Login

Invalid username or password.

Embedded Payments Proposal

ExpressVPN × NOXXO

A full embedded payments and distribution layer inside the ExpressVPN product. Wallet, cards, FX, and global rails delivered through one API, routed via regulated partners in every jurisdiction.

Client — ExpressVPN
Scope — Embedded Neobank Layer
Status — Proposed
Embedded Wallet
Card Programmes
Stablecoin On/Off Ramp
Virtual Named Accounts
FX & Remittance
Rewards & Cashback
Strategic Opportunity
Cost Save

Lower cost per subscription

Replace or supplement card rails for subscription payments with stablecoin and local rail routing. Reduces processing cost and decline loss in high-friction markets where VPN demand is strongest.

New Revenue

Payments become a revenue line

Transaction fees, FX spread, interchange on card spend, and ramp economics turn the payment product into an earning asset rather than a cost centre. Revenue share available on NOXXO-facilitated volume.

Retention

Wallet as a sticky surface

Held balances, referral rewards paid in stables, and cashback on card spend give users ongoing reasons to stay in the product beyond the VPN subscription itself.

Distribution

Reach underserved markets

Users in restrictive or high-friction markets (MENA, LATAM, Turkey, India, parts of Africa, SEA) gain access to a payments layer the local card ecosystem cannot reliably serve. ExpressVPN becomes a practical financial access point, not just a privacy tool.

Architecture at a Glance
Layer 1 — ExpressVPN Application
Client
ExpressVPN apps across iOS, Android, desktop, and web integrate a single NOXXO SDK/API. Users see a native ExpressVPN branded experience: wallet, card, top-up, pay.
Wallet UI
Checkout
Card issuance flow
Rewards screen
↓
Layer 2 — NOXXO Technology
Infrastructure
NOXXO orchestrates routing, KYC/KYT, transaction monitoring, FX quoting, wallet provisioning, card tokenisation, and reconciliation. Exposed to ExpressVPN as a unified API. No regulated activity performed by NOXXO.
Payment routing engine
Wallet infrastructure
Virtual accounts
FX & remittance API
KYC/KYT/AML orchestration
Reporting & reconciliation
↓
Layer 3 — Regulated Partner Network
Regulated
All regulated activity (custody, card issuance, fiat on/off ramp, banking, transmission) is performed by licensed third parties selected per jurisdiction. NOXXO coordinates. Funds never touch NOXXO.
Licensed PSPs & VASPs
Stablecoin issuers & custodians
Card issuers (per jurisdiction)
Local banking partners
On/off-ramp providers
Core Flows

Flow 01 — Wallet Top-Up

ExpressVPN user funds their embedded wallet. Top-up via card, bank transfer, or virtual named account in select jurisdictions. Wallet is self-custodial with passkey authentication and social login to mitigate seed-phrase loss risk. Whitelisted stables configurable per ExpressVPN policy.

ExpressVPN User
NOXXO Technology Layer
User Wallet Balance

← scroll to view full flow →

Sender
ExpressVPN User
Card, bank transfer or VA deposit
CARD / BANK / VA
Deposit
NOXXO Technology Layer
Ingest
Card / Bank / VA Ingest
Card acquiring, bank transfer, or named virtual account (select jurisdictions)
MULTI
via regulated partner
KYC / KYT
Screening
Stage Fee
Convert
FX / Stable Bridge
Route to wallet settlement asset (stable of choice)
STABLE
via regulated partner
Credit
Stage Fee
Balance
Credited
Wallet
User Balance
Self-custodial wallet, passkey + social login recovery
STABLE
Stage 1
TBC
Deposit & Ingest
Three ingest rails: card acquiring (global), bank transfer, or named virtual account in select jurisdictions (USD, EUR, GBP, AED, others per market). KYC/KYT applied per tier.
via regulated partner
Stage 2
TBC
FX / Stable Conversion
Fiat to stable, or stable-to-stable bridge, to the user's chosen wallet settlement asset. Whitelisted stables configurable.
via regulated partner
Stage 3
TBC
Wallet Credit
Balance credited to the user's self-custodial wallet. Wallet secured with passkey authentication and social login recovery to mitigate seed-phrase loss risk. User retains control.
via regulated partner

Flow 01 — Notes

  • Top-up rails: card, bank transfer, and virtual named account (select jurisdictions).
  • Wallet is self-custodial. User balance is protected by passkey authentication and social login recovery to mitigate seed-phrase loss risk.
  • Stable whitelist is configurable. ExpressVPN or NOXXO can add or remove supported stables per policy.
  • Virtual named accounts available in USD (ACH/Wire/SWIFT), EUR, GBP (FPS), AED (FTS), with additional currencies per market demand.
  • Exact fee rates to be confirmed. This document shows the stages where fees apply.
  • Deposit tier and limits follow the KYC posture defined below.

