·06 / SECURITY
Reserved.
Audited. Enforced.
How we hold money, prove the holdings, and respond when something goes wrong. Compliance copy reviewed by counsel; technical claims verified by attestation.
SEGREGATED
Fiat balances
Held by our regulated banking partners in segregated client-money accounts. Not commingled with operating capital.
1:1 BACKED
Stablecoin balances
USDC and EURC are tokenized claims on Circle's reserve. We do not lend, rehypothecate, or stake customer balances.
- Cadence
- Quarterly
- Auditor
- Deloitte (issuer attestation)
- Method
- ISAE 3000 / agreed-upon procedures
- Latest report
- Published Q1 2026 · linked from /security/attestations
UNITED STATES
Money Transmitter (via partner)
NMLS via partner — see /imprint
EUROPEAN UNION
EMI / VASP (via partner)
Partner registration in /imprint
UNITED KINGDOM
FCA-registered cryptoasset firm (via partner)
FRN listed on /imprint
- Provider
- Iron — hosted Link mode
- PII flow
- Submitted directly to Iron · LurraPay never sees raw documents
- Retention
- Per Iron policy and partner-bank requirements
- Sanctions
- Continuous screening across OFAC, EU, UK, UN lists
Suspected security issue or unauthorized access? security@lurrapay.com · disclosure window 90 days · responsible disclosure rewarded.
·09 / OPEN ACCOUNT