Methodology

How we audit wallet payment flows

Every engagement ends in evidence your team can defend — not a generic controls checklist. This is the path from first discovery note to handover.

Name the audit question

You describe the wallet product, rails in scope, and the decision the audit must support — partner diligence, incident follow-up, or pre-launch readiness. We reply with proposed scope and informational pricing.
Inventory the path

We map initiation through authorization, capture or reverse, notification, and settlement using sandbox walks, sampled production evidence, and your existing diagrams. The inventory becomes the shared flow map.
Probe the edges

Depending on the engagement we stress declines and retries, compare user status to ledger state, or sample settlement cycles for break classes. Findings stay tied to owners and residual risk.
Deliver & walk through

You receive the agreed artefacts — flow map, gap register, reconciliation playbook, or partner brief — plus a live walkthrough so payments, risk, and finance can challenge the reading.
Clarify & hand over

A short window for questions after delivery. Implementation stays with your team unless pairing was scoped upfront.