All guides
Digital assetsStablecoinsPayments

Stablecoin payments for business treasury and customer services

How the legal work changes when a business pays in stablecoins, moves customer value, runs wallets or cards, or issues its own payment token.

8 min read

Stablecoin payments create different legal work when a business pays its own bills, moves customer value or issues a token. Start with the activity, the contracting entities and the asset each recipient must receive. Then check the origin country and every destination where the service operates.

Choose the activity before the permission

Pay suppliers from the business treasury

The business buys or holds tokens for its own account and uses them to meet its own obligations. On those facts, start with a treasury policy and provider review. Set approved tokens and chains, exposure limits, signing powers and a fiat fallback. Before funding, the finance lead should confirm the permitted origin-country payment route and obtain the supplier's agreement on what counts as payment.

Offer payouts or a payment gateway

Collecting customer value, arranging conversion and undertaking to pay third parties require separate classification. Draw the customer journey alongside the funds flow, including who quotes the exchange and owes the payout. A licensed converter's involvement does not automatically cover the platform's activity. Singapore's MAS expressly identifies gateway arrangements that can constitute a digital payment token service without token possession. Review the operator's own permissions before launch. (MAS, Payment Services Act FAQs, 19 April 2024, Q25.2 and case study 2.)

Operate a customer wallet

Identify who controls private keys, recovery functions and transfer approvals. Under the EU Markets in Crypto-Assets Regulation (MiCA), safeguarding customer tokens or their means of access can constitute custody. A crypto-asset service provider (CASP) needs the relevant entitlement. Prepare custody terms covering ownership, segregation, subcustodians and return of assets. Assess payment permissions where the wallet supports e-money-token transfers. Open customer accounts only after the required permissions and operational controls are in place. (Regulation (EU) 2023/1114, arts. 3(1)(17), 59–60, 70 and 75.)

Launch a stablecoin-linked card

For a general-purpose card, separate the authorised issuer from the programme manager, token custodian and converter. Where tokens become fiat for card spending, identify when conversion occurs and who funds settlement. Agree prefunding, shortfall and depeg responsibilities in the issuer and programme contracts. The card issuer's payment permission and the token provider's entitlement must cover their respective services before activation. A programme brand does not establish either permission. (Directive (EU) 2015/2366 (PSD2), art. 37 and Annex I, points 3–5; MiCA, arts. 59–60.)

Issue a payment token

The issuer assumes obligations attached to the token, including applicable redemption and reserve duties. In the EU, a crypto-asset within MiCA's scope that purports to maintain a stable value by reference to one official currency is an e-money token, or EMT. Its ordinary EU public-offer or admission-to-trading route requires a bank or electronic money institution as issuer, plus MiCA's white-paper and other requirements. Asset-referenced tokens follow a different route; statutory exemptions need separate testing. Classify the proposed rights before choosing the entity or applying. (MiCA, arts. 2, 3(1)(6)–(7), 16–17, 48–49 and 54.)

Identify every party and balance

The token issuer, wallet provider, converter, payment institution and card issuer may be different legal entities. A payment institution performs its authorised payment services; an ordinary merchant receiving payment does not thereby become the issuer of the payment instrument. Match each contract and register entry to the entity performing the relevant activity. (PSD2, arts. 4(4), 11 and 37; MiCA, arts. 59–60.)

Use these questions to prepare the transaction map:

  • Who owns each bank balance and token balance, and who can instruct a transfer?
  • Does the provider hold customer property, purchase tokens as principal or owe a contractual balance?
  • Which exact token, issuing entity, network and native contract are approved?
  • Who accepts the conversion quote, pays fees and bears FX or depeg losses before and after receipt?
  • Which event satisfies the invoice or customer payout, and what proves that event?
  • Who must repay a failed payment, fund a refund or handle a card dispute, including after provider failure?

Include rejected transfers, partial payments, frozen addresses and insolvency in the map. Test refunds and returned payments as carefully as outgoing payments.

Check token rules and payment rules together

In the EU, MiCA authorisation or an eligible institution's Article 60 route covers specified crypto services. EMT transfers can also engage payment-services law because EMTs are electronic money. The EBA treats customer transfers and relevant custodial-wallet services as potential PSD2 activities. Its February 2026 opinion also addresses transfers back to the same customer. Structure any payment-provider partnership so that the authorised entity actually supplies the regulated service. (MiCA, arts. 48(2), 59–60 and 70(4); PSD2, arts. 4(25) and 37; EBA/OP/2026/01, paras. 8–15.)

