[{"data":1,"prerenderedAt":760},["ShallowReactive",2],{"content-\u002Fresources\u002Fmore\u002Fcross-border-stablecoin-card-compliance-by-country":3,"resources-category-cross-border-stablecoin-card-compliance-by-country":597},{"id":4,"title":5,"authors":6,"body":7,"categories":6,"category":564,"categoryType":6,"compare":6,"contributors":6,"date":565,"description":566,"extension":567,"faq":568,"howto":6,"isBlog":587,"isChangelog":587,"meta":588,"navigation":590,"path":591,"pillar":587,"products":6,"rawbody":592,"role":6,"seo":593,"seoTitle":594,"stem":595,"thumbnail":6,"updated":565,"__hash__":596},"content\u002Fresources\u002Fmore\u002Fcross-border-stablecoin-card-compliance-by-country.md","Compliance for cross-border stablecoin card programs: a country readiness template",null,{"type":8,"value":9,"toc":551},"minimark",[10,17,24,29,48,57,62,65,73,76,80,83,160,163,167,170,292,310,313,317,320,341,347,358,364,368,371,410,414,417,437,444,448,451,468,472,504,508,546],[11,12,13],"p",{},[14,15,16],"em",{},"Reading time: about 8 minutes.",[11,18,19,23],{},[20,21,22],"strong",{},"Summary:"," A cross-border stablecoin card program is compliant country by country, not once. For each market, confirm who can be onboarded and at what verification level, which local rails fund the card balance and pay money back out, which licenses apply to the card and the stablecoin layer, and which data protection law governs cardholder data. A readiness table makes the gaps visible.",[11,25,26],{},[20,27,28],{},"Key takeaways",[30,31,32,36,39,42,45],"ul",{},[33,34,35],"li",{},"The card is licensed where it is issued. The stablecoin service is often regulated where the cardholder lives.",[33,37,38],{},"Fill one readiness row per country before launch. Empty cells are your counsel's to-do list.",[33,40,41],{},"Funding and payout rails differ by country: Pix in Brazil, SPEI in Mexico, PSE in Colombia, Transfers 3.0 in Argentina.",[33,43,44],{},"Card network rules and dispute rights do not change when settlement moves to stablecoins.",[33,46,47],{},"Sanctions compliance is strict liability in the US, so wallet screening belongs in every market.",[11,49,50,51,56],{},"This guide is for compliance leads and founders planning a card program across the Americas and Europe. The ",[52,53,55],"a",{"href":54},"\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance","card issuing compliance guide"," explains each regulatory regime. This page turns that into a working template you can fill in, with the rail and onboarding cells already completed for six markets from published BlindPay documentation.",[58,59,61],"h2",{"id":60},"what-makes-cross-border-card-compliance-different","What makes cross-border card compliance different?",[11,63,64],{},"Two legal anchors apply at once. Card issuing follows the country where the card is issued, and virtual asset services usually follow the country where the customer is.",[11,66,67,68,72],{},"So a US-issued card held by a cardholder in Brazil can sit under US banking and card rules and Brazil's virtual asset regime at the same time. Add Mexico and the EU and the same program answers to four sets of stablecoin rules. That is why one license almost never covers a global program, and why the ",[52,69,71],{"href":70},"\u002Fresources\u002Fmore\u002Fstablecoin-payment-licenses-msb-mtl-vasp-emi","license guide"," starts with \"where are your customers?\"",[11,74,75],{},"The practical effect is a matrix: every country where you onboard cardholders is a row, and every compliance layer is a column.",[58,77,79],{"id":78},"what-goes-into-a-country-readiness-table","What goes into a country readiness table?",[11,81,82],{},"Five columns per country. Two are about people, two are about money, and one is about law.",[84,85,86,102],"table",{},[87,88,89],"thead",{},[90,91,92,96,99],"tr",{},[93,94,95],"th",{},"Column",[93,97,98],{},"Question it answers",[93,100,101],{},"Who confirms it",[103,104,105,117,128,139,150],"tbody",{},[90,106,107,111,114],{},[108,109,110],"td",{},"Onboarding rules",[108,112,113],{},"Can people here be onboarded, at what verification level, with which ID documents?",[108,115,116],{},"Card provider and funding provider",[90,118,119,122,125],{},[108,120,121],{},"Funding rails",[108,123,124],{},"How does money from this country reach the card balance?",[108,126,127],{},"Funding provider",[90,129,130,133,136],{},[108,131,132],{},"Payout rails",[108,134,135],{},"How does money get back out to a local bank account?",[108,137,138],{},"Payout provider",[90,140,141,144,147],{},[108,142,143],{},"Licensing",[108,145,146],{},"Which card and virtual asset licenses apply to each party?",[108,148,149],{},"Local counsel",[90,151,152,155,158],{},[108,153,154],{},"Data protection",[108,156,157],{},"Which law governs cardholder data, and where may it be stored?",[108,159,149],{},[11,161,162],{},"Fill the first three from provider documentation. Fill the last two with counsel. A row is ready only when every cell has a confirmed source.",[58,164,166],{"id":165},"what-does-a-filled-in-table-look-like","What does a filled-in table look like?",[11,168,169],{},"Here are the first three columns for six markets, filled in from BlindPay's documentation. BlindPay assigns each country a verification tier, lists its payment methods by direction, and publishes typical arrival times per rail.",[84,171,172,191],{},[87,173,174],{},[90,175,176,179,182,185,188],{},[93,177,178],{},"Market",[93,180,181],{},"Onboarding (BlindPay tier)",[93,183,184],{},"Funding rails into stablecoins",[93,186,187],{},"Payout rails to local accounts",[93,189,190],{},"Typical timing",[103,192,193,210,227,243,260,276],{},[90,194,195,198,201,204,207],{},[108,196,197],{},"United States",[108,199,200],{},"Standard: automated KYC for eligible individuals",[108,202,203],{},"ACH, ACH Pull (Plaid), domestic wire, RTP, SWIFT (with an approved US virtual account)",[108,205,206],{},"ACH, domestic wire, RTP, SWIFT (POBO\u002FCOBO)",[108,208,209],{},"RTP instant; same-day ACH same business day; ACH 1 to 3 business days",[90,211,212,215,218,221,224],{},[108,213,214],{},"Brazil",[108,216,217],{},"Standard",[108,219,220],{},"Pix, TED (enabled per instance)",[108,222,223],{},"Pix, PIX