Semi-Closed Wallet

Overview

The wallet sits between a closed-loop balance limited to one issuer and an open-loop instrument accepted broadly. Users may pay approved merchants, transfer under limited conditions, or redeem through specified routes, depending on the product and jurisdiction.

Acceptance, cash withdrawal, interoperability, fees, expiry, and refunds can be restricted. The provider controls the network and may suspend merchants or users. Stored value can represent a direct claim on the issuer rather than independently held money or blockchain assets.

Providers should define eligible merchants, funding, redemption, safeguarding, limits, disputes, and account closure. Users need clear disclosure of where value works and how it can be recovered. Businesses should verify settlement and liability. Regulatory treatment and customer-protection obligations require jurisdiction-specific analysis.

Semi-Closed Wallet should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Material risks for Semi-Closed Wallet include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Semi-Closed Wallet, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.

Production ownership for Semi-Closed Wallet should identify the user or legal entity, supported assets and networks, address model, custody boundary, signing authority, recovery method, and systems permitted to request or observe transactions. For Semi-Closed Wallet, these fields determine who can act and which evidence is authoritative.