Who touches the money, and who doesn't.

By service

Bolívar disbursements

1. 1

   Your fintech

   You fund in USD or USDC. You never hold bolívares.

   ↓→
2. 2

   Bolivar Connect

   Takes your disbursement instruction over the API, quotes and locks the rate, and reports every status back. Never holds your users' money.

   ↓→
3. 3

   Licensed exchange house

   Converts and disburses.

   ↓→
4. 4

   Their Venezuelan bank

   Bolívares arrive by Pago Móvil or transfer, with a bank reference on every payment.

Automatic collections

Payments go straight into your own account. We only read that account to verify them, with read-only credentials whenever the bank offers them. Your bank key is stored encrypted and is never returned, not even to you.

Security

Why it's safe

Custody

Bolivar Connect is the technology layer: it takes instructions over the API and reports every status. It does not hold your users' funds.

Conversion

A licensed exchange house converts between USD/USDC and bolívares.

Supervision

The licensed exchange house is supervised by SUDEBAN and BCV.

OFAC

OFAC compliant, with no sanctioned counterparties.

Traceability

Every payment carries a bank reference.

Documents

Entity documents are shared under NDA. Ask at victor@bolivarconnect.com.

Integration security

• Scoped API keys (quotes:write, payments:read|write, beneficiaries:read|write, treasury:read, events:read|write), sent in the x-api-key header.
• Idempotency-Key on every operation that moves money: a retry never pays twice.
• Webhooks signed with HMAC-SHA256 (payment.settled, payment.failed). The outcome event is emitted once, but delivery is at-least-once: dedupe by id.
• If a payment fails, the ledger entry is reversed and no fee is charged.
• The key you paste in “My account” goes from your browser straight to the API: it never touches bolivarconnect.com's servers.