Checkout.com
Checkout Ltd
Data verified on unchanged since the sources
Worth it if you are an enterprise merchant wanting gateway, acquiring and processing from one provider, with USDC acceptance in partnership with Coinbase Payments.
Avoid it if you are a small operator or a consumer: pricing is custom-quote only and there are no public rates to compare.
Checkout.com is a global payments processor headquartered in London, operating as a gateway, acquirer and processor for enterprise merchants across e-commerce, tech and media. It is an authorised electronic money institution regulated by the FCA (UK) and ACPR (France) and holds funds in transit on behalf of clients. Since 2026 it also offers stablecoin acceptance for eligible merchants in partnership with Coinbase Payments.
Data & conditions
| Service type | Stablecoin infrastructure |
|---|---|
| Pricing model | Custom quote |
| Stablecoins | USDC |
| Customer type | Enterprise, Fintech, Marketplace, Platforms |
| Certifications | PCI-DSS-L1 |
| Fund custody | Custodial (platform holds funds) |
| Supported countries | US, EEA, UK, APAC, MENA |
| Regulator | FCA (UK), ACPR (Francia) |
| Segment | B2B |
| MiCA / License status | FCA (UK EMI 900816)ACPR (France EMI 17208) |
Strengths
- Regulated, mature processor (FCA/ACPR EMI) with global enterprise coverage.
- Full gateway + acquiring + processing stack plus stablecoin acceptance via Coinbase.
- No notable sovereignty advantage documented.
Weaknesses
- Aimed at enterprise merchants: not accessible to end consumers.
- Custom-quote pricing: no transparent public rates for small operators.
- Custodial: the platform holds your funds and can freeze or lose them.
Verdict
Score 4.3/5, very strong profile. In its favour: regulated, mature processor (FCA/ACPR EMI) with global enterprise coverage. The trade-off to weigh: aimed at enterprise merchants: not accessible to end consumers.
On the Sovereignty lens the score is 0.0/5 (weak): the strength is fund control (0.0/5).
Promp's editorial rating based on real fees and net annual cost. Promp reviews third-party products independently.
"Sovereignty" rating: score computed on privacy/anonymity (30%), fund control (20%), censorship resistance (20%), trustless/auditability (20%) and costs (10%). Same data, different weights.
Reputation
What happened to people who used Checkout.com, and what users say. External signals: they do not feed the promp.it rating.
Incidents & regulatory actions
Notable incidentsDocumented events with consequences still open. Each entry carries a source and a date.
-
Data breach Moderate ● open
Legacy cloud storage system breached by the ShinyHunters group: ransom refused, payment platform and card numbers declared unaffected
The criminal group known as ShinyHunters gained unauthorised access to a legacy third-party cloud file storage system used by Checkout.com in 2020 and earlier for internal operational documents and merchant onboarding materials, and demanded a ransom. In the statement on its own newsroom, signed by Chief Technology Officer Mariano Albera, the company states that "the threat actors do not have, and never had, access to merchant funds or card numbers", and that the incident did not affect its production payment processing platform. Checkout.com chose not to pay: it refused the extortion and announced it would donate the ransom amount to cyber security research (Carnegie Mellon University and the Oxford Cyber Security Centre), adding that it is working with law enforcement and the relevant regulators and has begun identifying and contacting those who may have been impacted. The company does not quantify the scope; trade press places it below 25% of the current merchant base. The date needs a note on method, because the official page carries none: the statement says only that the extortionists made contact "last week". The date given here, 14 November 2025, is the date the statement was published, pinned on two independent sources (BleepingComputer, which dates its article 14 November 2025, and Security Boulevard). The breach itself concerns data from 2020 and earlier; the intrusion date has not been made public. As the material consists of merchant onboarding documents and internal operational files, the exposure concerns the platform's business customers, not the end consumers who pay through it.
↗ source
verified on
Public reviews
-
Trustpilot ↗
2.0/5
101 reviews
'Poor' TrustScore of 2.0/5 across 101 reviews; B2B customer base, small sample.
Weighted average across 1 public review platform (101 reviews in total), weighted by volume. This is not our rating: it is those platforms’ average.
FAQ
Can an individual use Checkout.com?
No. It is payments infrastructure aimed at enterprise merchants and platforms, not an end-consumer product.
Is Checkout.com regulated?
Yes. Checkout Ltd is an authorised electronic money institution regulated by the FCA (UK, no. 900816) and Checkout SAS is authorised by the ACPR in France (no. 17208).
Sources
- Official service page Data verified on Jul 17, 2026
- en.wikipedia.org Valutazione Data verified on Jul 17, 2026