Break the brand down into the legal entities actually involved
Behind a single channel brand there may be an exchange company, a custodian, a payment institution and several banks. The counterparty should be required to identify, for each step, the contracting entity, the entity actually performing the obligations and the person controlling the assets, and to explain whether subcontractors are used. If the contract is signed by Company A, stablecoins are transferred to Wallet B, and fiat currency is paid by an unrelated Company C, the relationships among the three, their legal basis and their respective responsibilities should be verified, rather than merely checking the licence displayed by Company A.
Licences must correspond item by item to activities, customers and jurisdictions
The EU MiCA regime distinguishes between crypto-asset service authorisation and the qualifications required for related payment services; holding a crypto-asset licence does not mean that all fiat currency payments can be completed unconditionally. UK payment agents must likewise act within the corresponding agency relationship and scope. Actual due diligence should therefore check official registers, licence restrictions and the uses accepted by banks, and in particular verify who is authorised to accept customer assets, effect exchanges, hold assets in custody and make payments, rather than merely asking whether a licence exists.
Four documents are more useful than a one-line promise that funds will arrive
It is advisable to review at least the service contract, the fund-flow chart, the fund-protection statement and the exception-handling procedures. The contract should specify when quotations take effect, fee deductions, completion of payment, the currency of refunds, reserves or security deposits, and dispute resolution; the fund-protection statement should explain whether customer assets are segregated from the channel operator's own operating property and who has withdrawal rights. These are due-diligence recommendations; the specific statutory obligations remain governed by the applicable market, and safety cannot be presumed merely because the counterparty describes an account as a "segregated account".
Service-suspension scenarios should be rehearsed before signing
One may assume that stablecoins are frozen by the issuer, that a bank returns a remittance, or that the channel loses its authorisation, and should then ask, item by item, how orders that have not yet been exchanged, orders already exchanged and orders for which payment has already been sent would each be handled. The EU MiCA regime emphasises, in relation to outsourcing, that a licensed service provider cannot thereby transfer its own responsibility; even if that rule does not apply directly to you, you should check whether the upstream disclaimers are unbalanced against the commitments you have made to your customers. Any replacement channel must complete legality and data review in advance; customer funds must not be taken over through unfamiliar accounts on an ad hoc basis.
Recommended actions
- Establish a checklist mapping "legal entity—activity—licence—account/wallet", and verify it against official registers.
- Review the four documents: the service contract, the fund flow, the fund protection arrangements and the exception-handling procedures.
- Rehearse three scenarios—freezing, returned remittances and licence revocation—and clarify responsibility for tracing funds in transit and for returning them.
Information note: This article provides general information and does not replace legal advice based on specific facts.
References
- FCA Handbook PERG 15.4:Small payment institutions, agents and exempt bodies — UK Financial Conduct Authority (FCA)
- Safeguarding requirements for payment institutions and electronic money institutions — UK Financial Conduct Authority (FCA)
- MiCA Article 59: Authorisation — European Parliament, Council of the EU / ESMA official rulebook
- MiCA Article 70: Safekeeping of clients’ crypto-assets and funds — European Parliament, Council of the EU / ESMA official rulebook
- MiCA Article 73: Outsourcing — European Parliament, Council of the EU / ESMA official rulebook
