ACK Receipts are Verifiable Credentials (W3C VC format) that prove payment completion. StableAudit wraps the 4-step receipt verification process in a logged, auditable pipeline.
Click "Verify Receipt" to walk through the four verification steps. Each step is audited and timestamped. All results are exportable in VC format.
{"@context": ["https://www.w3.org/2018/credentials/v1"],"type": ["VerifiableCredential","ACKReceipt"],"issuer": "did:web:receipts.acme-psp.com","issuanceDate": "2026-04-01T14:32:18Z","credentialSubject": {"payer": "did:web:agent.acme-corp.com","payee": "did:web:vendor.eu-payments.fr","amount": "3500.00","currency": "USDC","settlementNetwork": "Base","requestToken": "req_7f3a8b2c"},"proof": {"type": "Ed25519Signature2020","verificationMethod": "did:web:receipts.acme-psp.com#key-1","signatureValue": "eyJhbGciOiJFZERTQSIsImtpZCI6ImRpZDp3ZWI6cmVjZWlwdHMuYWNtZS1wc3AuY29tI2tleS0xIn0"}};
How ACK receipt requirements map to StableAudit's 4-step verification pipeline and compliance obligations.
| Verification Step | ACK Specification | StableAudit Implementation | Regulatory Relevance |
|---|---|---|---|
| Signature Validation | Verify VC proof against issuer's public key (Ed25519Signature2020) | Fetch issuer DID from well-known/did.json, verify Ed25519 signature, confirm cryptographic integrity | Gate — MUST pass for credential acceptance. Evidence: signature validity, issuer key ID |
| Issuer Trust Check | Confirm issuer DID is on ACK-trusted Receipt Services list | Query trusted registry endpoint, confirm issuer DID appears in current ACK-approved services (updated hourly) | Gate — Prevents accepting receipts from unknown issuers. Evidence: registry lookup timestamp, issuer rank (e.g., "3 of 12") |
| Revocation Check | Query issuer's status list endpoint (.well-known/status) for credential status | Perform HTTP request to issuer domain, check revocation status list bitmap, log response time and status code | Monitor — Logs revocation queries for audit trail. Evidence: status endpoint URL, response time, active/revoked status |
| Claim Verification | Validate all claims (amount, currency, recipient, settlement network, request token) against original payment request | Compare 6 credential claims to stored payment request token; flag mismatches for manual review; log all 6 validations | Gate — Ensures receipt matches payment intent. Evidence: claim-by-claim validation results, request token reference |
From settlement through verification steps to final audit record. Each phase is logged with timestamps, evidence, and regulatory tags.
Receipt verification ties directly to ACK operational requirements, regulatory reporting obligations, and audit trail obligations under BSA/AML, FATF Travel Rule, and GENIUS Act.
ACK specifies that payment completion receipts MUST be issued as Verifiable Credentials (W3C VC format) signed by the Receipt Service. StableAudit provides the verification and audit infrastructure ACK requires.
Signature validation ensures cryptographic integrity. Issuer trust checks prevent accepting receipts from unknown services. Revocation monitoring catches invalidated receipts. Claim verification confirms the receipt matches the original payment.
Every verification step is logged with timestamp, evidence, and regulatory tag. Export all audit records as Verifiable Credentials for compliance reporting, PSP integration, or regulatory submission.