held matter as much as the 1:1 promise."
  - q: "Are stablecoins FDIC insured?"
    a: "No. A stablecoin is not a bank deposit, and the GENIUS Act bars issuers from marketing payment stablecoins as federally insured. Protection comes from the issuer's reserves and, under the GENIUS Act, from holders' priority claim on those reserves if the issuer fails."
  - q: "Can a stablecoin transaction be frozen?"
    a: "Yes. The major dollar stablecoins, including USDC and USDT, let their issuers block specific addresses, and issuers use this for sanctions and law-enforcement requests. For a business, the practical risk is receiving funds from an address that is later frozen or flagged, which is why providers screen wallet addresses as well as people."
  - q: "What happens if I send stablecoins to the wrong address?"
    a: "The transfer is final on-chain, so there is no bank to call for a recall. If the address belongs to a cooperative party or a known exchange, you can ask them to send it back. If it belongs to no one, or to a scammer, the funds are usually gone. Test with a small amount before a large first transfer."
---

Stablecoin payments are safe when four layers hold: a fully reserved stablecoin, a reliable network, a licensed provider with clear custody, and your own controls on addresses and networks. The technology rarely fails on its own. Losses usually come from a weak issuer, a provider that holds your money without saying so, or a human who pasted the wrong address.

So the useful question isn't "are stablecoins safe?" It's "which of the seven risks below have I covered?"

## What are the risks of stablecoin payments?

| Risk | What can go wrong | How to reduce it |
| --- | --- | --- |
| Issuer and reserves | The stablecoin trades below $1 or redemptions slow down | Use fully reserved, attested stablecoins from regulated issuers |
| Network | The blockchain halts or fees spike | Support more than one network per stablecoin |
| Irreversible errors | Funds go to the wrong address or network | Allowlist addresses, test with small amounts |
| Custody and provider | The provider holding your funds fails or freezes | Know who holds the funds at every step |
| Conversion to cash | You can't off-ramp when you need to | Check corridors, limits, and liquidity before you depend on them |
| Fraud | Address poisoning, malicious approvals, reversed bank deposits | Verify addresses out of band, approve exact amounts, hold risky deposits |
| Compliance | Funds tied to a sanctioned party get frozen | Screen counterparties and wallet addresses, not just customers |

Each one is covered below.

## Can a stablecoin lose its peg?

Yes, and a major one already has. On March 10, 2023, Circle disclosed that $3.3 billion of the reserves backing USDC were held at Silicon Valley Bank, which had just failed. USDC [traded below 90 cents](https://www.axios.com/2023/03/11/circle-usdc-peg-svb) the next day. It returned to about $1 within days, once US authorities said all of the bank's deposits would be protected.

The lesson isn't that USDC is unsafe. It's that a stablecoin is only as good as its reserves and where they sit. Before you hold a balance, check:

- **What backs it.** Cash and short-term government debt, or something riskier.
- **How often reserves are reported.** Monthly reports with an independent accountant's attestation are the norm for the large regulated issuers.
- **Who can redeem, and how fast.** Redemption at par is what holds the peg.

Regulation is tightening this. In the EU, [MiCA](/resources/more/mica-stablecoin-rules-explained) already requires e-money tokens to be fully reserved and redeemable at par. In the US, the GENIUS Act requires 1:1 reserves in cash and short-term Treasuries, with monthly disclosure, once its rules take effect. [USDC vs USDT for payments](/resources/more/usdc-vs-usdt-for-payments) compares how the two largest issuers report.

Stablecoins are not bank deposits and are not FDIC insured. Treat a stablecoin balance like a claim on the issuer's reserves, because that's what it is.

## What happens if a blockchain network goes down?

Payments on that network stop until it recovers. Solana, for example, [halted block production for about five hours](https://cointelegraph.com/news/solana-network-outage-block-production-halted) on February 6, 2024. Funds weren't lost, but nothing moved.

Outages like that are rare on the major networks, and fee spikes are more common. Both are manageable if you don't depend on a single chain. A provider that settles the same stablecoin on several networks lets you route around a bad day. [What happens on-chain in a stablecoin payment](/resources/more/what-happens-on-chain-in-a-stablecoin-payment) explains what the network does during a transfer.

## Can stablecoin payments be reversed or recovered?

No, not by the network. A confirmed transfer is final. There's no chargeback and no recall message. That finality is useful, since it proves exactly who held the funds and when, but it means mistakes stick.

The common ones:

- **Wrong address.** A typo, or an address copied from the wrong place.
- **Wrong network.** The right address on a chain the receiver doesn't monitor.
- **Unsupported token.** A stablecoin the receiving provider can't accept on that network.

Controls that work: an allowlist of saved recipient addresses, a small test transfer before any large first payment, and a provider that rejects unsupported token and network pairs before anything moves. [Are stablecoin payments reversible](/resources/more/are-stablecoin-payments-reversible) goes deeper on finality, and [common stablecoin payout mistakes](/resources/more/stablecoin-payout-mistakes) lists the errors to block in your code.

## What happens if the provider fails?

That depends on custody. If a provider holds your stablecoins or fiat between steps, you're exposed to its solvency, its banks, and its operations. If the flow is non-custodial, the funds stay in a wallet you control until the payment executes.

