Why businesses convert digital assets
Most businesses that hold digital assets need fiat at some point. Salaries, rent, taxes and most supplier invoices are paid in national currencies. A software company that accepts payment in bitcoin, a trading firm settling with a counterparty in a stablecoin, a project that raised funds through a token sale or a services business paid by clients in ether all eventually need to move value into a bank account.
Conversion through a regulated provider gives the business a documented exchange, a clear rate, a bank transfer from a known source and a record that auditors and banks can follow. Informal routes, such as peer-to-peer sales or unregulated over-the-counter desks, may seem quicker but frequently leave the business with funds its own bank will not accept, or with no defensible record of where the money came from.
How a business conversion works
The process at a regulated provider usually follows a consistent sequence:
- Onboarding: the business completes corporate due diligence, covering its legal entity, owners, directors, activities and the reasons it holds digital assets.
- Wallet registration: the business declares the wallet addresses it will send from and proves it controls them.
- Source explanation: the business explains how it acquired the assets it intends to convert, with supporting evidence.
- Quote and confirmation: the business requests a quote for a specific amount and confirms the trade.
- Transfer: the business sends the digital assets from a registered wallet to the address the provider gives it.
- Screening and confirmation: the provider screens the incoming transaction on-chain and waits for the required number of network confirmations.
- Settlement: the provider pays fiat to a bank account in the business's own name.
The order of steps four to six varies between providers. Some require assets to arrive before quoting. Others agree a rate first and settle once funds arrive and clear screening. Either way, the screening step is not optional, and a trade can be held if the incoming transaction raises concerns.
Source of digital assets
Banks ask where money came from. Digital asset providers ask the same question about assets, and the answer needs to be specific. Acceptable explanations usually come with evidence, for example:
- Customer payments: invoices issued to customers, matched to on-chain receipts at the business's wallet.
- Purchase on an exchange: exchange account statements showing the purchase and withdrawal to the business's wallet.
- Token sale proceeds: sale documentation, purchaser due diligence records and the contract address involved.
- Counterparty settlement: the agreement with the counterparty and records of the settlement transfer.
- Mining or validation rewards: pool statements or on-chain evidence of rewards to the business's addresses.
- Long-held treasury assets: historical records of acquisition, which can be harder to evidence for assets acquired years ago.
The provider is trying to establish a credible chain from a legitimate origin to the wallet the assets are being sent from. Gaps in that chain, such as assets received from unknown sources or passed through several intermediate wallets with no explanation, will prompt further questions.
Wallet ownership verification
A provider needs to know that the business sending assets actually controls the wallet they come from. Without that check, the provider could be converting assets for a third party under the business's name. Common verification methods include:
- Message signing: the business signs a message chosen by the provider with the private key of the wallet, proving control without moving funds.
- Test transfer: the business sends a small, specified amount from the wallet to the provider, showing control over that address.
- Hosted wallet evidence: where assets sit at an exchange or custodian, a statement or account screenshot in the business's name showing the address, combined with travel rule information from the hosting provider.
Self-hosted wallets, where the business holds its own keys, are generally verified by signing or test transfer. Hosted wallets rely more on the hosting provider's records and on travel rule data exchange between the two providers. Businesses using multi-signature wallets should be ready to explain who holds the keys and how signing works internally.
Wallet verification is usually done once per address, at registration, and then relied on for later conversions. If the business rotates addresses frequently, for example generating a new receiving address for every customer, it should agree with the provider in advance how those addresses will be registered and evidenced, instead of discovering the issue when a transfer arrives from an unknown address.
On-chain screening
Public blockchains make transaction histories visible. Regulated providers use blockchain analytics tools to examine the history of incoming assets and the addresses involved. Screening typically looks for exposure to sanctioned addresses, darknet markets, ransomware, known scams and stolen funds, unlicensed services and mixers or other tools designed to hide the trail.
Screening results are rarely black and white. Direct receipt from a sanctioned address is a clear stop. Indirect exposure several hops back is more nuanced and depends on the amount, the distance and the provider's risk policy. A transaction may be held while the provider asks for more information, and in some cases the provider may be required to report it to the authorities.
Businesses can reduce friction by keeping their own wallets clean. That means screening incoming customer payments where possible, avoiding mixing services, separating wallets used for different business lines and being careful about receiving funds from unknown parties.
The travel rule
The travel rule requires regulated virtual asset service providers to send and receive identifying information about the originator and beneficiary when transferring virtual currency on behalf of customers. It mirrors long-standing rules for wire transfers and applies, with local variations, in a growing number of countries, including Canada and the member states of the European Union.
For a business converting assets, the travel rule matters most when assets come from a hosted wallet at another provider. That provider should send originator information along with the transfer, and the receiving provider checks it against its own records. When assets come from a self-hosted wallet, the receiving provider generally collects the information directly from its customer and verifies wallet ownership itself.
Transfers that arrive without required information, or with information that does not match the customer, may be held or returned.
A worked example
The following example is illustrative only.
A software company based in Europe invoices several clients in USDC and receives payments to a self-hosted wallet. At quarter end it holds the equivalent of 180,000 USD in USDC and wants to convert to euros to pay staff.
During onboarding it registers its wallet, proving control by signing a message. It supplies a ledger of the quarter's invoices, each matched to the on-chain transaction hash of the client payment. The provider screens the wallet history and finds that all receipts come from addresses at regulated exchanges, with no exposure to high-risk sources.
The company requests a quote, confirms it and sends the USDC to the address provided. After the required confirmations and a final screening check, the provider pays euros to the company's bank account. The company keeps the quote, the trade confirmation, the transaction hash and the bank credit together in its accounting records.
What causes delays
Most conversions that stall do so for predictable reasons, and most can be avoided with preparation:
- Unregistered wallets: assets sent from an address the business has not registered and verified. The provider cannot simply accept them, and resolving it after the fact takes longer than registering first.
- Wrong network: a token sent on a blockchain the provider does not support for that asset. Recovery, where possible at all, is slow.
- Thin source evidence: a ledger that does not match on-chain receipts, or invoices that cannot be tied to specific transactions.
- Screening hits: exposure to a high-risk source in the transaction history, which triggers a request for more information.
- Missing travel rule data: a transfer from a hosted wallet at another provider that arrives without originator information.
- Bank account mismatch: a request to pay fiat to an account that is not in the business's own name. Regulated providers generally pay only to the customer's own verified account.
Planning conversions ahead of the date funds are needed leaves room to resolve any of these without pressure. A business that needs euros for payroll on the 25th should not be sending assets on the 24th.
Records to keep
Good records protect the business with its bank, auditors and tax authorities. For each conversion, keep:
- The trade confirmation showing date, asset, amount, rate and fiat proceeds.
- The transaction hash of the outgoing transfer and the sending wallet address.
- Evidence of how the assets were acquired, as supplied to the provider.
- Wallet ownership evidence for each registered address.
- The bank statement showing receipt of fiat proceeds from the provider.
- Any correspondence about screening queries and how they were resolved.
Tax treatment of digital asset conversions varies widely between countries and may give rise to gains or losses on disposal. Businesses should take tax advice in each relevant jurisdiction and record cost basis consistently.
General information only
This article is general information about how businesses convert digital assets to fiat through regulated providers. It is not investment, tax or legal advice, and nothing in it is a recommendation to buy, hold or sell any digital asset.
CCYFX converts between fiat and major digital assets for verified businesses, with wallet ownership verification, on-chain screening and travel rule compliance. It does not offer custody, staking or lending. For more, see our digital assets service.
