Tap Protocol

Emerging market central banks are pushed toward two options that both look wrong.

Option A: Ban. Prohibit stablecoins entirely. Volumes do not disappear. They move to P2P desks, OTC brokers, and informal channels. The central bank loses visibility. Companies that want to operate legally cannot. Tax revenue evaporates. Financial intelligence goes dark.

Option B: Open. Regulate stablecoins broadly: trading, DeFi, retail payments, cross-border, everything at once. The moment the regulatory door opens, every use case floods in. Speculative trading overwhelms payments. Capital flight accelerates. The central bank gets overwhelmed.

Most emerging markets choose neither. They choose inaction, which delivers the worst of both worlds: no oversight and no growth.

The deeper problem is a routing error. When stablecoins arrived, most EM countries routed them to the Capital Markets Authority — the regulator that handles securities, trading, and investment products. But stablecoins used for cross-border payments are payment instruments, not investment products. The CMA inherited a trading framework for what is fundamentally a settlement problem — the wrong regulator, applying the wrong framework, tracking the wrong metrics.

Sub-Saharan Africa has 42 national currencies — virtually none with direct cross-border liquidity. Every payment requires a USD intermediary, and that intermediary infrastructure is contracting. Chapter 2 quantifies the damage: a $120B trade finance gap, 34.2% CBR decline, and $205B already flowing through informal stablecoin channels.

Sub-Saharan Africa's 42 currencies and declining CBR create a structural gap. PAPSS addresses intra-African fiat flows. In parallel, licensed PSPs offer a complementary digital settlement layer — regulated stablecoin rails for corridors where traditional infrastructure is slow, expensive, or absent.

Research across 9 emerging markets reveals a consistent 5-stage pattern:

1. Ignore: stablecoins treated as irrelevant or too small to regulate
2. Ban: reactive prohibition after volumes become visible
3. License Trading: exchange or VASP framework adopted from developed markets
4. Stuck on Payments: trading framework cannot accommodate cross-border settlement
5. Regulatory Arbitrage: companies relocate to friendlier jurisdictions

The striking finding is that 0 out of 14 EM sandbox participants across tracked programs have graduated to full, unrestricted authorization for cross-border stablecoin payments. Existing sandboxes are designed for Stage 3. They cannot reach Stage 4. The reason: all 14 were routed through CMAs. The Tap Protocol routes directly to the CB — starting at Stage 4, skipping the trap entirely.

Sub-Saharan Africa alone faces a $100-120 billion annual trade finance gap. SMEs, which constitute 80-90% of businesses, are locked out of $331 billion in funding. Sovereign debt service consumed $163 billion in 2024, with approximately 70% denominated in USD, crowding out the private sector.

This is not cyclical. This is structural. And it is not only Africa. Pakistan, Bangladesh, Argentina, Turkey, Egypt, and dozens of other emerging markets face variants of the same crisis.

40.9% — USD-specific CBR decline. 44.2% — Eastern Africa's banking connections lost.

While cross-border payment demand rises, the infrastructure to process it is collapsing. Global banks are cutting African correspondent relationships to reduce compliance costs. Banks are not coming back. The compliance cost of maintaining these relationships exceeds the revenue.

Commodity price drops reduce USD inflows → central banks ration dollars for debt service → businesses pushed to parallel market → stablecoin adoption accelerates → formal FX channels lose volume → inflation spikes → local currency devalues → cost of servicing USD debt increases → repeat.

The market has already chosen. $205 billion in on-chain stablecoin value moves through Africa annually. The overwhelming majority — 70-80% — is USDT on the Tron network, flowing through P2P desks and OTC brokers with zero regulatory oversight.

After filtering bots, self-sends, and exchange-to-exchange flows, approximately $125 billion in stablecoin value across emerging markets represents genuine real-economy payments. All of it flows invisible to regulators.

The full picture, in three layers. Global cross-border payments are projected to reach $320 trillion annually by 2030. Total stablecoin transaction volume hit $33 trillion in 2025 (+72% YoY). The slice that matters — genuine cross-border business payments settled via stablecoins — was approximately $4 trillion in 2024, growing at 40%+ year-over-year. B2B stablecoin payments alone grew 730% in 2025.