Neither model is automatically right. Custodial products can be convenient. What matters is knowing which one you're using, product by product. A provider can be non-custodial for payouts and custodial for a hosted wallet. [Custodial vs non-custodial off-ramps](/resources/more/custodial-vs-non-custodial-off-ramps) walks through what happens in each model when a provider becomes insolvent or loses its bank.

## Can you always convert stablecoins back to cash?

Not everywhere, and not in any amount. Converting stablecoins to local currency needs a licensed off-ramp in the destination country, a local payout rail, and enough liquidity for your volume. Per-transaction and monthly limits apply by verification tier.

The risk shows up when a business holds stablecoins assuming it can exit anytime, then hits a corridor that isn't supported or a limit it didn't plan for. Check the corridors you need, the limits that apply to you, and how liquidity holds up at your largest payment size. [Stablecoin off-ramp limits](/resources/more/stablecoin-off-ramp-limits) and [liquidity risk in global payouts](/resources/more/liquidity-risk-global-payouts) cover both.

## What fraud should businesses watch for?

Three patterns account for most of it.

1. **Address poisoning.** An attacker sends a tiny transfer from an address that looks like one you use, same first and last characters. The next time someone copies an address from transaction history, they copy the attacker's. Verify full addresses against a saved allowlist, never from history.
2. **Malicious approvals.** On EVM chains, a token approval lets a contract spend tokens from your wallet. A phishing site that tricks you into an unlimited approval can drain the wallet later. Approve only the exact amount a payment needs, and revoke approvals you no longer use.
3. **Reversed bank deposits.** A fraudster funds an account by ACH, receives stablecoins, then reverses the ACH while its return window is still open. The stablecoins are gone and the platform eats the loss. This is why providers hold new or unusual bank deposits and monitor the fiat leg continuously.

Identity checks at signup don't catch any of these on their own. Transaction monitoring does. [Real-time transaction monitoring](/resources/more/real-time-transaction-monitoring-stablecoin-payments) covers the rules providers run.

## Can a stablecoin be frozen?

Yes. USDC and USDT both let their issuers block specific addresses, and issuers use it for sanctions and law-enforcement requests. The US Treasury's Office of Foreign Assets Control also lists specific blockchain addresses on its [sanctions list](https://ofac.treasury.gov/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists).

For a legitimate business, the exposure is indirect: taking payment from an address that's later frozen or tied to a sanctioned party. The fix is screening. Providers check wallet addresses against sanctions and risk data, not only the people behind them, and the [travel rule](/resources/more/travel-rule-stablecoin-off-ramps) makes sure identity data moves with transfers between providers.

## Are stablecoin payments safer than wires or cards?

Different, not strictly safer. Each rail puts the risk in a different place.

| | Stablecoin payment | International wire | Card payment |
| --- | --- | --- | --- |
| Reversibility | Final once confirmed | Recall possible, not guaranteed | Chargebacks for months |
| Main fraud risk | Wrong address, phishing, reversed funding | Business email compromise, fake invoices | Stolen cards, friendly fraud |
| Visibility | Every transfer is on a public ledger | Status via tracking, if the banks report it | Processor dashboards |
| Deposit insurance | None | Bank deposits at either end are insured to limits | Card network rules protect the payer |
| Settlement speed | Seconds to minutes | 1 to 5 business days | Days for the merchant |

For a business paying suppliers or contractors, finality is often a feature: the payment can't be clawed back after the goods ship. For a business collecting from strangers, card chargebacks protect the payer, and stablecoins don't.

## How can a business make stablecoin payments safer?

1. Use fully reserved stablecoins from regulated issuers, and check their reserve reports.
2. Know who holds your funds at every step, product by product.
3. Keep an allowlist of recipient addresses and networks. Never copy from history.
4. Send a small test transfer before any large first payment.
5. Approve exact amounts on EVM chains and revoke old approvals.
6. Support more than one network for each stablecoin you rely on.
7. Screen counterparties and wallet addresses, not just your own customers.
8. Confirm corridors, limits, and liquidity before you depend on an off-ramp.

The questions to put to a provider are in [30 due diligence questions](/resources/more/stablecoin-payments-provider-due-diligence).

## How does BlindPay reduce these risks?

BlindPay converts USDC and USDT to and from local currency, with compliance in the payment flow. Payouts from an external wallet are non-custodial: the stablecoins move only when the quoted payout executes, and a refunded payout returns them to the wallet that funded it right away. Managed wallets, in beta, are custodied by BlindPay, and the docs say so.

Every customer is verified with KYC or KYB before their first transaction, and payouts are screened as they run. Payouts to US bank accounts pass through a compliance review step, and a payout that needs a closer look moves to `on_hold` with a webhook, for up to 30 days, as described in [on-hold transactions](/docs/kb/on-hold-transactions). The API rejects unsupported token and network pairs before any funds move, across Ethereum, Polygon, Base, Arbitrum, Tempo, Arc, Stellar, Solana, and Tron ([supported chains](/docs/kb/supported-chains)).

BlindPay is registered with FinCEN as a Money Services Business and lists its licenses on the [licenses page](/licenses). Security controls, including SOC 2 Type 2 and independent penetration testing, are on the [security page](/security).

Pick the one risk in the table above you've covered least, and fix that first. For how stablecoin payments work end to end, start with [stablecoin payments explained](/resources/more/stablecoin-payments-guide).