Building Trust: How We’re Protecting Users at RedotPay

By 2028, we expect stablecoin-powered cards to be moving $50 billion a year in annualized spend.

Every dollar of that belongs to someone. It’s a product of their hard work, their rent or school payment, or the capital that powers their business. In an environment where threats and exploits seem increasingly commonplace, it’s no wonder that security is top of mind for users.

With that in mind, here’s what we’re doing to continually keep our users safe.

Accountability at scale

Since our founding in 2023, RedotPay has become the largest stablecoin-powered payment card firm. More than 8.5 million people across 100 countries use our product, and we process roughly $14 billion in payment volume annually.

This scale comes with a solemn responsibility to ensure that our users are safeguarded. That’s why we’ve proactively sought and obtained two critical independent certifications —SOC 2 Type II and ISO/IEC 27001—for data privacy and information security, respectively.

We’ve also undergone annual financial audits, and just completed an independent review of our anti-money laundering/ countering the financing of terrorism (AML/CFT) capabilities by a Big Four firm. We plan to announce further details regarding this review in early September.

We’ve also undergone annual financial audits, and just completed an independent review of our anti-money laundering/ countering the financing of terrorism (AML/CFT) capabilities by a Big Four firm. We plan to announce further details regarding this review in early September.

Advanced controls for asset security and custody are absolutely critical to us. We’ve been working with top tier custodians and service providers such as Fireblocks and Circle, and we’ve also partnered with the best security assurance firms to independently stress-test our security frameworks.

Finally, we’ve grown our team to be able to handle the increasing demands of our growing business. We now have nearly 300 full-time staff, and have grown quickly in departments like product development, security, compliance, legal, regulatory affairs, and customer service.

Any company can call itself secure. We’ve chosen to validate our security through proactive, independent review by respected, specialized firms and international certifications. We will continue to build and expand our security measures. Complacency is not an option.

A broader commitment to regulatory compliance

Security is one piece of the puzzle. We also believe the future will belong to companies to earn licenses in key markets. Regulatory compliance builds trust, bakes in accountability, and unlocks new users.

In addition to our Hong Kong licenses, we recently received our first US Money Transmitter License, with applications pending in more than 20 additional states. This will support our future expansion to serve the US market. We are also in the process of applying for licenses in several other major jurisdictions. We will announce positive developments in these markets as soon as we can.

Whether or not to pursue licenses is a key litmus test for firms in our industry. It can be expensive and time-consuming, and sometimes requires trade-offs in terms of what types of exciting products and services we can offer users. But for longevity, reliability, and trust, it’s an obvious choice for us.

The road ahead

We believe stablecoin-powered payments should be fast and simple, but never at the expense of proper safeguards. As stablecoin payments move into the mainstream, companies like ours carry a responsibility to hold themselves to the highest standards of security, transparency, and regulatory compliance.

We aim to lead by example. Thank you for using us and giving us your trust.

This publication is for informational purposes only and does not constitute legal, financial, investment, or other professional advice. It does not represent an offer or solicitation to buy or sell any products, securities, or financial instruments. The information is provided on an “as is” basis as of the date indicated and is subject to change without prior notice. Rabbit7 Holding (BVI) Limited (“RedotPay”) makes no representations or warranties, express or implied, regarding the completeness, accuracy, reliability, or timeliness of the content. RedotPay, along with its directors, officers, agents, employees and affiliates, expressly disclaims any liability for any direct, indirect, special, incidental, consequential, punitive or exemplary damages, arising from the use of or reliance on this publication. Readers should seek independent professional advice before taking any action in relation to the matters concerned herein. This publication is strictly confidential and may not be reproduced, distributed or transmitted in any form or by any means without RedotPay’s prior written consent. The English version shall prevail in the event of any discrepancy or inconsistency between the various language versions hereof.