Safe, TED",[108,225,226],{},"Pix payins up to 5 minutes",[90,228,229,232,234,237,240],{},[108,230,231],{},"Mexico",[108,233,217],{},[108,235,236],{},"SPEI (CLABE)",[108,238,239],{},"SPEI",[108,241,242],{},"SPEI payins up to 10 minutes",[90,244,245,248,251,254,257],{},[108,246,247],{},"Colombia",[108,249,250],{},"High-risk tier: individuals use KYC Enhanced, manual review up to 1 business day",[108,252,253],{},"PSE (payment link)",[108,255,256],{},"ACH Colombia",[108,258,259],{},"PSE payins up to 10 minutes; ACH Colombia payouts about 1 business day",[90,261,262,265,267,270,273],{},[108,263,264],{},"Argentina",[108,266,217],{},[108,268,269],{},"Transfers 3.0 (CBU)",[108,271,272],{},"Transfers 3.0",[108,274,275],{},"Payins up to 10 minutes",[90,277,278,281,283,286,289],{},[108,279,280],{},"EU (SEPA zone, for example Germany, France, Spain)",[108,282,217],{},[108,284,285],{},"SWIFT in USD to a US virtual account",[108,287,288],{},"SEPA in EUR",[108,290,291],{},"SEPA about 1 to 2 business days",[11,293,294,295,299,300,304,305,309],{},"Sources for each cell: ",[52,296,298],{"href":297},"\u002Fdocs\u002Fkb\u002Fsupported-countries","supported countries",", ",[52,301,303],{"href":302},"\u002Fdocs\u002Fkb\u002Fpayment-methods","payment methods",", and ",[52,306,308],{"href":307},"\u002Fdocs\u002Fkb\u002Fcut-off-times","cut-off times",". Two details from those pages are worth copying into your own notes. In high-risk tier countries a driver's license is not accepted as an ID document, so ask for a passport or national ID. And SEPA payouts to a few countries, including France and Portugal, are limited to individual beneficiaries.",[11,311,312],{},"The underlying rails are national infrastructure, so their hours are set by central banks: Banco Central do Brasil launched Pix on November 16, 2020 and runs it 24\u002F7, and Banco de México operates SPEI 24 hours a day, 365 days a year.",[58,314,316],{"id":315},"how-do-you-fill-the-licensing-and-data-protection-columns","How do you fill the licensing and data protection columns?",[11,318,319],{},"With counsel, one market at a time. These are the questions to bring.",[11,321,322,325,326,330,331,335,336,340],{},[20,323,324],{},"Licensing."," Who is the legal card issuer, and under which regulator? Does any party in your stack exchange, custody, or transfer stablecoins for residents of this country, and does that need registration or authorization? In Brazil the answer runs through the PSAV regime (",[52,327,329],{"href":328},"\u002Fresources\u002Fmore\u002Fpsav-brazil-explained","PSAV explainer","); in the EU through MiCA (",[52,332,334],{"href":333},"\u002Fresources\u002Fmore\u002Fmica-stablecoin-rules-explained","MiCA explainer","). The ",[52,337,339],{"href":338},"\u002Fresources\u002Fmore\u002Fstablecoin-regulation-tracker-2026","regulation tracker"," keeps the country list current.",[11,342,343,346],{},[20,344,345],{},"Card network rules."," The networks set program rules, brand standards, and dispute processes, and those travel with the card into every market. Mastercard's June 2026 announcement on stablecoin settlement says it keeps existing dispute processes. Visa's September 2026 guidance on stablecoin-linked programs notes that every card program has to fund its daily settlement obligation before it collects from cardholders, which shapes your treasury plan in every country.",[11,348,349,352,353,357],{},[20,350,351],{},"AML and sanctions."," Who screens cardholders, business owners, and wallet addresses, and who files suspicious activity reports in each country? OFAC says civil penalties generally apply on a strict liability basis, so any US person in the chain screens regardless of where the cardholder lives. For stablecoin transfers between providers, the ",[52,354,356],{"href":355},"\u002Fresources\u002Fmore\u002Ftravel-rule-stablecoin-off-ramps","Travel Rule guide"," covers what originator data must move with the funds.",[11,359,360,363],{},[20,361,362],{},"Data protection."," Which law governs cardholder data, where may it be stored, and which providers receive it? Brazil's LGPD and the EU's GDPR are the first two you will meet in this footprint. Map each data field to each provider before launch.",[58,365,367],{"id":366},"how-do-you-build-the-table-for-your-program","How do you build the table for your program?",[11,369,370],{},"Six steps, roughly one working session per market once the providers are chosen.",[372,373,374,380,386,392,398,404],"ol",{},[33,375,376,379],{},[20,377,378],{},"List target markets in launch order."," Start with the two where most cardholders live.",[33,381,382,385],{},[20,383,384],{},"Copy the onboarding cell from each provider."," Confirm tier, verification level, accepted ID documents, and review time. Note where providers disagree.",[33,387,388,391],{},[20,389,390],{},"Fill funding and payout rails."," Use the provider's published rail list, by direction, with timing. Mark any rail that needs a separate feature or approval.",[33,393,394,397],{},[20,395,396],{},"Send the licensing and data rows to counsel."," One memo per country, with your stack diagram attached.",[33,399,400,403],{},[20,401,402],{},"Add network rule checks."," Confirm with your card provider which card types, currencies, and settlement options apply per market.",[33,405,406,409],{},[20,407,408],{},"Review quarterly."," Rules, rails, and country tiers change. Put a date on every cell.",[58,411,413],{"id":412},"what-are-the-common-gaps-teams-miss","What are the common gaps teams miss?",[11,415,416],{},"Three show up in almost every review.",[30,418,419,425,431],{},[33,420,421,424],{},[20,422,423],{},"Assuming one tier everywhere."," A country in a higher verification tier changes your onboarding flow, your review time, and your accepted documents. Colombia is the example in the table above.",[33,426,427,430],{},[20,428,429],{},"Funding without payout."," A program that lets users fund in a country but cannot pay them back out locally ends up with stuck balances and support tickets. Fill both columns.",[33,432,433,436],{},[20,434,435],{},"No owner for data residency."," Two providers plus your own systems means three copies of identity data. Decide retention