Many enterprises are considering or have adopted use of cryptocurrencies for payment. Despite concerns around security, traceability, and energy consumption, cryptocurrencies are a real payment method. Security and risk (S&R) professionals are responsible for helping business leaders understand the legal and regulatory risks to ensure confidentiality, integrity, and empathy of security operations, and, importantly, must provide guidance on securing cryptocurrencies. In this report, we help S&R pros: 1) understand the current adoption of cryptocurrency payments; 2) examine the threat surface; 3) investigate the regulatory landscape; and 4) identify best practices for secure implementation.