The EBA's recommended general transition ended on 2 March 2026. Its conditional arrangements for pending applications do not authorise a new launch. MiCA's maximum grandfathering period ended on 1 July 2026. Check both the provider and the token: ESMA's October 2026 supervisory opinion addresses non-compliant stablecoins across services, including custody and transfers. (MiCA, art. 143(3); EBA/OP/2026/01, paras. 9–12; ESMA75-113276571-1742, paras. 12–14 and 21–27.)

In the UK, in-scope crypto exchange and custody businesses need FCA money-laundering registration. Assess existing payment and e-money permissions separately. The new FSMA crypto regime starts on 25 October 2027; its application window runs from 30 September 2026 to 28 February 2027. Registration or an application does not establish the future authorisation. (S.I. 2017/692, regs. 8, 14A and 56; S.I. 2017/752, reg. 138; S.I. 2026/102, reg. 1; FCA, What you need to do, updated 16 September 2026.)

For the UAE outside financial free zones, CBUAE permission and permitted token use require separate checks. CBUAE's licensing guidance lists payment token services among regulated payment activities and distinguishes in-principle approval from final authorisation. Confirm the provider's final permission and the permitted token and settlement route before enabling checkout. (CBUAE, Licensing, Types of Licences and Phase Two requirements.)

In Singapore, MAS says that single-currency stablecoins may qualify as digital payment tokens, depending on their characteristics. Assess the operator's token services and any account, transfer or merchant-acquiring services separately. MAS's September 2026 stablecoin consultation proposes legislative implementation; its future issuer standards should not be presented as existing universal holder rights. (MAS, Payment Services Act FAQs, Q23.4–23.8; Types of Payment Services; Consultation P015-2026, paras. 2.1–2.4.)

Origin-country controls remain decisive. For an Indian resident business, the export/import rules effective from 1 October 2026 incorporate prescribed receipt and payment methods. A foreign provider's permission does not establish a compliant Indian trade settlement. Have the authorised dealer confirm the permitted currency, channel and any required permission; use the permitted banking route unless another lawful basis is established. (FEMA 23(R)/2026-RB, regs. 4 and 8; FEMA 14(R)/2023-RB, reg. 3.)

Agree settlement and customer remedies

Approve the exact asset before relying on redemption. For native USDC on Ethereum, check Circle's published contract address and the redemption route for the holder's location. Circle's EEA policy requires corporate holders outside its existing customer base to open a redemption-only account. Its terms also address compliance checks, unsupported wrappers and stress restrictions. Assess those contractual provisions alongside mandatory rights. (Circle, USDC Contract Addresses, Ethereum mainnet entry; MiCA Redemption Policy, 15 September 2026, §§ 1–3, 5–6 and 8.)

An EU EMT holder's statutory redemption claim differs from the price and timing offered by a secondary-market buyer. Review reserve custody and recovery arrangements, issuer freeze powers, and whether the business can actually access redemption. Custody segregation addresses a different exposure from issuer failure. (MiCA, arts. 49, 54–55, 70 and 75.)

Specify the agreed payment asset and receipt event in the invoice or payout terms. If fiat remains due, the proposed clause should require the designated recipient's available bank credit. If tokens are accepted, define the quantity or valuation rule, approved address, chain confirmation and any custody-account credit. Allocate losses at each stage and identify the entity owing the unpaid balance. Blockchain confirmation alone does not establish all those contractual facts.

For cards and customer payments, document merchant refunds, scheme chargebacks and statutory claims separately. EU unauthorised-payment and failed-execution rules have their own scope. Business-customer agreements can vary specified provisions, but Article 61 does not permit waiver of Article 73 itself. Allocate repayment funding and tracing obligations without treating a blockchain transfer as resolving the customer's claim. (PSD2, arts. 2, 61, 73 and 89.)

Read the guide for the decision ahead

When does a supplier invoice count as paid?

Stablecoin payments for cross-border supplier invoices examines token acceptance, fiat receipt and intermediary failure through a Brazil-to-France payment arrangement.

Does the provider have permission for this service?

How to check whether a crypto firm is authorised explains entity, service, territory and date checks in EU and UK registers.

What must an EU token issuer establish?

How to issue a stablecoin in the EU separates EMT and asset-referenced-token routes, including issuer eligibility, reserves and redemption.

Which token can a UAE merchant checkout accept?

UAE payment-token permission for an Indian merchant checkout examines mainland token restrictions and the boundary between a technical provider and a regulated operator.

Map the business funds flow

Own-account treasury use starts with provider, contract and treasury-policy review. Customer payouts, wallets and cards require an activity and permissions assessment. Token issuance adds issuer eligibility, reserve and redemption work.

Map the business funds flow with Licentium. Bring the target countries, proposed token, transaction diagram and provider terms. The review can identify the required permissions, contractual allocations and product changes, with the evidence needed before the proposed activity proceeds.

Request a consultation
guideDigital assetsStablecoinsPayments