The crossover point. Bloomberg Intelligence projects stablecoin payment flows to reach $56.6 trillion by 2030 (~80% CAGR). At current growth trajectories, stablecoin payment volumes are on track to exceed stablecoin trading volumes by 2028-2029.

Our analysis of draft regulatory frameworks across 9 emerging markets reveals a consistent pattern: every framework addresses trading, AML/CFT, and consumer protection. None addresses the balance of payments recording gap created by cross-border stablecoin flows.

The mechanism is straightforward. A cross-border stablecoin payment operates as a "fiat sandwich": the sender converts local currency to USDT via a P2P marketplace or local exchange (visible to the central bank as a domestic person-to-person payment). The USDT transits on-chain to a counterparty abroad (invisible). The recipient converts to local fiat (invisible). The domestic legs look like ordinary mobile money or bank transfers. The cross-border intent — and therefore the balance of payments impact — is completely hidden from the International Transactions Reporting System (ITRS).

Anonymized quantification from our research across multiple jurisdictions:

The common error in draft frameworks: regulators draft stablecoin rules to license trading and enforce AML — which is necessary, but insufficient. Without mandating ITRS-equivalent reporting from stablecoin on/off-ramp operators, a draft framework formalizes the market without closing the data gap. The central bank gets a licensed market it still cannot see in its BoP statistics.

The Tap Protocol's regulatory reporting layer (Chapter 5) is designed specifically to close this blind spot. Licensed operators submit aggregate data — volumes, corridors, settlement speed, compliance rates — in a format the central bank defines. At Tier 1, this is 7 fields in a weekly CSV. The cost barrier is institutional willingness, not technology. The information value is permanent.

These spreads are a tax on informality. A 5% spread on a $100K shipment = $5,000 that a business pays because legal, efficient settlement doesn't exist.

The dollar shortage is not an abstraction. It destroys specific companies and specific supply chains:

• GlaxoSmithKline (GSK) ceased operations in Nigeria — unable to repatriate earnings or source USD for raw materials. Asthma inhalers that cost ₦8,000 rose to ₦70,000 on the parallel market.
• Procter & Gamble wrote down $0.8 billion in Nigerian assets, citing inability to convert naira to dollars at viable rates.
• $850 million in airline funds trapped — Emirates, British Airways, and other carriers had revenues locked in local currencies they could not convert.
• Pakistan's pharmaceutical sector saw output drop by 55% during acute FX shortages — not because of demand collapse, but because manufacturers could not import active pharmaceutical ingredients priced in USD.

Ethiopia's banking system imposes letter-of-credit fees of up to 10.25% on imports. Wait times for FX allocation: 4-12 months. For an SME importing $500K in goods, this means $51,250 in fees and up to a year of working capital locked.

The contrast is stark: a $100,000 cross-border payment via USDT settles in minutes at a cost of approximately $1. The same payment through formal banking channels: 7-21 business days, 3-7% in fees, and no guarantee of FX allocation.

The infrastructure works. What is missing is the supervisory framework to bring these flows inside the regulatory perimeter. The Tap Protocol is designed as stablecoin-agnostic — accommodating USDT (dominant, EM-native), USDC (institutional, compliance-first), and future issuers within the same managed transit architecture.

For an SME operating on 15-25% gross margins and importing $50,000/month, the combined effect — lower spreads + zero settlement delay — can recover $3,000-5,000/month in effective costs.

At enterprise scale, the numbers are transformative. A $10 million shipment trapped in a 60-day bank settlement cycle represents $250,000-330,000 in capital costs alone. The same payment settled via stablecoins in minutes, at a 0.1-1% spread in a liquid corridor, costs $10,000-100,000 — an order of magnitude less.