and deletion before launch.",[11,438,439,440,443],{},"The ",[52,441,55],{"href":442},"\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance#who-is-responsible-for-what"," covers who runs each verification across the program.",[58,445,447],{"id":446},"where-does-blindpay-fit","Where does BlindPay fit?",[11,449,450],{},"BlindPay is the funding and payout layer for the countries in your table. It turns local bank money into USDC or USDT for the balance behind a card, over ACH, wire, RTP, and SWIFT in the US, Pix and TED in Brazil, SPEI in Mexico, PSE in Colombia, and Transfers 3.0 in Argentina. It pays stablecoins back out as local currency over Pix, SPEI, ACH Colombia, Transfers 3.0, ACH, RTP, SEPA, and SWIFT (POBO\u002FCOBO) with UETR tracking and MT103 confirmations.",[11,452,453,454,458,459,462,463,467],{},"The onboarding cells come with it. Each country has a published verification tier, KYC and KYB run inside the API before any payment moves, and BlindPay is registered with FinCEN as a Money Services Business, with licenses on the ",[52,455,457],{"href":456},"\u002Flicenses","licenses page",". Every quote shows the fee breakdown and exact amount before execute, so the timing and cost columns in your table come from live data. Read the ",[52,460,461],{"href":302},"payment methods reference"," or ",[52,464,466],{"href":465},"\u002Fcontact","talk to the team",".",[58,469,471],{"id":470},"what-to-read-next","What to read next",[30,473,474,479,485,491,497],{},[33,475,476],{},[52,477,478],{"href":54},"Compliance for stablecoin card issuing",[33,480,481],{},[52,482,484],{"href":483},"\u002Fresources\u002Fmore\u002Fstablecoin-cards-latin-america","Stablecoin cards in Latin America",[33,486,487],{},[52,488,490],{"href":489},"\u002Fresources\u002Fmore\u002Fgenius-act-for-businesses","The GENIUS Act explained for businesses",[33,492,493],{},[52,494,496],{"href":495},"\u002Fresources\u002Fmore\u002Fbin-sponsor-vs-issuer-processor-vs-program-manager","BIN sponsor vs. issuer-processor vs. program manager",[33,498,499,503],{},[52,500,502],{"href":501},"\u002Fresources\u002Fmore\u002Fbuild-vs-buy-stablecoin-card-program","Build vs. buy a stablecoin card program",", for the partner decision before a country rollout",[58,505,507],{"id":506},"sources","Sources",[30,509,510,518,525,532,539],{},[33,511,512],{},[52,513,517],{"href":514,"rel":515},"https:\u002F\u002Fwww.bcb.gov.br\u002Fen\u002Ffinancialstability\u002Fpix_en",[516],"nofollow","Banco Central do Brasil: Pix",[33,519,520],{},[52,521,524],{"href":522,"rel":523},"https:\u002F\u002Fwww.banxico.org.mx\u002Fservices\u002Finterbanking-electronic-payme.html",[516],"Banco de México: SPEI",[33,526,527],{},[52,528,531],{"href":529,"rel":530},"https:\u002F\u002Fwww.mastercard.com\u002Fus\u002Fen\u002Fnews-and-trends\u002Fpress\u002F2026\u002Fjune\u002Fmastercard-expands-settlement-capabilities-to-include-stablecoin.html",[516],"Mastercard: expanding settlement capabilities to include stablecoins, June 3, 2026",[33,533,534],{},[52,535,538],{"href":536,"rel":537},"https:\u002F\u002Fwww.visa.com\u002Fen-us\u002Fthought-leadership\u002Finnovation\u002Ffinancing-stablecoin-linked-card-programs",[516],"Visa: financing stablecoin-linked card programs, September 8, 2026",[33,540,541],{},[52,542,545],{"href":543,"rel":544},"https:\u002F\u002Fofac.treasury.gov\u002Fmedia\u002F913571\u002Fdownload?inline",[516],"OFAC: Sanctions compliance guidance for the virtual currency industry, October 2021",[11,547,548],{},[14,549,550],{},"This article is for general information only and is not legal, tax, or financial advice.",{"title":552,"searchDepth":553,"depth":553,"links":554},"",2,[555,556,557,558,559,560,561,562,563],{"id":60,"depth":553,"text":61},{"id":78,"depth":553,"text":79},{"id":165,"depth":553,"text":166},{"id":315,"depth":553,"text":316},{"id":366,"depth":553,"text":367},{"id":412,"depth":553,"text":413},{"id":446,"depth":553,"text":447},{"id":470,"depth":553,"text":471},{"id":506,"depth":553,"text":507},"compliance","2026-10-10","A country readiness template for stablecoin card programs: onboarding rules, funding rails, and payout rails for the US, LatAm, and the EU.","md",[569,572,575,578,581,584],{"q":570,"a":571},"What compliance does a cross-border stablecoin card program need?","Four layers in every market: licensing for the card issuer and for any virtual asset service, card network program rules, AML and sanctions controls on people, wallets, and transactions, and data protection for the personal data you collect. Each country where cardholders live can add its own rules on top of the country where the card is issued, so the work is done market by market.",{"q":573,"a":574},"How do you check if a country is ready for a stablecoin card launch?","Fill one row per country with five answers: can cardholders there be onboarded and at what verification level, which local rails can fund the card balance, which rails can pay money back out, which licenses apply, and which data protection law governs the data. A market is ready when every cell has a confirmed answer from a provider or from local counsel, not an assumption.",{"q":576,"a":577},"Which local rails can fund a stablecoin card in Latin America?","Through BlindPay, a card balance can be funded by Pix or TED in Brazil, SPEI in Mexico, PSE in Colombia, and Transfers 3.0 in Argentina, each converted into USDC or USDT and delivered to a wallet. Pix, SPEI, Transfers, and PSE payins typically arrive within minutes. US-based senders can use ACH, wire, RTP, or a dedicated US virtual account.",{"q":579,"a":580},"Do card network rules change for stablecoin card programs?","The program rules, dispute rights, and chargeback processes stay the same. What changes is the settlement option: Visa settles with some programs in stablecoins, and Mastercard announced plans in June 2026 for on-chain card settlement that keeps existing dispute processes. Visa also notes that every card program has to fund its daily settlement obligation before it collects from cardholders.",{"q":582,"a":583},"Who should review a cross-border stablecoin card program?","Counsel in the country where the card is issued, for banking and card rules, and counsel