> ## Content Index > Fetch the complete content index at: https://coti.io/blog/llms.txt > Use this file to discover other available public pages before exploring further. # Mastercard Stablecoin Security: What It Checks Before a Stablecoin Payment Moves - URL: https://coti.io/blog/mastercard-stablecoin-security/ - Published: 2026-10-22T20:59:07.000Z - Updated: 2026-10-22T20:59:07.000Z - Author: Antonio - Tags: News, Privacy Mastercard Stablecoin Security is a new risk intelligence service, announced by Mastercard on October 19, 2026 at Money20/20 USA, that lets banks and payment companies score a stablecoin payment for fraud, scam and sanctions risk before the funds move on-chain, according to Mastercard's [press release](https://www.mastercard.com/us/en/news-and-trends/press/2026/october/Mastercard-brings-risk-intelligence-to-stablecoin-payments.html?ref=coti.io). It's built for financial institutions rather than individual users, and it shows how much a regular stablecoin transfer on a public blockchain already reveals. *Current as of October 22, 2026.* ## What Mastercard Announced **Stablecoin Security** - What it is: a risk intelligence service for financial institutions, delivered through an API (a connection their own systems call) - Announced: October 19, 2026, at Money20/20 USA in Las Vegas - First partners: Borderless.xyz and Keyrails, both part of Mastercard's Start Path startup program for blockchain and digital assets - Availability: launching first in North America, with worldwide commercial availability expected in 2027 - Next step: Mastercard says it will expand the service in 2027, including through BVNK, the stablecoin infrastructure company it acquired in August 2026 Mastercard describes it as building on its existing crypto tools, Crypto Credential and Crypto Secure. "Stablecoins are creating new possibilities for value exchange, but financial institutions need the right intelligence and controls to participate with confidence," said Ann Johnson, Mastercard's executive vice president for Security Solutions, in the release. ### What Does It Check? According to the release, the service analyses signals including: - The transaction's context - Where the funds came from - Exposure to restricted parties - Scam indicators It combines payment intelligence with blockchain analytics, produces a risk score before a payment is completed, and plugs into the fraud, compliance and case management tools an institution already runs. Mastercard's example is a coffee shop in Boston paying a supplier in Brazil through its bank, which uses stablecoins to move the money. Before the payment is sent, the bank's service provider uses the service to help the bank decide whether the payment can go ahead or should be reviewed further. ### Why Mastercard Says It's Needed Mastercard points to a study of 593 million stablecoin transfer events across 141 million Ethereum transactions in 2025\. That's a Bank for International Settlements [working paper](https://www.bis.org/publications/working-paper-1359-anatomy-stablecoin-transactions?ref=coti.io), published June 11, 2026, covering USDT, USDC and PayPal USD. Its abstract says nearly 60 percent of transfer events happen inside complex transactions, where a stablecoin moves as one step of a bundle that may include trading, lending or settlement. Mastercard says this kind of complexity makes it harder for institutions to assess risk across the full payment journey. ![Flow diagram titled How Mastercard Stablecoin Security fits into a payment, based on the example in Mastercard's announcement. Step 1, Payment starts: a coffee shop in Boston pays a supplier through its bank. Step 2, Check before sending: transaction context, where the funds came from, exposure to restricted parties and scam indicators. Step 3, Risk score: the bank decides to proceed or review further. Step 4, Funds move: stablecoins move on-chain across the border. Step 5, Supplier paid: the supplier in Brazil receives the funds and converts them to local currency. Banner: launching first in North America, with worldwide availability expected in 2027](https://coti.io/blog/content/images/2026/10/mastercard-stablecoin-security_ASSET_2.webp) ## What It Means for Your Privacy Checks like this work because public blockchains are open by design. On Ethereum and similar chains, every regular stablecoin transfer is a public record of sender, recipient and amount, as our [stablecoin privacy guide](https://coti.io/blog/stablecoin-privacy/) explains. Where the funds came from is that same public history, which anyone can follow on a [block explorer](https://coti.io/blog/how-to-read-a-block-explorer/), though bundled transactions take more work to read, and which analytics firms label and score. So Stablecoin Security doesn't change what the chain records. What it adds, according to Mastercard, is combining that public record with payment information at the moment an institution decides whether to send. ### What Mastercard Hasn't