Isolating cross-border payments (B2B settlement + consumer remittance) as Stage 1 is not a limitation — it is a deliberate risk management strategy:

1. Dollarization risk — neutralized. Stablecoins serve as a settlement instrument — seconds in transit, not months in savings.
2. Speculation risk — excluded by design. B2B payments are not trading. No exchange activity, no speculative positions.
3. Consumer exposure — controlled by design. Consumer remittance follows the identical fiat sandwich: consumer sends fiat, receives fiat. Stablecoins are handled entirely by licensed operators.
4. Regulatory scope — manageable. Instead of attempting to regulate an entire asset class, the central bank oversees one payment service with a defined set of licensed operators.

This is not "regulating crypto." This is licensing a specific payment service — exactly what telecom regulators did when they didn't license "all communications" but specific services to specific operators.

Sequencing: Stage 1 (cross-border payments) → trust built → Stage 2 (limited store of value) → RWA (future track). Each stage requires evidence from the previous. No skipping.

Stage 1: Cross-Border Payments — B2B settlement + consumer remittance. Identical fiat sandwich model for both. Stablecoin in transit within minutes. Neither business nor consumer touches stablecoins. Zero dollarization risk. Existing PSP consumer protections apply.

Consumer safeguards (Stage 1): Fund safeguarding at licensed operator. FX rate transparency and fee disclosure. Complaint handling and dispute resolution. Simplified KYC for low-value remittance (aligned with FATF risk-based approach).

Stage 2: Limited Store of Value (graduation after 12+ months of proven Stage 1). Licensed FIs may hold stablecoin balances on behalf of clients in custodial accounts. Containment: transitional balance caps (%-based, jurisdiction-specific), inter-FI transfers within licensed perimeter only (ADGM model), fiat-only exit from perimeter, no interest/yield (GENIUS Act principle), aggregate reporting thresholds.

Graduation trigger: Stage 1 sandbox KPIs met for 12+ months. Compliance rate >95%. Regulatory reporting operational. Bilateral MOUs in place.

Central bankers are right to fear dollarization. The evidence is concrete:

• Argentina: Over 50% of household savings in USD; stablecoin adoption surged 300%+ during 2023-2024 devaluation cycles
• Turkey: USDT volumes reached ~4.3% of GDP, with citizens converting lira savings within hours of inflation data
• Kenya: After the shilling lost ~25% against USD in 2023, retail stablecoin adoption for savings accelerated sharply

If even 5% of a country's domestic deposits migrate to stablecoin savings, the impact on reserves and monetary policy transmission is material.

But transit and savings are different economic behaviors using the same technology. A business that sends $50,000 via USDT for minutes to pay a Chinese supplier creates zero deposit substitution. A citizen who converts their salary to USDT and holds it for months creates full substitution. Same token, same wallet, but fundamentally different impact on monetary sovereignty.

The Tap Protocol isolates transit from savings: B2B only, licensed operators, fiat endpoints — with settlement window monitoring that flags any hold time exceeding the transit window.

Nigeria launched the eNaira in October 2021 — one of the first CBDCs in Africa. The result: 98% of eNaira wallets are inactive.

The eNaira has not yet achieved meaningful adoption — not because of bad technology, but because it was designed for a different problem. CBDCs excel at domestic payment digitization. They do not address cross-border USD settlement. A Nigerian importer paying a Chinese supplier does not need digital naira — they need dollars.

Meanwhile, USDT volumes in Nigeria continued to grow — reaching billions annually through P2P and OTC desks — completely outside the eNaira ecosystem. The market chose its own infrastructure.

The "Fiat Sandwich" model is the standard architecture for cross-border stablecoin payments, already operational in multiple jurisdictions.

The end user on both sides works exclusively in local currency. The stablecoin exists only during transit — within minutes. No citizen holds stablecoins. No store of value is created. No dollarization occurs.

What's different is the regulatory wrapper — the oversight controls detailed in Chapters 5 and 7.

Regulatory reporting is a read-only oversight layer — aggregate visibility without transaction-level approval. The regulator sees everything. Touches nothing.

At Tier 1, it is 7 fields in a weekly CSV submitted by participating licensed operators: date, corridor, volume, transaction count, average settlement time, compliance rate, flagged transaction count. No new software. No dashboard to build.