in each country where cardholders live, for virtual asset, consumer protection, and data protection rules. Your sponsor bank and each provider will also run their own reviews. Bring them a completed readiness table so the questions are specific to your markets and rails.",{"q":585,"a":586},"Does data protection law apply to stablecoin card programs?","Yes. A card program collects identity documents, addresses, selfies, and transaction histories, which are personal data in every market. Brazil's LGPD and the EU's GDPR are the two you will meet first in a Latin America and Europe program. Map which provider receives which data, get consent where the law requires it, and set retention periods before launch.",false,{"author":589},"BlindPay Team",true,"\u002Fresources\u002Fmore\u002Fcross-border-stablecoin-card-compliance-by-country","---\ntitle: \"Compliance for cross-border stablecoin card programs: a country readiness template\"\nseoTitle: \"Cross-border stablecoin card compliance by country\"\ndescription: \"A country readiness template for stablecoin card programs: onboarding rules, funding rails, and payout rails for the US, LatAm, and the EU.\"\ndate: \"2026-10-10\"\nupdated: \"2026-10-10\"\ncategory: \"compliance\"\nauthor: \"BlindPay Team\"\nfaq:\n  - q: \"What compliance does a cross-border stablecoin card program need?\"\n    a: \"Four layers in every market: licensing for the card issuer and for any virtual asset service, card network program rules, AML and sanctions controls on people, wallets, and transactions, and data protection for the personal data you collect. Each country where cardholders live can add its own rules on top of the country where the card is issued, so the work is done market by market.\"\n  - q: \"How do you check if a country is ready for a stablecoin card launch?\"\n    a: \"Fill one row per country with five answers: can cardholders there be onboarded and at what verification level, which local rails can fund the card balance, which rails can pay money back out, which licenses apply, and which data protection law governs the data. A market is ready when every cell has a confirmed answer from a provider or from local counsel, not an assumption.\"\n  - q: \"Which local rails can fund a stablecoin card in Latin America?\"\n    a: \"Through BlindPay, a card balance can be funded by Pix or TED in Brazil, SPEI in Mexico, PSE in Colombia, and Transfers 3.0 in Argentina, each converted into USDC or USDT and delivered to a wallet. Pix, SPEI, Transfers, and PSE payins typically arrive within minutes. US-based senders can use ACH, wire, RTP, or a dedicated US virtual account.\"\n  - q: \"Do card network rules change for stablecoin card programs?\"\n    a: \"The program rules, dispute rights, and chargeback processes stay the same. What changes is the settlement option: Visa settles with some programs in stablecoins, and Mastercard announced plans in June 2026 for on-chain card settlement that keeps existing dispute processes. Visa also notes that every card program has to fund its daily settlement obligation before it collects from cardholders.\"\n  - q: \"Who should review a cross-border stablecoin card program?\"\n    a: \"Counsel in the country where the card is issued, for banking and card rules, and counsel in each country where cardholders live, for virtual asset, consumer protection, and data protection rules. Your sponsor bank and each provider will also run their own reviews. Bring them a completed readiness table so the questions are specific to your markets and rails.\"\n  - q: \"Does data protection law apply to stablecoin card programs?\"\n    a: \"Yes. A card program collects identity documents, addresses, selfies, and transaction histories, which are personal data in every market. Brazil's LGPD and the EU's GDPR are the two you will meet first in a Latin America and Europe program. Map which provider receives which data, get consent where the law requires it, and set retention periods before launch.\"\n---\n\n*Reading time: about 8 minutes.*\n\n**Summary:** A cross-border stablecoin card program is compliant country by country, not once. For each market, confirm who can be onboarded and at what verification level, which local rails fund the card balance and pay money back out, which licenses apply to the card and the stablecoin layer, and which data protection law governs cardholder data. A readiness table makes the gaps visible.\n\n**Key takeaways**\n\n- The card is licensed where it is issued. The stablecoin service is often regulated where the cardholder lives.\n- Fill one readiness row per country before launch. Empty cells are your counsel's to-do list.\n- Funding and payout rails differ by country: Pix in Brazil, SPEI in Mexico, PSE in Colombia, Transfers 3.0 in Argentina.\n- Card network rules and dispute rights do not change when settlement moves to stablecoins.\n- Sanctions compliance is strict liability in the US, so wallet screening belongs in every market.\n\n\nThis guide is for compliance leads and founders planning a card program across the Americas and Europe. The [card issuing compliance guide](\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance) explains each regulatory regime. This page turns that into a working template you can fill in, with the rail and onboarding cells already completed for six markets from published BlindPay documentation.\n\n## What makes cross-border card compliance different?\n\nTwo legal anchors apply at once. Card issuing follows the country where the card is issued, and virtual asset services usually follow the country where the customer is.\n\nSo a US-issued card held by a cardholder in Brazil can sit under US banking and card rules and Brazil's virtual asset regime at the same time. Add Mexico and the EU and the same program answers to four sets of stablecoin rules. That is why one license almost never covers a global program, and why the [license guide](\u002Fresources\u002Fmore\u002Fstablecoin-payment-licenses-msb-mtl-vasp-emi) starts with \"where are your customers?\"\n\nThe practical effect is a matrix: every country where you onboard cardholders is a row, and every compliance layer is a column.