Flow 02 — Subscription Payment

User pays for their ExpressVPN subscription directly from wallet balance. Settlement configurable: ExpressVPN can receive stable to treasury, fiat to operating account, or a mix.

User Wallet
NOXXO Technology Layer
ExpressVPN Treasury

← scroll to view full flow →

Source
User Wallet
Wallet balance debited
STABLE
Debit
Authorised
NOXXO Technology Layer
Authorisation
Subscription Charge
Subscription price quoted and authorised against user balance
STABLE
via regulated partner
Route
Stage Fee
Settlement
Stable or Fiat Settlement
Configurable: stable to treasury or off-ramp to fiat
USD / STABLE
via regulated partner
Payout
Stage Fee
Treasury
Credit
Beneficiary
ExpressVPN Treasury
Stable wallet or fiat operating account
USD / STABLE
Stage 1
TBC
Charge Authorisation
Subscription amount priced and authorised against the user wallet balance. Supports one-off and recurring billing.
via regulated partner
Stage 2
TBC
Settlement Routing
Stable retained for treasury, or off-ramped to USD (or local fiat) and wired to ExpressVPN operating account.
via regulated partner
Stage 3
TBC
Treasury Credit
Daily net settlement or per-transaction settlement depending on ExpressVPN treasury preference.
via regulated partner

Flow 02 — Notes

  • Settlement mode is configurable: stable-to-treasury, fiat-to-bank, or a blended daily net settlement.
  • Replaces or supplements card processing for subscription revenue. Lower cost and lower decline loss in high-friction markets.
  • Supports recurring billing with user pre-authorisation. Chargebacks do not apply at the stable layer.

Flow 03 — Card Spend

Virtual and physical cards. Card issuance and scheme availability depend on Visa or Mastercard approval and are jurisdiction-dependent. Card authorisation draws from the user wallet balance. Interchange flows back to the programme.

User Wallet
NOXXO Technology Layer
Merchant

← scroll to view full flow →

Source
User Wallet
Funds the card authorisation
STABLE
Auth
Request
NOXXO Technology Layer
Issue
Card Issuer
Subject to Visa / Mastercard approval, jurisdiction-dependent
CARD
via regulated partner
Just-in-time
Funding
Stage Fee
Off-Ramp
Stable → Fiat
Wallet stable converted to local fiat at authorisation
FIAT
via regulated partner
Scheme
Settle
Stage Fee
Merchant
Paid
Beneficiary
Merchant
Receives local fiat via scheme
FIAT
Stage 1
TBC
Card Issuance
Card issuance is subject to Visa or Mastercard approval and is jurisdiction-dependent. Where approved, virtual card at account creation and physical card on request. Issuer selected per market for acceptance and interchange economics.
via regulated partner
Stage 2
TBC
Just-in-time Funding
On authorisation, user wallet stable is off-ramped to local fiat to fund the scheme settlement.
via regulated partner
Stage 3
TBC
Scheme Settlement
Transaction cleared via local scheme (Visa, Mastercard, or domestic equivalent per market). Interchange flows to the programme.
via regulated partner

Flow 03 — Notes

  • Card issuance is dependent on Visa or Mastercard approval and is jurisdiction-dependent. Market-by-market availability confirmed at go-live.
  • Card programme configured per jurisdiction. Different issuer and scheme per region to optimise acceptance, compliance, and interchange.
  • Apple Pay and Google Pay tokenisation available where supported by the local issuer.
  • Interchange is a revenue line for the programme and can be shared with ExpressVPN under the commercial model.
  • Spend controls, freeze, and limits exposed via the NOXXO API for the ExpressVPN user interface.

Flow 04 — Cashback & Rewards (Optional Module — To Be Defined)

Optional rewards layer. Both the economics (rate, caps, funding source) and the rewards programme itself (triggers, eligibility, mechanics) are to be defined jointly with ExpressVPN. The flow below illustrates the technical rail only.

