Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
MOONPAY
PCI DSS evidence
Crypto asset service provider in EU
VerifiedMOONPAY and PCI DSS
MOONPAY is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-03-31), dated 23 Jun 2025, assessed by BARR ADVISORY, P.A.. CertReports last verified this on 2 Nov 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 23 Jun 2025
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- BARR ADVISORY, P.A.
- Scope
- CRYPTO RAMP PROVIDER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | MOONPAY USA LLC: PCI DSS, assessor BARR ADVISORY, P.A., valid through 2027-03-31 | Live pagesha256 e28291a0b0 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | MOONPAY USA LLC: PCI DSS, assessor BARR ADVISORY, P.A., valid through 2027-03-31 | Live pagesha256 2d1ed0081d |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 17 Sep 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 23 Jun 2025
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- BARR ADVISORY, P.A.
- Scope
- CRYPTO RAMP PROVIDER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | MOONPAY USA LLC: PCI DSS, assessor BARR ADVISORY, P.A., valid through 2027-03-31 | Live pagesha256 7a8c840bd5 |
Vendor-statedVendor states PCI DSS 4.0.1 on its trust centre
as of 21 Sep 2026 · confidence 90%What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is MOONPAY PCI DSS compliant?
MOONPAY is listed as a PCI DSS validated service provider, assessed by BARR ADVISORY, P.A., valid through 31 Mar 2027, as of 2 Nov 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Banking CircleBanking Circle appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: BrazeBraze appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Checkout.comCheckout.com appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: CloudFlareCloudFlare appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: CondensCondens appeared on the subprocessor list.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Crypto and web3 category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
HashWhale
Crypto and web3
HashWhale brings stablecoins closer to everyday
Ethena Pay
Crypto and web3
Ethena is a synthetic dollar protocol built on crypto rails, issuing USDe - a fully backed, dollar-denominated digital asset - alongside
DPT HK
Crypto and web3
DPT (also known as DPT Pay) is a crypto Visa card that lets you spend stablecoins in 150+ countries, access DeFi yield, with assets
Moneytea
Crypto and web3
Scale your business with fiat-to-crypto on ramp
PaySat
Crypto and web3
exSat Digital Bank connects compliant custody, Web3 yield strategies, payments, and on-chain transparency in one digital asset
Go Defi Capital
Crypto and web3
Trusted platform for instant cryptocurrency
GHB FINANCE LTDA
Crypto and web3
Hubib is a global crypto financial ecosystem that combines wallet, rewards, marketplace and education to empower users to earn, manage and
Paybis
Customer support
Buy Bitcoin with Credit Card or Debit Card
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read