Full-stackRegulated fintechServerless

A regulated stablecoin platform, built end-to-end.

El Gebali Crypto is a Swiss platform for exchanging stablecoins (USDT / USDC) against CHF. I designed and built the entire system alone, frontend, backend, database, compliance automation and operations tooling, as founder and sole developer.

Role
Founder & sole developer
Domain
Regulated fintech (VQF)
Type
Full-stack, end-to-end

The brief

Build a compliant, highly automated platform for a one-person regulated financial intermediary, where manual processes don't scale, and compliance can't be bolted on afterwards. Everything from customer onboarding to sanctions screening, order handling, payments and record-keeping had to run reliably with a single operator behind it.

▸ Visit the live platform elgebali-crypto.ch

Architecture

I chose a serverless-first, edge-native architecture for low cost, high reliability and global speed, no servers to maintain, and a database that lives at the edge next to the code.

  • Cloudflare Workers the API and business logic run at the edge, with the Hono framework for routing.
  • Cloudflare D1 an edge SQL database holding orders, customers, wallets and compliance data.
  • Static trilingual frontend (DE / EN / FR) hosted on Hostinger, talking to the Worker API.
  • Resend for transactional, multilingual email; scheduled cron jobs for time-based tasks.
Trilingual Frontend DE / EN / FR · Hostinger HTTPS / REST Cloudflare Worker · Hono API & business logic (edge) read / write D1 edge SQL database orders · customers · compliance Resend · email Cron · scheduled GitHub Actions sanctions pipeline DATASETS → D1

What I built

Order management & operations

Live exchange-rate fetching with a CoinGecko → Kraken fallback and a configurable markup; SP-prefixed order references; a status workflow from order to payment to delivery; an admin dashboard (Basic Auth); a branded PDF receipt generator; and an automated 48-hour payment-reminder cron.

Automated compliance screening

The core engineering challenge. A GitHub Actions pipeline fetches and parses the official sanctions datasets, OFAC, Swiss SECO, UK and EU, together tens of thousands of entries, and loads them into D1, where every customer name is screened and matches surface as amber warning badges in the admin view. Parsing runs sequentially to stay within the memory limits of free CI runners. On top of this: PEP screening against open datasets, OFAC wallet-address screening, FATF high-risk-country IP gating, a disposable-email blocklist, and mandatory Swiss-residency and beneficial-owner declarations stored with timestamps.

Sanctions screening dataset entries (approx.) UK ~57.7k SECO ~39.6k EU ~24.8k ~122K entries screened across sources · plus OFAC wallet-address & PEP screening

Identity & wallet verification

A "Satoshi test" wallet-verification flow the customer proves control of their wallet via a micro-transaction with a dedicated submit endpoint, a 72-hour expiry, trilingual confirmation emails and an admin view showing the reported status and pre-filled transaction hash. Designed to integrate with a commercial KYC identification provider.

Passwordless customer portal

A magic-link customer portal (no passwords) where customers view their orders and account, fully trilingual, plus a double opt-in newsletter with admin management and CSV export, trilingual FAQ pages and an illustrated order tutorial.

Finance & data tooling

A Binance trade CSV importer with automatic delimiter detection and Swiss/German locale parsing, feeding FIFO lot tracking for accurate cost basis and self-contained canvas charting that replaced a heavy charting library with zero dependencies.

How an order is finalized

Every order runs through the same automated sequence from rate lock and compliance checks through screening, payment and wallet verification to delivery. Each step is enforced by the application, not by manual checklists.

fail match 1Order placedrate locked · CoinGecko → Kraken + markup 2Input & access checkscountry IP · disposable email · declarations 3Sanctions & PEP screeningname vs OFAC/SECO/UK/EU · wallet vs OFAC 4Order confirmedSP-reference · trilingual email · PDF receipt 5Payment (CHF)bank transfer · 48h reminder cron 6Wallet verificationSatoshi test · 72h expiry 7Stablecoin sentFIFO lot recorded · delivery email Order complete Rejectedchecks not passed Admin reviewamber flag → clear / deny
End-to-end order processing enforced automatically at every step.

Engineering decisions worth noting

  • Serverless at the edge near-zero fixed cost and no infrastructure to maintain, ideal for a solo operator.
  • Sequential dataset parsing solved out-of-memory crashes when processing 40 MB+ sanctions files on free runners.
  • Zero-dependency charting replaced Chart.js with hand-written canvas rendering to keep the frontend lean.
  • Compliance as code screening and controls are automated and reproducible, not manual checklists.

Tech stack

Cloudflare WorkersHonoD1 (SQL) JavaScriptTypeScriptREST APIs GitHub ActionsResendCanvas HTML / CSSCron
What this demonstrates

End-to-end ownership of a real, regulated product: full-stack depth from database to frontend, disciplined automation in a domain where correctness matters, and the ability to design and ship a complete system solo, the same rigor I bring to client work.

Need something built like this?

Custom applications, integrations and automation, end to end.

Start a project →