What happens to your money if a stablecoin payment provider fails?

If a stablecoin payment provider fails, what you get back depends on where your money sat and who failed. Stablecoins in a wallet you control aren't affected. A custodial balance depends on segregation and contract terms. If the issuer fails, the GENIUS Act gives holders first claim on reserves from January 18, 2027.

This article is for information only and is not legal advice.

Most teams plan for a provider going offline for a day. Fewer plan for it disappearing. The second case is rarer and much more expensive, and the time to prepare is before you sign.

Key takeaways

• Three different failures matter: the stablecoin issuer, the payment provider, and the bank behind the provider. Each has different protection.
• Stablecoins are not deposits. The GENIUS Act bans FDIC insurance for them and bans saying otherwise.
• For permitted US issuers, holders get priority on reserves in insolvency. That starts January 18, 2027.
• For custodians and money transmitters, protection depends on segregation, trust rules, and the ownership clause in your contract.
• Your exposure changes during each payment. Know which leg each in-flight payout is on.

If you're mapping the whole stack first, read what stablecoin infrastructure is. This page zooms in on one question: what happens when a piece of it fails.

Which kinds of failure should you plan for?

Plan for three: the issuer of the stablecoin, the payment provider that moves it, and the bank or partner that sends the fiat. Each one fails differently, and the protection that applies is different too.

The overview of stablecoin payment risks covers depegs, network outages, and fraud. This page stays on failure of a company in the chain.

Where is your money at each stage of a payment?

Your exposure moves as the payment moves. A typical payout passes through five places, and at each one a different company owes you something.

1. In your wallet before the payout. Under your keys. A provider failure doesn't touch it.
2. In a custodial balance at the provider. You hold a claim on the provider. How strong it is depends on segregation and terms.
3. On the onchain leg. Once the transfer confirms, the stablecoins sit in the provider's flow. Blockchain transfers are final, so you can't pull them back yourself.
4. On the fiat leg. The provider or its partner has converted and sent the bank transfer. You hold a claim for the fiat until the recipient's bank credits it.
5. At the recipient's bank. Done. A provider failure after this point doesn't undo the payment.

Pre-funding adds a sixth place: fiat or stablecoins parked at the provider in advance so payouts can go out instantly. That's a standing custodial balance by another name. No pre-funding payouts explains the models.

Status tracking tells you which stage each payout is in. Payout statuses explained maps statuses to these legs.

What does the GENIUS Act say about issuer insolvency?

Section 11 of the GENIUS Act puts stablecoin holders first in line for the reserves when a permitted US issuer fails. The enrolled text does four things:

• Priority. A holder's claim has priority over the issuer's other creditors with respect to required reserves, shared ratably with other holders.
• Reserves outside the estate. Required reserves are excluded from the bankruptcy estate, though the automatic stay still applies to them.
• Faster redemption. A court can lift the stay for redemptions if reserves are available, and must use best efforts to enter a final order within 14 days after the hearing.
• Shortfall rule. If reserves fall short, the remaining holder claim gets first priority against the estate, up to the reserves the issuer should have held.

Two limits. These rules cover only permitted payment stablecoin issuers, and the Act takes effect January 18, 2027. The GENIUS Act timeline has the dates. A foreign-issued token follows its home country's law.

Section 4(e) adds a firm line: payment stablecoins shall not be backed by the full faith and credit of the United States, guaranteed by the government, or covered by FDIC deposit insurance or NCUA share insurance. Claiming otherwise is unlawful.

What does the GENIUS Act say about custodians?

Section 10 sets rules for firms that custody payment stablecoin reserves, stablecoins used as collateral, or the private keys used to issue them. Those firms must be supervised, must treat customer stablecoins and cash as the customer's property, and must keep them separate from their own assets.

The details that matter in a failure:

• Commingling is banned, with exceptions. Customer assets may sit in an omnibus account at a bank or trust company, as long as they're accounted for per customer.
• Customer priority. Customer claims on stablecoins the custodian holds rank ahead of everyone except other customers, with or without segregation, unless the customer consented otherwise.
• Self-custody software is excluded. Providing hardware or software for a customer's own custody doesn't make a company a custodian under section 10.