Qualifying Event
NOXXO Technology Layer
User Wallet

← scroll to view full flow →

Trigger
Qualifying Event
Triggers to be defined by rewards programme
EVENT
Event
Captured
NOXXO Technology Layer
Accrue
Rewards Engine
Executes the rewards programme logic once defined
STABLE
via regulated partner
Credit
Instruction
Stage Fee
Fund
Rewards Float
Funding source to be defined (ExpressVPN, interchange-funded, or shared float)
STABLE
via regulated partner
Payout
Wallet
Credit
Wallet
User Balance
Cashback credited in stable
STABLE

Flow 04 — Notes

  • Optional module. Both the rewards programme structure (triggers, eligibility, mechanics) and the economics (rate, caps, funding source) are to be defined jointly with ExpressVPN.
  • The flow shown here illustrates only the technical rail that would deliver rewards. Programme design sits separately as a joint workstream.
  • Rewards would be paid in stable to the user wallet, keeping the user engaged with the wallet surface.
  • Referral or affiliate payouts can run on the same rail, turning the rewards engine into an acquisition tool.

Flow 05 — Distribution & Remittance

ExpressVPN users in underserved or high-friction markets receive stablecoins, pay locally, or remit to bank accounts. Turns the payment product into distribution in markets the local card ecosystem cannot reliably serve.

Sender / Funding Source
NOXXO Technology Layer
User / Beneficiary

← scroll to view full flow →

Source
Funding Source
User deposit, referral payout, or corporate disbursement
MULTI
Inbound
NOXXO Technology Layer
Route
Corridor Routing
Optimal rail selected by corridor, cost, speed
STABLE
via regulated partner
Off-Ramp or
Hold Stable
Stage Fee
Deliver
Local Rail / Wallet
RTGS/NEFT, PIX, SPEI, mobile wallets, bank transfer, or held as stable
LOCAL
via regulated partner
Delivery
Stage Fee
Credited
Beneficiary
User or Beneficiary
Wallet balance or local bank credit
LOCAL / STABLE

Flow 05 — Notes

  • Supports 100+ countries via regulated local partners. Corridor list confirmed at integration.
  • In markets where card acceptance is low, users can still transact via the stable wallet, local virtual account, or local payout rail.
  • Supports referral reward distribution, affiliate payouts, and user-to-user transfers within the ExpressVPN ecosystem.
  • All corridor, rail, and partner availability confirmed per market at go-live.
Tiered KYC Posture
Tier Access Verification Scope
Tier 1 No KYC — light-touch entry Email, phone, device fingerprint, sanctions screen Card top-up only, wallet system, balance, subscription payment, rewards, and stablecoin flows. No cards issued, no banking rails.
Tier 2 Full KYC — full access Full ID verification, liveness, address check, ongoing monitoring Full access to everything: all top-up rails, card issuance, banking rails, higher limits, remittance, and all other products.
Tiering is applied per product. A user only completes the tier required for the activity they are performing. Thresholds and verification steps are finalised with the regulated partner per jurisdiction.
Revenue Model for ExpressVPN
Line 01
Subscription Cost Save
Reduced processing cost and lower decline loss versus card rails, especially in high-friction markets.
Line 02
Transaction Fees
Revenue share on NOXXO-facilitated volume across top-up, FX, off-ramp, and remittance.
Line 03
Card Interchange
Interchange on card spend under the programme, shareable with ExpressVPN.
Line 04
FX Spread
Transparent FX with a shareable margin on conversion activity within the wallet.

Key Details

Next Steps
01
Full Scope of Technical Set Up
Define the full technical scope across wallet, top-up rails, card programme (subject to scheme approval), cashback module (if elected), distribution corridors, priority markets, and stable whitelist.
02
Commercial Terms
Finalise stage-level pricing, revenue share model across the four revenue lines, and cashback economics if elected.
03
KYC / KYB Onboarding
ExpressVPN entity onboarding with NOXXO and the regulated partners selected per jurisdiction.
04
Technical Integration
API and SDK integration, sandbox environment, branded UX spec for wallet and card screens.
05
Service Agreements
Execution of the NOXXO Service Order Form (SOF), master services agreement, and agreements with the regulated partners facilitating the payment flows.
CONFIDENTIAL
NOXXO LTD (NOXXO) provides technology infrastructure only and does not offer regulated financial services or handle funds. NOXXO does not accept, transmit, hold, safeguard or control funds or other assets. All financial services are provided by third-party institutions that are duly licensed or regulated in their applicable jurisdictions. Nothing herein constitutes, or should be relied upon as, an offer, solicitation or promotion of financial services in any jurisdiction.