Loading market data...

New 25-Control Checklist Aims to Fix Crypto Payment Security Gaps

New 25-Control Checklist Aims to Fix Crypto Payment Security Gaps

On July 27, NOWPayments and BlockSec released a free Crypto Payment System Security and Technical Compliance Checklist. The resource contains 25 controls across nine categories, designed to help teams avoid common pitfalls when accepting crypto payments. The checklist is available immediately from both companies.

What the checklist covers

The nine categories include private key and wallet security, technical compliance, transaction verification and signing, identity/accounts/operations, DNS/domain security, on-chain monitoring and incident response, AML/CFT technical compliance, stablecoin freeze risk management, and continuous improvement. Each control can be marked as confirmed with supporting evidence, assigned an owner, and have next steps recorded.

Andy Zhou, co-founder of BlockSec and a professor at the Chinese University of Hong Kong, said the most common mistake is treating crypto payments like normal online payments. On-chain transfers are final — there's no chargeback or reversal. That difference is why the checklist emphasizes transaction verification and wallet security.

Who it's for

The checklist is aimed at security, operations, compliance, and product teams. It can be used before launching crypto payments, during vendor or architecture reviews, or as part of regular control assessments. NOWPayments, which supports over 350 cryptocurrencies and more than 30 stablecoins, also offers zero-fee payouts to ChangeNOW Pro wallets.

What it isn't

The press release, dated July 27 from Amsterdam, makes clear the checklist is an educational resource. It is not a certification and does not replace legal advice. Teams are expected to adapt it to their own risk profiles and regulatory requirements.

The checklist is free. No registration was mentioned. For now, the industry gets a practical tool — no strings attached.