A person hands cash over at a desk in one country, and the recipient collects it in another with a transfer number and a four-digit PIN. The fee is split automatically between the accepting outlet, the operator and the paying outlet. Every request and every response is cryptographically signed, all operations go into two independent journals, and after ten wrong PINs the transfer is blocked.
The fee has three components — for accepting, for processing and for paying out — and is distributed between the accepting outlet, the operator and the paying outlet automatically, with no manual reckoning at the end of the day.
Conversion between three currencies is supported. A transfer is blocked after ten wrong PIN attempts, so that it cannot be guessed by brute force.
Every request and every response is cryptographically signed, and all operations are written into two independent journals: a discrepancy between them is visible immediately and needs no investigation through logs.