Said Yet As of October 22, 2026, the release doesn't say: - Which chains and stablecoins the service covers - What customer data institutions share with it, and how long it's kept - Whether customers are told when a payment is flagged for review - When the North American launch happens Our take: screening and privacy aren't opposites. The useful question for any payment is what each party can see. Here, your bank already knows who you are, the screening adds what the public chain shows about the addresses involved, and on a public chain anyone can still see the transfer itself. In a bank-run payment like Mastercard's example, those addresses are likely to belong to the bank or its provider rather than the customer, though Mastercard doesn't spell this out. ## What It Means for COTI Users Mastercard's announcement doesn't mention COTI. COTI's privacy tools deal with a different question: what the public can read on-chain. COTI's privacy works on amounts, not on the fact that a payment happened. COTI's Privacy Portal has been live on Avalanche C-Chain since September 2026, according to [COTI's announcement](https://cotinetwork.medium.com/coti-x-avalanche-privacy-built-for-business-0110b3897d00?ref=coti.io). COTI's [Privacy Portal documentation](https://docs.coti.io/coti-documentation/coti-privacy-portal?ref=coti.io) says balances and transfer amounts stay encrypted on-chain. The sender and recipient addresses aren't encrypted, and moving tokens into or out of the Portal is a public transaction with a visible amount. The Portal's [terms of use](https://privacyportal.app/terms?ref=coti.io) say its operator may apply sanctions screening, wallet screening, transaction monitoring and blocking, and make no guarantee that any activity will be hidden from any person or authority (accessed October 22, 2026). On COTI's [roadmap](https://coti.io/roadmap/?ref=coti.io), as of October 22, 2026, scoped sharing, meaning read-only access for accountants, auditors or tax authorities, is planned for Q2 to Q3 2027, and a compliance layer with sanctions screening tools is planned for Q4 2027 to Q1 2028\. Neither is live. ## Frequently Asked Questions ### Does Mastercard Stablecoin Security watch my wallet? It's sold to financial institutions and their service providers, not to individuals, and Mastercard describes it as assessing payments that pass through those institutions. The release doesn't say whether the service looks at wallets outside those payment flows. ### Can it block a stablecoin payment? Mastercard says it produces a risk score that helps an institution decide whether a payment can proceed or should be reviewed further. The decision stays with the institution. ### Is it available now? Mastercard says it's launching first in North America, with worldwide commercial availability expected in 2027\. The release doesn't give a date for the North American launch. ## Where to Go From Here Expect more checks like this as banks start moving money in stablecoins, so it pays to know what a public chain shows about you. To see what COTI's privacy tools encrypt, start with the [Privacy Portal documentation](https://docs.coti.io/coti-documentation/coti-privacy-portal?ref=coti.io). For what can still leak, such as timing, gas and which contract was called, see COTI's [Privacy-on-Demand overview](https://docs.coti.io/coti-documentation/privacy-on-demand/what-is-privacy-on-demand?ref=coti.io). *Details checked October 22, 2026\. Product features and dates can change. Nothing here is financial or legal advice. COTI will never ask for your seed phrase or private key, and only COTI's official channels (coti.io, docs.coti.io, COTI's Medium blog and its official X and Telegram) carry announcements.* ## Sources - [Mastercard introduces risk intelligence to enable more secure stablecoin payments](https://www.mastercard.com/us/en/news-and-trends/press/2026/october/Mastercard-brings-risk-intelligence-to-stablecoin-payments.html?ref=coti.io), Mastercard, published October 19, 2026, accessed October 22, 2026 - [The anatomy of stablecoin transactions](https://www.bis.org/publications/working-paper-1359-anatomy-stablecoin-transactions?ref=coti.io), BIS Working Papers No 1359, published June 11, 2026, accessed October 22, 2026 - [COTI Privacy Portal](https://docs.coti.io/coti-documentation/coti-privacy-portal?ref=coti.io), COTI documentation, accessed October 22, 2026 - [What is Privacy on Demand?](https://docs.coti.io/coti-documentation/privacy-on-demand/what-is-privacy-on-demand?ref=coti.io), COTI documentation, accessed October 22, 2026 - [Privacy Portal Terms of Use](https://privacyportal.app/terms?ref=coti.io), CV2 Innovation Limited, accessed October 22, 2026 - [Roadmap](https://coti.io/roadmap/?ref=coti.io), COTI, accessed October 22, 2026 - [COTI x Avalanche: Privacy Built for Business](https://cotinetwork.medium.com/coti-x-avalanche-privacy-built-for-business-0110b3897d00?ref=coti.io), COTI, published September 16, 2026, accessed October 22, 2026