A stablecoin treasury needs rules before it needs tokens

A finance employee receives a supplier's wallet address and can settle within minutes. The apparent convenience compresses several decisions into one action: which token, issued by whom, on which network, held under whose keys and redeemable through which institution.

Chainalysis ranked Nigeria second in its 2024 global crypto-adoption index and placed Ethiopia, Kenya and South Africa in the top 30. The measure reflects observed on-chain activity under the publisher's method; it isn't a census of users or proof that a token is lawful for every corporate payment. On 12 August 2026, TechCabal reported that Nigeria's central bank had opened its regulatory sandbox to virtual-asset service providers. A supervised test is not a general licence.

Treasury policy starts at that boundary.

Purpose and permitted exposure

The board should state why the company may use a stablecoin. Possible purposes include paying an approved supplier, receiving export proceeds or moving value between company accounts. “Access to crypto” is not a treasury purpose.

Set a maximum amount by token, issuer, network, custodian and counterparty. A single company can appear in more than one role, so limits should capture common ownership and operational dependence. If the wallet provider relies on the same exchange used for redemption, two names may represent one failure point.

Define holding time. A token acquired for a same-day payment carries different price and operational exposure from a balance held for months. Even a token designed to track a currency can trade away from its reference value or become difficult to redeem.

The policy needs a prohibited list too: customer funds without the required permission, personal wallets, unapproved decentralised protocols, borrowing against treasury tokens and transfers to an address not verified through the vendor process.

The first interruption: who controls the keys?

A staff member creates a self-custody wallet and stores the recovery phrase in a password manager. The company now depends on that account, the employee's access and an untested recovery process. If the employee leaves or approves malware, there may be no bank to reverse the transfer.

Institutional custody shifts key management to a provider and introduces counterparty risk. Ask how assets are segregated, which legal entity contracts, what insurance covers, where keys are stored, how withdrawals are approved and what happens in insolvency. Marketing language about “cold storage” doesn't answer ownership.

Use approval rules that fit the payment. Two authorised people should verify beneficiary, amount, token and network through separate channels. Wallet allowlists can reduce address substitution, subject to controlled changes. Small test transfers can confirm routing but add cost and do not prove the beneficiary controls the address for the full payment.

Recovery needs a drill. Document who can restore access, the minimum approvals and where backup material is held. Record the result without exposing secrets in board papers.

The second interruption: redemption stops

A stablecoin balance is useful to treasury because someone expects to exchange it for money or goods. Write the redemption route before purchase. Which regulated platform accepts the token from the chosen network? What account receives fiat? What documents and limits apply? How long has that route taken in actual tests?

Issuer reserves matter, but an issuer's published reserve report does not guarantee a particular African company direct redemption. Minimum amounts, eligible jurisdictions and banking relationships can force the company through an exchange. That adds fees and another balance-sheet exposure.

Model a closed route. If the usual exchange pauses withdrawals, can the company redeem elsewhere without moving through an unapproved counterparty? If the token trades below its reference, does policy permit sale at a loss or require waiting? Who can decide outside business hours?

Accounting and tax treatment can differ by jurisdiction and purpose. Finance should obtain current local advice and document how it records acquisition, fees, valuation changes and disposal. This article cannot supply that advice across multiple countries.

Network choice creates a separate asset path

Tokens with the same brand can exist on several blockchains. Sending on the wrong network can strand funds even when the address format appears valid. Fees, confirmation time and operational reliability differ. Bridges add smart-contract and custody risk.

Approve token and network as a pair. Treasury instructions should include the contract identifier where appropriate, not a ticker alone. The recipient must confirm the same network in writing. Systems should reject an unapproved pair rather than relying on an employee to remember.

Transaction monitoring applies to wallet addresses as well as bank beneficiaries. A service provider can screen exposure to sanctioned or illicit addresses, but screening has false positives and coverage limits. Define who reviews an alert and whether payment can proceed.

Finality changes incident response. Once a valid transfer confirms, recovery may depend on the recipient. Keep transaction hashes, approval evidence, invoices and beneficiary verification in the accounting record.

Regulation belongs in the transaction file

Virtual-asset rules can involve the central bank, securities regulator, tax authority, exchange-control body and financial-intelligence unit. Permission for a service provider does not settle whether the customer may use the service for a particular cross-border payment.

A sandbox allows a regulator to observe a limited test under conditions. It may restrict participants, customers, volume and duration. Admission should never be described as approval of every product sold by the firm.

Before use, record the legal entity providing custody or exchange, its current authorisation, the activity covered and the source checked. Repeat the check on a schedule and after a regulatory notice. Save the terms accepted by the company.

Banks also set their own risk controls. A lawful transaction can trigger questions or account restrictions if the flow is unexplained. Discuss expected activity with the banking partner rather than discovering its policy after funds arrive.

The policy ends with an exit

A treasury instrument needs conditions for stopping. Set triggers for a material price deviation, reserve concern, regulatory change, custody incident, unavailable redemption or repeated settlement failure. Name who can freeze new transactions and who decides disposal.

Report balances, concentration, holding time, realised fees, failed transactions and policy exceptions to the board. Do not report token appreciation as operating revenue without applying the company's accounting policy.

The fast supplier payment may remain useful after this work. The policy does not make the instrument safe; it tells the company which risks it has accepted and who can act when a wallet stops behaving like cash.

Sources

• Chainalysis, 12 September 2024: Sub-Saharan Africa crypto adoption
• TechCabal, 12 August 2026: Nigeria's central bank opens regulatory sandbox to virtual asset firms