Custodial vs Non-Custodial Crypto Payment Gateways: Which Should Your Business Choose?

A business can accept cryptocurrency payments at checkout in both custodial and non-custodial payment systems. The main difference is who holds the money between the customer's payment and your bank account or wallet.

What is a custodial crypto payment gateway?

A custodial crypto payment gateway keeps the customer's cryptocurrency in their wallets under their control. Then it deposits to your wallet, changing the crypto into dollars or euros, and then sends the payments on time. You don't interact with the crypto, but you interact with the provider with your money while the crypto is being transferred. 

What is a non-custodial crypto payment gateway?

A non-custodial crypto payment gateway that creates the invoices, monitors the blockchain, and verifies payments. while the money goes to the wallet that is only under the merchant's control. The gateway never holds the merchant's private keys or a balance on their behalf.

In other words, the gateway is the cashier, not the bank. If you want a revision on the basics first, check out our blog on what a crypto payment gateway.

The checkout may look almost the same to your customer. The main difference is what happens behind it; more specifically, how the payment is received, who controls the money, and how the money comes to your business.

How a custodial payment works

A custodial crypto payment processor is similar to a card processor with crypto rails. It handles much of the complication and takes the payment into its own wallet but will get back to you later.

The payment process, step by step

1. The gateway displays an amount and an address it controls when your consumer chooses cryptocurrency during the checkout process.

2. After the customer makes a payment, the gateway waits for blockchain confirmations, which attest to the transaction's finality and reliability.

3. The gateway credits your balance after recording your order as paid.

4. If you selected fiat, it converts the cryptocurrency on a predetermined schedule and transfers the money to your wallet or bank.

What you get

• Fiat settlement: your dollars or euros go into your bank, so you do not need to store any crypto at any point. 

• Volatility protection: The price is locked at checkout, and it gets converted for you automatically. 

• Reporting and support: It includes statements, export options, and a team to call if needed. 

• A regulated counterparty: Many custodial providers have licenses. This means they do KYC/KYB checks (identity checks on you and your business) and AML checks (anti-money-laundering).

How a non-custodial payment works

A non-custodial gateway does not take your money at any point. It generates the payment request and monitors it, while the money goes directly to your wallet. 

1. The gateway generates an invoice and a unique receiving address for that order.

2. The address comes from your wallet. There are some gateways that use an XPUB (an extended public key; it can generate receiving addresses but cannot spend the money). Others use a smart contract, which is a small program that automatically sends the payment to your wallet.

3. The gateway checks the blockchain until the payment passes the required number of confirmations.

4. Once confirmed, the gateway sends your system a webhook, which is an automatic message that says "Order 1234 is paid."

5. The funds are already in your wallet. There is no batching, and no money is held by the gateway. 

What you get

• Direct access to your money: Payments go directly into your wallet as soon as they are confirmed. There is no payout schedule to wait for.

• No provider balance at risk: The gateway does not hold money for you, so if the provider fails or its wallets are hacked, your revenue will not be stuck.

• No pooled funds: Your payments are not mixed with merchants’ money in a shared wallet. 

• Built for stablecoins: You can keep, spend, or send stablecoins to suppliers without converting them.

• Easier to switch vendors: The keys are yours; changing gateways does not mean moving funds out of someone else’s account. 

• A clear record on the blockchain: in this every payment can be checked, which can make reconciling payments simpler. 

You are responsible for your wallet security and for getting fiat when you need it. The vendor checklist mentioned later in this guide helps you to check that a gateway is truly non-custodial.

Both models can be combined through a hosted checkout page, API, or ready-made plugins for platforms such as WooCommerce or self-hosted software. We'll explain each option in our guide on how to accept crypto payments as a business.

Self-hosted, managed, and hybrid models

Self-hosted gateways are hosted on your own server, for example, the open-source BTCPay Server. There is no gateway fee, and you're responsible for the hosting, updates, and uptime. 

Managed non-custodial gateways will host the software, and payments are still directed straight to your wallet. 

Hybrid gateways combine both models. Many say they are non-custodial, but they offer an optional wallet, such as a conversion feature and an internal balance. Those features can send your money back in the provider's hands, so make sure to ask them before you sign. 

With custodial payments, you depend on a third party to manage your funds. With self-custody, your team takes responsibility for managing funds. For businesses that want control, speed, and lower fees, non-custodial usually has more to offer. 

Custodial gateways: benefits and risks

Benefits:

• Fiat in your bank: The provider converts crypto into dollars, euros, or your local currency and sends it directly to your bank account. 

