A remittance platform is rarely tested on a quiet Tuesday. It is tested on payday, when a month's worth of senders arrive in a few hours, and on the afternoon a payout partner stops answering. This guide is for operations heads, CTOs and founders of established money transfer operators judging whether a platform, their own or a provider's, will hold up on those days.
It works through both scenarios, sets out what to ask a provider and what a good answer looks like, and is plain about what your own team still has to own. Figures are illustrative.
The two days that test a platform
The payday peak. An operator that normally handles 600 transfers a day sees 2,400 on the last Friday of the month, with 40% of them between 5pm and 8pm. Every one needs a quote, a payment, sanctions screening, risk checks and a payout. Nothing new is happening; there is just four times as much of it, at once.
The partner outage. At 6:15pm on that same Friday, the payout partner for one busy corridor starts timing out. Some instructions reach it, some do not, and replies stop coming back. The platform is up, the app works, customers keep paying, and payouts on that corridor are now uncertain.
The second scenario is the harder one. A platform can be "available" by any uptime measure while one partner integration is failing. Reliability, for an operator, means what happens to money in flight when one piece breaks.
Doing it with RemitSo
- Your own AWS account. Each operator runs in a dedicated AWS account in its own region, billed by AWS to the operator. You are not sharing servers with another operator's payday.
- Scout, every five minutes. Scout measures what needs an operator in one place: transfers, payouts and payments needing action, compliance decisions waiting, and system health (job queue, provider messages never applied, partners failing calls, rate feeds stopped, maintenance windows). Each group is granted by role.
- Payouts that wait safely. A timeout or unreadable answer stops a payout in Error with the reason and whose side it is on; the customer is not told it failed. Where the partner may already hold it, Retry asks the operator to confirm with the partner first. A payout the partner stops answering about appears on Scout and is never cancelled automatically.
- Nothing lost on the way in. Every incoming webhook is saved before processing, with the raw message and the reason it failed one click away, and a one-click retry. Every outbound call is logged with status, duration, error and correlation ID, keys masked.
- 43 alert events in plain language, each with its own subscribers, such as "Payout not sent because of a fault on our side" and "Exchange rates not moving".
- Maintenance without taking the platform down. A maintenance window pauses only what the work needs; money in flight carries on, and the window holds until your team lifts it. Transaction processing can also be paused and resumed during an incident.
- Releases tested on staging first. Every release says plainly whether it needs downtime; each environment shows which release it runs. Releases 2026.10.1 to 2026.10.11 needed none.
- For auditors: a software bill of materials (CycloneDX) ready to download, and ISO 27001:2022 certification.
Your team still owns incident decisions, partner escalation, customer messages and the regulator relationship. See maintenance without downtime and partner failures and API and webhook logs.
The partner outage, hour by hour
| Time | What happens | Who acts |
|---|---|---|
| 18:15 | Calls to the partner start timing out. Each affected payout stops in Error with the reason. Subscribers get the alert. | Platform |
| 18:20 | Scout shows payouts needing action climbing on one partner, and the partner failing calls under system health. | Operations on shift |
| 18:30 | Operations confirms the pattern in the outbound call log and calls the partner. Support gets a holding line for customers on that corridor. | Operations, support |
| 18:45 | The team decides whether to pause new transfers on that corridor or keep taking them and pay out later. Other corridors carry on as normal. | Head of operations |
| 21:00 | The partner recovers and sends a list of what it received. Payouts it holds are left to complete; the rest are retried, each confirmed against the list. | Operations |
| Next morning | Reconcile every payout from the window against the partner's statement. Review the incident and the customer messages sent. | Operations, finance |
What did not happen: no customer was told their transfer had failed when it had not, no payout was sent twice, and no incoming partner message was dropped. That is the bar to test any platform against.
What to check before payday
- Know your peak. Pull the busiest three hours of each of the last twelve months. Plan for the worst of them, plus growth.
- Find the manual steps. A review queue that takes two people fifteen minutes a case is fine at 600 transfers and a backlog at 2,400. Check how many transfers stop for a person on a normal day, and multiply.
- Check document tiers. Payday pushes customers over limits. Customers asked for documents at checkout are fine; customers asked for documents their country cannot provide are a support queue.
- Check rates are moving. A stuck rate on a busy evening is a pricing problem. Make sure someone is subscribed to the alert that says so.
- Do not release on payday. Even with releases that need no downtime, schedule changes away from your peak.
What to ask, and what a good answer sounds like
| Ask | A good answer | A warning sign |
|---|---|---|
| What happens to a payout when the partner times out? | It stops in a state your team can see, with whose side the fault is on; it is not resent until someone confirms the partner does not hold it | "We retry automatically" |
| When is a customer told a transfer failed? | Only when the partner has refused it | On any error |
| Can a partner message be lost? | Every incoming message is stored before it is processed, and can be replayed | "Partners resend if needed" |
| How will we know a partner is failing? | A queue or alert by partner, checked every few minutes, sent to people you choose | "Check the logs" |
| What does an upgrade do to live transfers? | Each release states whether it needs downtime; maintenance pauses only what it must and money in flight carries on | A monthly downtime window |
| Where do changes get tested? | On your own staging environment first | "We test internally" |
| Is our platform shared with other operators? | A clear answer on where your data and servers sit | Vague answers about "the cloud" |
| What does the uptime commitment cover? | A contract figure, how it is measured, and what counts as down; note 99.99% over a year is about 52.6 minutes | "Highly available" with no number or definition |
| What can we show an auditor? | A software list, certifications you can verify, and your release history | A slide |
Watch out: a throughput figure from a provider's quiet test environment tells you little. Ask how the platform behaves at your own peak, and what queues first when it is busy.
What your own team still owns
No platform runs an operation for you. Before your next peak, make sure you have:
- a named person on shift for the busiest hours, with authority to pause a corridor;
- a partner contact list with out-of-hours numbers, and an agreed way to get a list of what the partner holds;
- support scripts for a delayed corridor, written in advance;
- alerts subscribed by the right people, not by everyone;
- a next-day reconciliation routine for any incident window.
Reliability also sits inside your compliance obligations. The FATF Recommendations cover money or value transfer services directly, including the duty to report suspicious transactions, so controls cannot pause when volume rises. See the compliance and risk management guide and catching payout problems early.
Sources
- FATF, International Standards on Combating Money Laundering and the Financing of Terrorism and Proliferation: The FATF Recommendations (updated February 2025): Recommendations 14, 16 and 20.
- FATF, Guidance for a Risk-Based Approach: Money or Value Transfer Services.
Checked October 2026. Regulations change; confirm current requirements with the regulator or your adviser.
Frequently asked questions
Is uptime the best measure of a remittance platform's reliability?
No. A platform can be up while a payout partner fails. Ask what happens to money in flight when one part breaks, and how your team finds out.
What should happen to payouts during a partner outage?
They should stop in a visible state with the reason, not be retried automatically or reported to customers as failed. Each is retried only once the partner confirms it does not hold it.
Does RemitSo need downtime for upgrades?
Each release says whether it needs a window. Releases 2026.10.1 to 2026.10.11 needed none. When maintenance is needed, it pauses only what the work needs and money in flight carries on.
Where is RemitSo hosted?
In a dedicated AWS account in the operator's region, billed by AWS directly to the operator.
How does an operations team see problems early in RemitSo?
Scout checks every five minutes and shows what needs an operator, including partners failing calls. 43 alert events, each with its own subscribers, say in plain language what went wrong.