\n\n## What goes into a country readiness table?\n\nFive columns per country. Two are about people, two are about money, and one is about law.\n\n| Column | Question it answers | Who confirms it |\n|---|---|---|\n| Onboarding rules | Can people here be onboarded, at what verification level, with which ID documents? | Card provider and funding provider |\n| Funding rails | How does money from this country reach the card balance? | Funding provider |\n| Payout rails | How does money get back out to a local bank account? | Payout provider |\n| Licensing | Which card and virtual asset licenses apply to each party? | Local counsel |\n| Data protection | Which law governs cardholder data, and where may it be stored? | Local counsel |\n\nFill the first three from provider documentation. Fill the last two with counsel. A row is ready only when every cell has a confirmed source.\n\n## What does a filled-in table look like?\n\nHere are the first three columns for six markets, filled in from BlindPay's documentation. BlindPay assigns each country a verification tier, lists its payment methods by direction, and publishes typical arrival times per rail.\n\n| Market | Onboarding (BlindPay tier) | Funding rails into stablecoins | Payout rails to local accounts | Typical timing |\n|---|---|---|---|---|\n| United States | Standard: automated KYC for eligible individuals | ACH, ACH Pull (Plaid), domestic wire, RTP, SWIFT (with an approved US virtual account) | ACH, domestic wire, RTP, SWIFT (POBO\u002FCOBO) | RTP instant; same-day ACH same business day; ACH 1 to 3 business days |\n| Brazil | Standard | Pix, TED (enabled per instance) | Pix, PIX Safe, TED | Pix payins up to 5 minutes |\n| Mexico | Standard | SPEI (CLABE) | SPEI | SPEI payins up to 10 minutes |\n| Colombia | High-risk tier: individuals use KYC Enhanced, manual review up to 1 business day | PSE (payment link) | ACH Colombia | PSE payins up to 10 minutes; ACH Colombia payouts about 1 business day |\n| Argentina | Standard | Transfers 3.0 (CBU) | Transfers 3.0 | Payins up to 10 minutes |\n| EU (SEPA zone, for example Germany, France, Spain) | Standard | SWIFT in USD to a US virtual account | SEPA in EUR | SEPA about 1 to 2 business days |\n\nSources for each cell: [supported countries](\u002Fdocs\u002Fkb\u002Fsupported-countries), [payment methods](\u002Fdocs\u002Fkb\u002Fpayment-methods), and [cut-off times](\u002Fdocs\u002Fkb\u002Fcut-off-times). Two details from those pages are worth copying into your own notes. In high-risk tier countries a driver's license is not accepted as an ID document, so ask for a passport or national ID. And SEPA payouts to a few countries, including France and Portugal, are limited to individual beneficiaries.\n\nThe underlying rails are national infrastructure, so their hours are set by central banks: Banco Central do Brasil launched Pix on November 16, 2020 and runs it 24\u002F7, and Banco de México operates SPEI 24 hours a day, 365 days a year.\n\n## How do you fill the licensing and data protection columns?\n\nWith counsel, one market at a time. These are the questions to bring.\n\n**Licensing.** Who is the legal card issuer, and under which regulator? Does any party in your stack exchange, custody, or transfer stablecoins for residents of this country, and does that need registration or authorization? In Brazil the answer runs through the PSAV regime ([PSAV explainer](\u002Fresources\u002Fmore\u002Fpsav-brazil-explained)); in the EU through MiCA ([MiCA explainer](\u002Fresources\u002Fmore\u002Fmica-stablecoin-rules-explained)). The [regulation tracker](\u002Fresources\u002Fmore\u002Fstablecoin-regulation-tracker-2026) keeps the country list current.\n\n**Card network rules.** The networks set program rules, brand standards, and dispute processes, and those travel with the card into every market. Mastercard's June 2026 announcement on stablecoin settlement says it keeps existing dispute processes. Visa's September 2026 guidance on stablecoin-linked programs notes that every card program has to fund its daily settlement obligation before it collects from cardholders, which shapes your treasury plan in every country.\n\n**AML and sanctions.** Who screens cardholders, business owners, and wallet addresses, and who files suspicious activity reports in each country? OFAC says civil penalties generally apply on a strict liability basis, so any US person in the chain screens regardless of where the cardholder lives. For stablecoin transfers between providers, the [Travel Rule guide](\u002Fresources\u002Fmore\u002Ftravel-rule-stablecoin-off-ramps) covers what originator data must move with the funds.\n\n**Data protection.** Which law governs cardholder data, where may it be stored, and which providers receive it? Brazil's LGPD and the EU's GDPR are the first two you will meet in this footprint. Map each data field to each provider before launch.\n\n## How do you build the table for your program?\n\nSix steps, roughly one working session per market once the providers are chosen.\n\n1. **List target markets in launch order.** Start with the two where most cardholders live.\n2. **Copy the onboarding cell from each provider.** Confirm tier, verification level, accepted ID documents, and review time. Note where providers disagree.\n3. **Fill funding and payout rails.** Use the provider's published rail list, by direction, with timing. Mark any rail that needs a separate feature or approval.\n4. **Send the licensing and data rows to counsel.** One memo per country, with your stack diagram attached.\n5. **Add network rule checks.** Confirm with your card provider which card types, currencies, and settlement options apply per market.\n6. **Review quarterly.** Rules, rails, and country tiers change. Put a date on every cell.\n\n## What are the common gaps teams miss?\n\nThree show up in almost every review.\n\n- **Assuming one tier everywhere.** A country in a higher verification tier changes your onboarding flow, your review time, and your accepted documents. Colombia is the example in the table above.\n- **Funding without payout.** A program that lets users fund in a country but cannot pay them back out locally ends up with stuck balances and support tickets. Fill both columns.