How far section 10 reaches into ordinary payment provider balances will depend on rules and courts. Don't assume it covers a balance until your provider can tell you which regime its custody falls under.

How do state money transmitter laws protect customers?

In the US, most payment providers are state-licensed money transmitters, and state law has its own protection: required permissible investments held in trust for customers.

The Money Transmission Modernization Act, the model law written by state regulators, says a licensee must hold permissible investments at least equal to its outstanding money transmission obligations (section 10.03). Those investments, even if commingled, are held in trust for customers if the licensee becomes insolvent or files for bankruptcy. Creditors who aren't beneficiaries can't reach them.

More than half of US states have enacted the model law in full or in part, according to the Conference of State Bank Supervisors. Two caveats:

• States that adopted it in part may differ on the trust provision.
• Whether a stablecoin balance counts as an outstanding money transmission obligation depends on the state and the product.

Ask your provider which licenses cover your specific flow. What a VASP is explains how these licenses map across countries.

What should you do the day a provider fails?

Act on the funds you still control first, then work through what's in flight. This is the runbook.

1. Stop new payouts and payins through the provider. Pause the integration with a feature flag.
2. Revoke token approvals. On EVM chains, an ERC-20 approve lets a spender pull up to the approved amount. Set any unused allowance to the provider back to zero.
3. Move payer instructions. Give payers new deposit details so new money doesn't land at the failed provider.
4. Sort in-flight payouts by stage using your last known status for each: not started, onchain leg confirmed, fiat sent, completed.
5. Reconcile your ledger against onchain records. Transaction hashes prove what left your wallet and when.
6. Contact affected recipients with the amount, date, and what you're doing about it.
7. Reroute through your backup provider for the corridors that matter most.
8. Preserve records and file claims. Quotes, payout IDs, hashes, statements, and the contract go to counsel.

Steps 2 and 7 only work if they were set up in advance. A team with no second provider on day one is negotiating a contract during an outage.

What should the contract say about failure?

Read the contract for failure, not for features. Six clauses decide most outcomes.

The due diligence question list covers the rest of the evaluation.

What does this not solve?

Planning reduces loss. It doesn't remove it.

• The law isn't in effect yet. GENIUS Act protection starts January 18, 2027 and isn't tested in court.
• Recovery takes time. Even with priority, redemption from a failed issuer or custodian can take weeks.
• Onchain transfers are final. Funds sent to the wrong place stay there. See whether stablecoin payments are reversible.
• Compliance holds extend exposure. A payout under review is in the provider's hands until it clears.
• Issuer freezes are separate. An issuer can freeze tokens at an address regardless of who custodies them.

How does BlindPay handle custody?

BlindPay supports both models and labels each one, so your failure exposure depends on which product a flow uses.

• External blockchain wallets (non-custodial). Stablecoins stay in your customer's wallet until a payout executes. The customer authorizes only the quoted amount: an ERC-20 approve scoped to the quote on EVM chains, a signed transaction on Stellar, or a token delegation on Solana. The blockchain wallets docs are explicit: BlindPay cannot access, freeze, or recover funds in a blockchain wallet.
• Managed wallets (custodial, beta). BlindPay generates the address and holds the keys, so there's no signing per payout. That's a custodial balance, with the trade-offs above.

When a payout ends refunded, the stablecoins go back to the funding source. A payout that ends failed doesn't refund automatically, and support handles it; payouts lists every status. Wires go out as SWIFT (POBO/COBO), with UETR tracking and MT103 confirmations, and payouts also run over Pix, SPEI, ACH, RTP, and SEPA with no pre-funding for external-wallet flows.

Write your failure runbook this week, and keep your largest balances in wallets you control. Then compare custodial and non-custodial off-ramps for each flow before you choose where the rest sits.