When operators know they are observed, compliance rates increase — even without active enforcement. The regulator's role shifts from gatekeeper (approving/rejecting each transaction) to observer (monitoring patterns, investigating anomalies, adjusting policy).

Implementation scales with the sandbox: Tier 1 = weekly CSV. Tier 2 = API-based reporting. Tier 3 = real-time reporting feeds. The cost barrier is institutional willingness, not technology.

Total time: minutes. Stablecoin exists on-chain for steps 3-5 only. Neither the sender nor the receiver holds stablecoins. The regulator sees the full flow in real time through regulatory reporting.

Travel Rule compliance is embedded at Step 2 — before any value moves on-chain. Originator and beneficiary data (name, account, institution) is collected, verified, and transmitted between institutions per FATF Recommendation 16. With 99 jurisdictions now implementing Travel Rule legislation, this is not aspirational — it is operational. The Managed Transit Framework requires Travel Rule data exchange as a precondition for on-chain transfer, not an afterthought.

While 99 jurisdictions have enacted Travel Rule legislation, implementation capacity varies widely — several target markets (Kenya, South Africa) remain Non-Compliant or Partially Compliant on FATF Recommendation 15. For Tier 1 sandboxes, the framework addresses this pragmatically: Travel Rule data is exchanged bilaterally between the two sandbox participants via standardized CSV templates, not requiring full national Travel Rule infrastructure. Compliance scales with the tier — Tier 2 introduces API-based exchange, Tier 3 connects to global Travel Rule networks.

Today, each participant in the stablecoin payment chain operates in isolation:

• Stablecoin issuers (USDT, USDC, EURC) — each with their own compliance expectations, reserve structures, and network incentives
• Licensed operators (PSPs, EMIs, banks, VASPs) — each negotiating bilateral agreements per corridor, per counterparty (contracts, compliance, API integrations)
• Regulators — each building bespoke reporting infrastructure, or receiving data in formats that vary by operator (no cross-border visibility)
• Technology providers (AML screening, Travel Rule interop, on-chain analytics) — each integrated separately by each operator

Plexo sits at the underlying level — a neutral clearing layer that standardizes compliance, connects counterparties, and delivers aggregate reporting. Multi-stablecoin (not locked to any single issuer). Multi-chain (not locked to any single network). Multi-jurisdictional (designed for cross-border from day one).

The result: instead of each operator building O(n²) bilateral connections — one for every corridor, every counterparty, every regulator format — they build one integration. Plexo handles the rest. For regulators, instead of aggregating incompatible submissions from each operator, the Glass Wall delivers a single, standardized oversight interface.

Plexo does not pick winners. It does not favor one stablecoin over another, one operator over another, one jurisdiction over another. It standardizes the compliance language so that everyone can participate correctly.

For the regulator — simplified oversight:

• Glass Wall — a read-only reporting interface that delivers aggregate data (volumes, corridors, compliance rates, settlement times) in whatever format the central bank defines. No custom infrastructure to build. No IT procurement. The supervisory layer described in Chapter 5, delivered as infrastructure rather than built from scratch.
• Operator qualification support — Plexo helps the regulator evaluate applicant financial institutions based on KYB data already collected through the network.
• Evidence Bundle — a 34-field standardized compliance package per transaction, exceeding FATF Rec 16 minimum. Travel Rule data + KYB docs + on-chain proof + fiat confirmations + trade documentation + full audit trail.

For licensed operators — faster time to market:

• Three compliance cards collected once, reused across the entire network:
  • Company Card — 19–21 KYB fields + 8–10 supporting documents
  • UBO Card — 9 fields per beneficial owner + 4 identity documents
  • Transaction Card — 5 fields + invoice + 3 reference checks
• First transaction on a new corridor: ~15 minutes of data collection (full Company + UBO + Transaction cards)
• Every subsequent transaction on the same corridor: <2 minutes — only a new invoice and transaction fields. The entity profiles are already verified.
• Three collection paths: API integration (<1 second, for automated operators), web forms (15–20 minutes, for manual onboarding), AI-assisted document parsing (5–8 minutes, for operators with existing but unstructured compliance data)
• No prefunding — in Mode A (compliance relay), the operator never parks capital with Plexo. Plexo orchestrates data, not money.
• Network trust graph — every verified entity builds a compliance footprint that compounds across corridors.