\n- **No owner for data residency.** Two providers plus your own systems means three copies of identity data. Decide retention and deletion before launch.\n\nThe [card issuing compliance guide](\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance#who-is-responsible-for-what) covers who runs each verification across the program.\n\n## Where does BlindPay fit?\n\nBlindPay is the funding and payout layer for the countries in your table. It turns local bank money into USDC or USDT for the balance behind a card, over ACH, wire, RTP, and SWIFT in the US, Pix and TED in Brazil, SPEI in Mexico, PSE in Colombia, and Transfers 3.0 in Argentina. It pays stablecoins back out as local currency over Pix, SPEI, ACH Colombia, Transfers 3.0, ACH, RTP, SEPA, and SWIFT (POBO\u002FCOBO) with UETR tracking and MT103 confirmations.\n\nThe onboarding cells come with it. Each country has a published verification tier, KYC and KYB run inside the API before any payment moves, and BlindPay is registered with FinCEN as a Money Services Business, with licenses on the [licenses page](\u002Flicenses). Every quote shows the fee breakdown and exact amount before execute, so the timing and cost columns in your table come from live data. Read the [payment methods reference](\u002Fdocs\u002Fkb\u002Fpayment-methods) or [talk to the team](\u002Fcontact).\n\n## What to read next\n\n- [Compliance for stablecoin card issuing](\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance)\n- [Stablecoin cards in Latin America](\u002Fresources\u002Fmore\u002Fstablecoin-cards-latin-america)\n- [The GENIUS Act explained for businesses](\u002Fresources\u002Fmore\u002Fgenius-act-for-businesses)\n- [BIN sponsor vs. issuer-processor vs. program manager](\u002Fresources\u002Fmore\u002Fbin-sponsor-vs-issuer-processor-vs-program-manager)\n- [Build vs. buy a stablecoin card program](\u002Fresources\u002Fmore\u002Fbuild-vs-buy-stablecoin-card-program), for the partner decision before a country rollout\n\n## Sources\n\n- [Banco Central do Brasil: Pix](https:\u002F\u002Fwww.bcb.gov.br\u002Fen\u002Ffinancialstability\u002Fpix_en)\n- [Banco de México: SPEI](https:\u002F\u002Fwww.banxico.org.mx\u002Fservices\u002Finterbanking-electronic-payme.html)\n- [Mastercard: expanding settlement capabilities to include stablecoins, June 3, 2026](https:\u002F\u002Fwww.mastercard.com\u002Fus\u002Fen\u002Fnews-and-trends\u002Fpress\u002F2026\u002Fjune\u002Fmastercard-expands-settlement-capabilities-to-include-stablecoin.html)\n- [Visa: financing stablecoin-linked card programs, September 8, 2026](https:\u002F\u002Fwww.visa.com\u002Fen-us\u002Fthought-leadership\u002Finnovation\u002Ffinancing-stablecoin-linked-card-programs)\n- [OFAC: Sanctions compliance guidance for the virtual currency industry, October 2021](https:\u002F\u002Fofac.treasury.gov\u002Fmedia\u002F913571\u002Fdownload?inline)\n\n*This article is for general information only and is not legal, tax, or financial advice.*\n",{"title":5,"description":566},"Cross-border stablecoin card compliance by country","resources\u002Fmore\u002Fcross-border-stablecoin-card-compliance-by-country","5c_OCIDNyJAiB7C3Z6cuJF52UbALoVrIxH9DcWLIhSk",[598,602,606,610,614,618,622,626,630,631,635,639,643,647,651,655,659,663,667,670,673,677,680,684,688,691,695,699,703,706,709,713,717,721,725,729,733,737,741,745,748,752,756],{"path":599,"title":600,"description":601},"\u002Fresources\u002Fmore\u002Faml-audit-readiness-risk-monitoring","AML audit readiness: what regulators ask for and how to prove your risk monitoring works","The evidence examiners expect from automated risk monitoring: a 10-item evidence table, good vs poor practice, SAR timelines, RFIs, and a 30-day plan.",{"path":603,"title":604,"description":605},"\u002Fresources\u002Fmore\u002Fare-blockchain-payments-legal","Are blockchain payments legal? Rules in the US, EU, UK, Brazil, and Mexico","Blockchain payments are legal for businesses in the US, EU, UK, Brazil, and Mexico, under different rules. What each country regulates, as of October 2026.",{"path":607,"title":608,"description":609},"\u002Fresources\u002Fmore\u002Fare-stablecoin-card-purchases-taxable","Are stablecoin card purchases taxable? A country-by-country overview of disposals, gains, and records","Why a stablecoin card purchase can be a taxable disposal, how the US, UK, Germany, Spain, the Netherlands, and Brazil differ, and which records to keep.",{"path":611,"title":612,"description":613},"\u002Fresources\u002Fmore\u002Fare-stablecoin-payments-reversible","Are stablecoin payments reversible? Finality, custody, and fraud explained","Stablecoin transfers settle final in minutes and cannot be reversed. That finality proves custody at every step, but it also opens a fraud gap on the fiat side of the payment.",{"path":615,"title":616,"description":617},"\u002Fresources\u002Fmore\u002Fautomated-kyc-kyb-vs-manual-onboarding","Automated KYC\u002FKYB vs. manual onboarding: what actually changes","A side-by-side comparison of automated and manual KYC\u002FKYB for fintechs: onboarding time, false-positive rates, cost per verification, scaling across jurisdictions, and audit-trail quality, plus the cases where a human reviewer is still required.",{"path":619,"title":620,"description":621},"\u002Fresources\u002Fmore\u002Fbrazil-self-custody-wallet-declaration","Brazil's self-custody wallet rule: COAF reporting for transfers of US$10,000 or more","Since October 1, 2026, Brazil requires reports to COAF on transfers of US$10,000+ to or from self-custodied wallets. What counts, who reports, what to do.",{"path":623,"title":624,"description":625},"\u002Fresources\u002Fmore\u002Fbuild-vs-buy-automated-risk-monitoring","Build vs. buy automated risk monitoring: a decision framework and 15 provider questions","Build, buy point solutions, or use an integrated provider? Compare three ways to run automated risk monitoring, who stays responsible, and 15 questions.",{"path":627,"title":628,"description":629},"\u002Fresources\u002Fmore\u002Fcompliance-agents-cross-border-stablecoin-payments","Compliance agents for cross-border stablecoin payments: a global regulatory guide","How compliance agents apply FinCEN, MiCA, FCA, MAS, and