Valuto
Built like the stakes are real
Moving crypto onto a regulated card rail is a promise about worst days — custody, sanctions and card data. These are the design decisions that hold when things go wrong.
Card data never touches us
Raw card numbers live only inside the issuer's HSM-backed PCI token vault. The rest of the platform handles opaque tokens — keeping Valuto outside full PCI-DSS scope by construction.
Cold-storage custody
The majority of USDT sits in offline cold storage; only a small hot-wallet float covers operational liquidity. Deposits are detected on-chain and posted to a double-entry ledger.
Sanctions & OFAC screening
Every applicant and counterparty is screened against the OFAC SDN and restricted-country lists in real time. A match blocks registration immediately — no manual override.
Hard geo-rules (Venezuela)
Restricted jurisdictions are blocked by IP, residence and registered address. Venezuela is a red line: blocked regardless of passport if you're located or resident there.
Tiered KYC before anything moves
Cards ship frozen. Tier 1 (ID) unlocks a virtual card at low limits; Tier 2 (proof of address + liveness) unlocks the physical card and higher limits. Rejection terminates the card.
AML velocity limits
On-ramp purchases are capped ($50–$1,000), and high-velocity or structured transfers are flagged for review. Suspicious patterns route to compliance before funds settle.
PII encrypted at rest
Identity documents and personal data are encrypted at rest, access-logged and minimised. Every money-moving action requires a fresh passkey step-up — a stolen session isn't enough.
Double-entry, trigger-enforced
Every deposit, conversion, spend and payout posts a balanced journal entry; anything that doesn't balance is rejected. Books — crypto and fiat — that can't silently drift.
Claims you can run yourself
The demo executes the same code paths described here, and the decline reasons in the app show you the engine's actual reasoning — sanctions blocks and limits included.