NOWPayments and BlockSec jointly released a cryptocurrency payment security and technical compliance

Amsterdam, Netherlands, July 27, 2026

NOWPayments and BlockSec jointly released a free checklist covering 25 control measures in 9 safety and technical compliance categories.

Free checklist

Enabling cryptocurrency payments is easy, but the real difficulty is ensuring that the entire payment process is protected from risks such as key leaks, suspicious transactions, account takeovers, or stablecoins freezing.

NOWPayments is a global cryptocurrency payment gateway that supports more than 350 cryptocurrencies and more than 30 stablecoins. Extensive asset support, automatic redemption and flexible settlement options help merchants, online platforms and large enterprises process cryptocurrency businesses on a large scale. NOWPayments and blockchain security and compliance company BlockSec jointly created this "Cryptocurrency Payment System Security and Technical Compliance Checklist."

This guide translates broad safety principles into specific verifiable inspections for safety, operations, compliance and product teams to work together. It can be used before a company begins accepting cryptocurrency payments, during vendor or architecture reviews, or as part of a regular control assessment.

The baseline

checklist built for daily use covers 25 control measures in 9 areas:

Private key and wallet security
Smart contract security
Transaction verification and signature
Identity, account and operations
DNS and domain name security
On-chain monitoring and event response
Anti-money laundering/counter-terrorism financing technical compliance
stablecoin freezing risk management
Continuous improvement

Each item is a control point that needs to be verified, not a general recommendation. Teams can mark them as "confirmed", add supporting evidence, designate people in charge, and record what needs to be completed next. This transforms broad security discussions into hands-on meetings with clear responsibilities and helps identify potential vulnerabilities before interdepartmental issues turn into operational or financial risks.

This checklist helps companies answer the following questions:

Can a single person independently transfer production funds?
Are operating wallets separated from reserve wallets?
Is the transaction approval system isolated from public infrastructure?
Can suspicious transfers or rights changes be detected in real time?
Is there a tested solution for stablecoin freezing events?

"The most common mistake is equating cryptocurrency payments with ordinary online payments. On-chain transfers are irreversible, so weak key management, uncensored transaction approvals, or insufficient compliance checks can turn a mistake into a permanent loss." said Andy Zhou, co-founder of BlockSec and professor at the Chinese University of Hong Kong.

From safety principles to daily operations

Cryptocurrency payment risks rarely involve just one department. Engineering departments may manage the infrastructure to approve transactions, compliance departments may screen transactions, and operations departments lead the response when alerts are triggered. The checklist provides these teams with a shared record of existing controls, evidence, who is responsible and next steps. For merchants, marketplaces, game and interactive entertainment operators, SaaS companies, and Web3 platforms, this makes security reviews a repeatable process rather than a one-time task.

"Real-time visibility is the key to fast event response. It could mean controlling the difference between losses and money being lost through swaps, cross-chain bridges or withdrawal points." Zhou added. If stolen funds are traced to an exchange or crypto service provider, the window of time for action may be short. "Companies should keep transaction hashes and addresses, track the flow of funds, and contact each other through the exchange's official security or compliance channels as soon as possible." Zhou said.

This checklist is an educational resource and is not a substitute for certification or legal advice. Its design principles are designed to remain effective as payment infrastructure and security threats change.

Safe without adding extra friction

Strong controls should help companies expand their cryptocurrency businesses without making daily tasks unnecessarily complicated. NOWPayments also provides a zero-fee payment feature that allows companies to send bulk payments to the ChangeNOW Pro wallet at zero cost. In public testing, payments were made in seconds. The recipient confirms each transfer via email before the funds are transferred.

For alliance programs, marketplace platforms, creator platforms, remote teams, game projects, and Web3 communities, these two products address different parts of the same process: checklists help strengthen control, while the payment process reduces fees, manual collection of wallet addresses, and repetitive labor.

Get a free checklist

This guide is designed for businesses that have accepted cryptocurrency, are about to launch cryptocurrency payments, or want to revisit their existing payment and settlement settings. Teams can use it to identify control gaps, designate people responsible, and develop a practical list of follow-up actions before those gaps turn into accidents.

About NOWPayments

NOWPayments is one of the best cryptocurrency payment gateways, supporting more than 350 cryptocurrencies and more than 30 stablecoins. Its complete crypto business ecosystem combines extensive asset coverage, automated redemption and flexible settlement options for merchants, online platforms and global enterprises.

About BlockSec

BlockSec is a full-stack blockchain security and cryptocurrency compliance service provider that combines research, products and services to cover smart contract audits, real-time security monitoring, attack prevention, compliance and on-chain investigations.