Banco Central do Brasil rules to cross-border stablecoin payments: jurisdiction table, the FATF Travel Rule, multi-list sanctions screening, the four components of a compliant program, and questions to ask a compliance provider.",{"path":591,"title":5,"description":566},{"path":632,"title":633,"description":634},"\u002Fresources\u002Fmore\u002Fcrypto-wallet-compliance-checklist","Crypto wallet compliance checklist: KYC, KYT, and Travel Rule","The compliance that comes with crypto wallets and stablecoin payments: KYC and KYB, KYT, the Travel Rule, address screening, MSB rules, and 15 checks.",{"path":636,"title":637,"description":638},"\u002Fresources\u002Fmore\u002Fdirect-vs-indirect-stablecoin-exchange","Direct vs indirect stablecoin exchange: who holds the stablecoin, and who carries compliance","In direct exchange, both parties hold stablecoins and own compliance. In indirect exchange, a provider settles in stablecoins behind a normal bank payment.",{"path":640,"title":641,"description":642},"\u002Fresources\u002Fmore\u002Fdo-merchants-need-a-license-to-accept-stablecoins","Do merchants need a license to accept stablecoin payments? KYC, KYB, and compliance explained","Usually no: the license sits with the provider that moves the funds. What merchants still owe on KYB, sanctions, tax, and records in the US, EU, Brazil.",{"path":644,"title":645,"description":646},"\u002Fresources\u002Fmore\u002Fdo-stablecoin-cards-require-kyc","Do stablecoin cards require KYC? What to expect, what gets checked, and why \"no KYC\" cards fall short","Why stablecoin cards ask for ID even with a permissionless wallet, what KYC and KYB collect, why no-KYC cards fall short, and how to fix a rejection.",{"path":648,"title":649,"description":650},"\u002Fresources\u002Fmore\u002Fgenius-act-timeline-key-dates","GENIUS Act and MiCA timeline: the key dates for stablecoin payment teams","Every GENIUS Act and MiCA date that matters to a stablecoin payment flow, how the US effective date is calculated, and what to finish before each deadline.",{"path":652,"title":653,"description":654},"\u002Fresources\u002Fmore\u002Fhow-to-automate-kyc-kyb-stablecoin-payments","How to automate KYC and KYB for stablecoin payments","A developer guide to automated KYC and KYB for stablecoin payment flows: how verification runs inside a payment API, step-by-step workflows for individuals and businesses, jurisdiction requirements for the US, EU, UK, Singapore, and Brazil, and what to check before settlement.",{"path":656,"title":657,"description":658},"\u002Fresources\u002Fmore\u002Fhow-to-choose-automated-risk-monitoring-vendor","How to choose an automated risk monitoring vendor for a fintech startup","A buyer's guide to automated risk monitoring vendors for early-stage fintechs: the five criteria that matter (regulatory coverage, integration effort, false-positive rate, pricing model, audit output), the question to ask a vendor on each, a checklist table, and what it costs.",{"path":660,"title":661,"description":662},"\u002Fresources\u002Fmore\u002Freduce-false-positives-transaction-monitoring","How to reduce false positives in transaction monitoring without missing real risk","Cut AML alert noise without losing real cases: a 7-step tuning process, the levers that work, the metrics to watch, and what automation should never close.",{"path":664,"title":665,"description":666},"\u002Fresources\u002Fmore\u002Fhow-wallet-screening-works-stablecoin-payments","How wallet screening works in stablecoin payments: exposure, risk scores, and frozen addresses","How wallet screening works: OFAC-listed addresses, direct and indirect exposure, risk scores, issuer freezes, and what to do when an address is flagged.",{"path":70,"title":668,"description":669},"MSB vs money transmitter license vs VASP vs EMI: which license does a stablecoin payment flow need?","MSB registration, state money transmitter licenses, VASP, EMI, and PSAV compared: who needs each, what triggers it, and when your provider covers you.",{"path":333,"title":671,"description":672},"MiCA stablecoin rules explained for payment companies","What MiCA means if your business uses stablecoins in the EU: EMTs vs ARTs, issuer requirements, why USDC is compliant and USDT was delisted, and a practical checklist.",{"path":674,"title":675,"description":676},"\u002Fresources\u002Fmore\u002Fongoing-sanctions-screening-how-often-to-rescreen","Ongoing sanctions screening: how often to rescreen and what to screen","How often to rescreen customers against sanctions lists, what to screen beyond names, and a cadence that holds up under OFAC strict liability.",{"path":328,"title":678,"description":679},"PSAV in Brazil: the Central Bank's virtual asset license explained","PSAV is Brazil's authorization for virtual asset service providers, created by BCB Resolutions 519, 520, and 521 under Law 14.478\u002F2022. What it requires and who needs it.",{"path":681,"title":682,"description":683},"\u002Fresources\u002Fmore\u002Freal-time-transaction-monitoring-stablecoin-payments","Real-time transaction monitoring for cross-border stablecoin payments","Why stablecoin cross-border flows need different monitoring than wires: the signals that get scored (wallet address risk, velocity, corridor risk, on\u002Foff-ramp counterparties), real-time vs. batch monitoring, and a worked example of a flagged pattern from alert to decision.",{"path":685,"title":686,"description":687},"\u002Fresources\u002Fmore\u002Fstablecoin-card-and-payout-compliance-map","Stablecoin card and payout compliance map: who owns KYC, KYB, sanctions, and the Travel Rule","A compliance map for programs that run stablecoin cards and payouts together: KYC, KYB, monitoring, sanctions, Travel Rule, and records, split by owner.",{"path":54,"title":689,"description":690},"Stablecoin card issuing compliance: KYC, KYB, and regulatory coverage explained","What compliance stablecoin card issuing requires: KYC vs. KYB, who is responsible for what, how rules differ in the US, EU, UK, and Latin America, and ongoing monitoring.",{"path":692,"title":693,"description":694},"\u002Fresources\u002Fmore\u002Fstablecoin-cards-europe-mica","Stablecoin cards in Europe: MiCA, euro