The economics: bilateral corridor setup today = 3–6 months of legal, compliance, and technical work per pair. Via Plexo = one integration, all connected corridors. For an operator targeting 5 corridors, this is the difference between 15–30 months of bilateral work and weeks of network onboarding.

This distinction matters: the Tap Protocol's principles — managed transit, fiat sandwich, regulatory reporting, brakes-not-speed-limits — are designed to work with or without Plexo. A central bank can implement every element of this framework using internal resources, bilateral agreements, and existing supervisory technology.

What Plexo adds is speed to market. The difference between 18 months of infrastructure procurement and weeks of policy decisions. The difference between building a reporting dashboard from scratch and connecting to one that already exists. The difference between qualifying operators manually and drawing on a network that has already collected and verified their compliance data.

Plexo is not a dependency. It is an implementation accelerator. If a jurisdiction outgrows the service, internalizes the functions, or chooses a different provider — the protocol, the data standards, and the regulatory framework remain. Nothing is locked in. Nothing is proprietary to Plexo that the central bank cannot replicate.

The same Tap Protocol principles are capable of operating entirely without Plexo. Plexo simply makes the path to market faster — for issuers, for operators, and for regulators alike.

Nigeria (ARIP Sandbox, 2021–present). Nigeria launched the Accelerated Regulatory Incubation Programme — one of Africa's most ambitious fintech sandboxes. Multiple crypto firms entered. But the sandbox was designed for trading and exchange licensing. Cross-border B2B stablecoin payments were never in scope. Result: ARIP participants can trade crypto, but cannot offer compliant cross-border stablecoin settlement. Meanwhile, Nigeria processed an estimated $92.1 billion in crypto assets (July 2024–June 2025), with $62.2 billion in stablecoins — of which approximately $21.7 billion represents real cross-border payments and B2B settlement — all flowing outside ARIP.

Turkey (Payments ban, 2021–present). Turkey banned stablecoins for domestic payments in April 2021 while crypto trading remained legal. The result: stablecoin transaction volume reached an estimated 4.3% of GDP, flowing entirely through P2P and OTC channels invisible to regulators.

South Africa (FSCA, 2022–present). South Africa moved faster than most African peers, licensing over 2300 crypto asset service providers. But the licensing framework covers trading and custody — not cross-border FX settlement.

The pattern: Each of these countries took action. None of them addressed cross-border B2B payments. The regulatory tools they used were inherited from developed markets and designed for trading — not for the structural dollar deficit that drives EM stablecoin demand.

Regulatory arbitrage — the cost of getting it wrong: When regulation doesn't accommodate legitimate demand, companies move. Yellow Card relocated to Botswana. ZebPay moved to Malta. VALR expanded to Dubai. Ripio shifted to Spain.

In February 2026, the UK Financial Conduct Authority selected 4 firms for its stablecoin regulatory sandbox — the first dedicated stablecoin testing environment in a major financial center.

Selected firms: Monee, ReStabilise, Revolut, VVTX

Scope: Stablecoin issuance, payment services, and wholesale settlement

Structure: Limited participants, defined scope, regulatory oversight throughout

The FCA sandbox validates the core principle: you can test stablecoin payments in a controlled environment with a small number of licensed participants before committing to full regulation.

Singapore's Monetary Authority (MAS) has taken the most advanced approach to stablecoin regulation in Asia:

• StraitsX operates XSGD and XUSD stablecoins under a Major Payment Institution license — full fiat-to-stablecoin-to-fiat cross-border settlement, licensed and supervised
• Project BLOOM (2026) — multi-country cross-border stablecoin settlement pilot, connecting multiple jurisdictions through regulated stablecoin rails

BLOOM connects developed-market regulators with mature licensing frameworks — it assumes both ends have robust regulatory capacity. The Tap Protocol is designed for jurisdictions still building theirs. The two are complementary, not competing: a jurisdiction that proves the Tap Protocol domestically creates a natural integration point with multilateral initiatives like BLOOM.

