Every cross-border payment—whether a correspondent banking transfer, a central bank FX settlement or a retail remittance—depends on a chain of terrestrial fibre, submarine cables and commercial cloud routing. A single cut to a major cable landing station, a BGP hijack or a targeted cyberattack can sever a nation's payment rails entirely, freezing import settlement, halting government payroll and triggering a sovereign liquidity crisis within hours. Nations that discovered this vulnerability during the 2022 Tonga cable severance and the 2023 Red Sea cable incidents had no sovereign fallback; they queued payments for days at the mercy of foreign commercial carriers.
A satellite-based payment failover layer sits entirely outside the terrestrial stack. A small constellation of low-latency LEO microsatellites—paired with encrypted ground terminals at the central bank, major commercial banks and border customs nodes—creates an independent bearer for ISO 20022 payment messages and SWIFT MT-equivalent traffic. The link budget supports the modest throughput needed: cross-border interbank message traffic rarely exceeds a few megabits per second at peak; the constraint is latency and availability, not raw bandwidth. An on-board store-and-forward mode handles brief outages without message loss.
When the primary terrestrial path fails, the failover triggers automatically within seconds via health-check daemons watching the main settlement bus. Payment messages are encrypted at origin with national HSM-held keys, routed through the sovereign satellite hop, and delivered to the correspondent bank or regional payment hub on the far side. Transaction throughput is throttled to priority tiers—central bank settlements first, then commercial banks, then retail—ensuring systemic obligations clear even under degraded capacity. The nation retains full cryptographic custody, audit log sovereignty and the ability to impose or lift sanctions without seeking permission from a foreign satellite operator.