stablecoins, and what licensing means for cardholders and card programs","How MiCA applies to stablecoin cards in Europe: who needs authorization, how to check a provider on the ESMA register, euro vs dollar stablecoins, SEPA.",{"path":696,"title":697,"description":698},"\u002Fresources\u002Fmore\u002Fstablecoin-cards-united-states-regulation","Stablecoin cards in the United States: the GENIUS Act, sponsor banks, and Visa USDC settlement","How US stablecoin cards are structured and regulated: sponsor bank, program manager, processor, the GENIUS Act, Visa USDC settlement, FDIC coverage, tax.",{"path":700,"title":701,"description":702},"\u002Fresources\u002Fmore\u002Fstablecoin-off-ramp-limits","Stablecoin off-ramp limits: per-transaction, daily, and monthly caps explained","Why off-ramps cap how much you can convert per transaction, day, and month, how the caps map to KYC and KYB tiers, and the documents that raise them.",{"path":338,"title":704,"description":705},"Stablecoin regulation in 2026: MiCA, the GENIUS Act, Brazil, and Japan","Where stablecoin regulation stands in 2026: MiCA in the EU, the GENIUS Act in the US, Brazil's VASP regime, and Japan's issuer rules, compared for payment businesses.",{"path":489,"title":707,"description":708},"The GENIUS Act explained for businesses that use stablecoins","What the GENIUS Act means if your business sends, receives, or holds stablecoins: who it regulates, the dates that matter, and what to do before 2027.",{"path":710,"title":711,"description":712},"\u002Fresources\u002Fmore\u002Ftravel-rule-workflow-hold-return-reject","The Travel Rule in an automated workflow: what to collect, when to hold, when to return","How to automate Travel Rule compliance for stablecoin transfers: what data to collect, the checks before release, and when to hold, reject, or return.",{"path":714,"title":715,"description":716},"\u002Fresources\u002Fmore\u002Ftransaction-monitoring-red-flags-stablecoin-payments","Transaction monitoring red flags for stablecoin payments: 12 rules to automate","The 12 red flags automated transaction monitoring should catch in stablecoin and cross-border payments, with rule logic, actions, and the data each needs.",{"path":718,"title":719,"description":720},"\u002Fresources\u002Fmore\u002Fverification-of-payee-instant-payments","Verification of payee in instant payments: how rails check the recipient before money moves","How EU Verification of Payee, UK Confirmation of Payee, Pix, SPEI, and US payee name checks confirm the recipient before an instant payment becomes final.",{"path":722,"title":723,"description":724},"\u002Fresources\u002Fmore\u002Fvirtual-account-requirements-kyc-kyb","Virtual account requirements: KYC, KYB, and what the bank reviews before it says yes","What you need to open a virtual account: KYC or KYB, the extra fields and source of funds documents the bank reviews, who owns each step, and timelines.",{"path":726,"title":727,"description":728},"\u002Fresources\u002Fmore\u002Fwhat-are-compliance-agents-in-fintech","What are compliance agents in fintech? How they work and what they do for payments","Compliance agents are autonomous software components that run KYC, KYB, sanctions screening, and transaction monitoring inside a payment flow, then document every decision. How they work, what they do for payments, how they differ from traditional compliance software, and how BlindPay embeds them in its API.",{"path":730,"title":731,"description":732},"\u002Fresources\u002Fmore\u002Fwhat-happens-if-a-stablecoin-payment-provider-fails","What happens to your money if a stablecoin payment provider fails?","Issuer, provider, or bank: who fails decides what you get back. What the GENIUS Act and state law protect, where money sits mid-payment, and a runbook.",{"path":734,"title":735,"description":736},"\u002Fresources\u002Fmore\u002Fwhat-is-kyb","What is KYB? Know Your Business verification explained","KYB verifies a company's legal existence, ownership, and control before it can transact. What it checks, who counts as a beneficial owner, and how it differs from KYC.",{"path":738,"title":739,"description":740},"\u002Fresources\u002Fmore\u002Fwhat-is-a-vasp","What is a VASP? Virtual asset service provider explained","A VASP is any business that exchanges, transfers, or custodies virtual assets like stablecoins for customers. FATF's definition and what it requires in practice.",{"path":742,"title":743,"description":744},"\u002Fresources\u002Fmore\u002Fwhat-is-automated-risk-monitoring-fintech","What is automated risk monitoring in fintech?","A reference explainer on automated risk monitoring for fintechs: the four components (KYC\u002FKYB, transaction monitoring, sanctions and watchlist screening, compliance automation), what each one flags, a manual vs. automated comparison, and what FinCEN, FATF, and OFAC actually require.",{"path":355,"title":746,"description":747},"What is the travel rule for stablecoin off-ramps? Thresholds, data, and failed checks","The travel rule makes off-ramps pass sender and receiver data with transfers. Thresholds by country, required data, and what happens when checks fail.",{"path":749,"title":750,"description":751},"\u002Fresources\u002Fmore\u002Fgenius-act-usdt-foreign-stablecoin-issuers","What the GENIUS Act means for USDT and other foreign-issued stablecoins","Can USDT stay available in the US under the GENIUS Act? The foreign issuer path, the 2027 and 2028 deadlines, and what payment companies should ask now.",{"path":753,"title":754,"description":755},"\u002Fresources\u002Fmore\u002Fcrypto-on-ramp-compliance-who-owns-what","Who owns compliance when you integrate a crypto on-ramp API? KYC, KYB, KYT, and holds","An on-ramp API splits compliance between the provider and you. Who runs KYC, KYB, KYT, sanctions, and the travel rule, and what stays on your side.",{"path":757,"title":758,"description":759},"\u002Fresources\u002Fmore\u002Fsource-of-funds-crypto-off-ramps","Why do crypto off-ramps ask for source of funds? Documents, triggers, and on-chain proof","Why off-ramps ask where your stablecoins came from, how source of funds differs from source of wealth, what triggers a request, and which documents pass.",1791908486491]