Singapore proves that stablecoin-based cross-border payments can operate within a licensing framework — not as unregulated crypto, but as supervised payment infrastructure.

The UAE introduced the Payment Token Service Regulation (PTSR) framework — the most comprehensive stablecoin-specific regulation in the Middle East:

• USDU — the first regulated USD-backed stablecoin with reserves held at Emirates NBD and Mashreq Bank (regulated UAE banks)
• Clear licensing pathway for stablecoin issuance and payment services
• Supervision by the Central Bank of the UAE, not a crypto-specific regulator

The UAE demonstrates that stablecoins can be regulated as payment instruments under central bank supervision — not shunted to a crypto regulator with no payments expertise.

Chile's Banco Central has taken the most advanced position among emerging market central banks: actively supporting a Fintech Bill that integrates stablecoins into the payments regulatory perimeter — not the securities or crypto trading framework.

Key design choices:

• Central bank as primary regulator for stablecoin payment services (not the securities commission)
• Stablecoins separated from other crypto-assets in the regulatory taxonomy
• Payments-first framing — stablecoins treated as payment instruments, not investment products

Chile is the closest existing EM precedent to what this report proposes — and the furthest any emerging market has gone toward payments-first stablecoin regulation.

ADGM's Financial Services Regulatory Authority (FSRA) published the most architecturally relevant precedent for the Tap Protocol: an expansion of its existing Regulated Activities framework to include fiat-referenced tokens (FRTs) — no new legislation, just a consultation paper (CP9) and rule amendment.

Three key insights for EM central banks:

1. Automatic acceptance of locally-issued FRTs. Any FRT issued by an ADGM-licensed entity is automatically accepted within the regulated ecosystem.
2. Criteria-based acceptance of foreign FRTs. ADGM defined clear criteria for accepting FRTs issued outside ADGM: reserve adequacy, AML traceability, home jurisdiction oversight. This is how an EM CB can accept USDT/USDC without endorsing them.
3. Expansion, not creation. ADGM did not create a "stablecoin framework." It expanded the scope of existing Regulated Activities — custody, dealing, advising, managing — to include FRTs as a new asset class.

For Stage 2: ADGM's inter-FI transfer model (transfers within the licensed perimeter, fiat-only exit) is the direct precedent for the Tap Protocol's Stage 2 containment architecture.

Brazil's Banco Central (BCB) took a fundamentally different pathway: instead of creating crypto-specific regulation, it classified stablecoins as foreign exchange instruments under existing FX regulation. USDT and USDC are treated as digital foreign currency — subject to the same FX rules that govern any USD-denominated instrument.

Why this matters for EM: Brazil's approach eliminates the need for any crypto-specific legislation. Every EM central bank already has FX regulation. If stablecoins are classified as foreign currency in digital form, they fall automatically under existing FX oversight.

The tradeoff: FX classification works cleanly for transit (Stage 1) but creates complexity for Stage 2 (holding). If stablecoins are "foreign currency," holding them triggers FX reserve requirements and capital control provisions.

Key insight: Brazil proves that "we don't have crypto regulation" is not a barrier. You don't need it. Classify stablecoins under what you already have — PSP framework (ADGM/MAS model) or FX framework (BCB model) — and regulate accordingly.

No regulatory framework should be transplanted directly. But specific principles from existing frameworks can be extracted and adapted for emerging market conditions:

• From ADGM FRT Framework: Lead precedent. Expanded existing Regulated Activities to include FRTs — no new legislation. Criteria-based foreign FRT acceptance (reserve adequacy, AML traceability, home jurisdiction oversight). Automatic local FRT acceptance. Inter-FI transfers within licensed perimeter, fiat-only exit. The ADGM model is the closest architectural match to what the Tap Protocol proposes.
• From MiCA (EU): Reserve transparency and audit requirements for stablecoin issuers used as settlement instruments. Operational resilience standards for payment service continuity. Extract reserve audit and business continuity requirements only. Lower thresholds for EM market sizes.
• From GENIUS Act (US): Tiered oversight based on settlement volume (not market cap), clear distinction between payment stablecoins and investment tokens. Single regulator model (central bank) for EM. Extract payment-stablecoin classification logic — ignore DeFi/trading provisions entirely.
• From MAS (Singapore): Major Payment Institution licensing — the closest existing model to what the Tap Protocol requires. Technology-neutral, payment-focused, stablecoin-agnostic. StraitsX operational precedent for fiat-in/fiat-out cross-border settlement. Simplified application for sandbox; MAS's risk-based approach to corridor activation.
• From UAE PTSR: Central bank as primary regulator (not securities commission), banking reserve requirements for fiat-backed tokens, explicit classification of stablecoins as payment instruments. Most directly transferable to EM contexts.

Central bankers who champion this framework need language their board, minister, and parliament will accept. The following talking points are designed for internal advocacy:

1. "This is regulated transit value, not cryptocurrency trading." The sandbox permits stablecoins only as transit instruments within a fiat-in/fiat-out architecture. No citizen holds crypto. No exchange, DeFi, or stablecoin issuance is licensed. This is a payment service license, not a crypto license.
2. "We are building supervised cross-border payment corridors, not granting carte blanche for crypto." The sandbox covers 3-5 companies, 1-3 corridors, 12 months. Every transaction is visible through regulatory reporting.
3. "Onshore reserves guarantee onshore control." Under the Managed Transit Framework, fiat settlement happens through licensed domestic banks. Reserves stay within the national banking system.
4. "Inaction is the riskiest option." $205 billion already flows through Africa annually on stablecoin rails — invisible to us. Every month of inaction means more volume moving outside our oversight.
5. "We can stop at any time." The sandbox has built-in kill criteria and a 12-month decision point. If KPIs are not met, we terminate. If they are met quarterly, we scale. The risk is bounded; the information value is high.

Do not wait for full FATF compliance to start a Tier 1 sandbox. Tier 1 requires bilateral data exchange between 2 participants via standardized CSV — achievable without national Travel Rule infrastructure.

No sandbox should operate without predefined failure conditions. The Tap Protocol includes automatic triggers:

Automatic pause triggers (any single trigger activates a 14-day review):

• Compliance data failure rate exceeds 5% of transactions for any 30-day period
• Average settlement time exceeds 24 hours for 5 consecutive business days
• Banking partner withdraws fiat settlement services
• Regulatory reporting data feed interrupted for more than 48 hours

Quarterly review gates (Month 3, 6, 9):

• Volume trending below minimum viability threshold
• Compliance completion rate below 95%
• Participant exits reducing sandbox below 2 active companies

Scaling timeline — brakes-only model:

The logic is positive-path: at each gate, the question is not "should we expand?" but "is there a specific reason we cannot?" If no brake is triggered, expansion proceeds automatically.

What constitutes a brake:

• Regulatory reporting data feed interrupted or unreliable
• Compliance data failure rate exceeds threshold
• Insufficient licensed participants to maintain competition
• Operating with unlicensed or unsanctioned counterparties
• Bilateral MOU not in place for new corridor

What does NOT constitute a brake:

• Post-settlement discovery of illicit origin (inherent risk in all financial systems)
• High transaction volumes (this is success, not risk)
• Media or political pressure unrelated to operational data
• Competitor lobbying from incumbent banking channels

Stage 1 (cross-border payments) is where the sandbox begins. Stage 2 is earned — not assumed. The graduation pathway:

Precedent: ADGM FRT framework (Stage 2 perimeter model). UK BoE systemic stablecoin regime (caps + no-yield). GENIUS Act (payment stablecoin classification). MAS (graduated licensing tiers).

The key principle: Stage 2 is not promised. It is earned through evidence. The CB decides when — and whether — to open the gate. Every control is designed as transitional: the CB can relax or tighten based on data, without returning to parliament.