• No wallet to manage: You do not need to store your keys or secure a wallet.

• Compliance handled for you: The provider verifies identity and sanctions as part of its service.

• Simple reports: Statements and exports are simple to give to your accountant.

Risks:

• Custodian insolvency: In 2023, Prime Trust, a custodian whose customers were mainly businesses, owed clients $85.67 million in cash but held only $2.9 million. This comes from the Nevada Financial Institutions Division’s June 26, 2023 petition, as reported by Bloomberg.

• Hacks: CoinsPaid reported that they had stolen $37.3 million believed to be from the Lazarus Group and that the funds of their clients were not involved. 

• Hot wallet attacks: Alphapo's hot wallets, which is the practice of keeping your wallet online for fast withdrawals, were cleared days later. The first estimate was $23 million, but The Block reported that the total came to $60 million, comprising the losses of CoinsPaid.  At least one Alphapo client, HypeDrop, paused withdrawals while the incident played out.

• Frozen or delayed payouts: A provider may freeze or delay payouts while it is in compliance review. No, that is not a crime, as it's part of the regulated custodian business. 

• Account closure: When the provider doesn't want you as a customer in their industry, your account will be closed. 

Non-custodial gateways: benefits and risks

Benefits:

• Full control of your funds: The money is deposited directly to your wallet, and the provider does not hold a balance for you.

• Faster access to revenue: the money is received after blockchain confirmation, so you do not wait for a payout schedule.

• No exposure to a provider’s failure: your money already in your wallet is not tied up if the provider becomes insolvent or is hacked.

• No pooled funds: Your payments are not mixed with other merchants’ money in a shared wallet.

• Less freeze risk: A gateway cannot freeze money it never holds. Additionally, check the token's rules, as some stablecoin issuers may also be able to freeze tokens at addresses. 

• Stablecoin-ready: You can keep, spend, or send stablecoins to suppliers without converting them.

• Clear payment records: All payments can be verified on a blockchain explorer, and it's easier to get it done. 

Risks:

• Lost keys: If you lose your seed phrase (the backup words for a wallet) and your device, the funds are gone.

• Phishing: Finance teams are targeted with fake support messages and fake wallet apps.

• Wrong-network payments: There is also the risk of mistakenly sending USDT on the wrong network so recovery can be hard.

• Insider access: If only one employee has access to the wallet keys, losing that access or misusing it could put your funds at risk. 

• Vendor shutdown: If the wallet or payment software can be discontinued, it’s important to have a backup plan for moving your funds.

How to reduce exposure with either model

Do a quick sum. Assuming you are selling $40,000/month, it is typical that you have several thousand dollars with your custodial provider at any given time, and not to mention a lot of weekend holidays. This is a typical exposure. 

For both models, these safety measures apply: 

• Payout address whitelists: Only money can be sent to addresses that you have approved in advance.

• Multisig or MPC wallets: Multisig requires multiple keys to approve a transfer. MPC (multi-party computation) divides one key into multiple parts stored by different people or devices.

• Hardware wallets: Small devices that keep keys offline.

• Role-based access: Staff only get the permissions they require for their job roles.

• Two-factor authentication: A second login check, such as an app code.

The percentage shown on a pricing page is not the amount that you are paying. This section displays publishing rates next to each other and then clarifies the other expenses that change your actual costs. 

Transaction fees by provider

These are the published headline rates. Prices can be different from one provider to another; always make sure to check each provider's pricing page before making a decision. 

Setup fees, monthly costs, and withdrawal fees

A low percentage might hide charges. Always ask every provider about these three things:

• Setup fees: Always confirm this with any provider before signing the agreement. 
• Monthly costs: There are some providers charge for plans, plugins, or support every month. Rather than self-hosted tools, they will charge you for server and maintenance time. 
• Withdrawal fees: CoinGate lists crypto payouts at 0.50 EUR + 0.5%. Cryptomus does not mention any withdrawal fees on their fee page; be sure to inquire before you sign up. Be sure to look into minimum payouts as well. 

Blockchain network and conversion fees

These two costs do not come directly from the gateway, but they still affect your total cost

• Network fees: The blockchain charges a fee for every transfer you have done. This is called gas. It's either paid by you or by your customer, depending on your setup. At times of congestion, TRON, BNB Smart Chain, and Solana typically charge lower fees than Ethereum.
• Conversion fees and spreads: Some providers charge a small extra fee by offering a different exchange rate than the market rate. This extra cost is called a spread. Cryptomus claims that auto-convert is free, and Stripe offers you conversion as part of the 1.5% they charge. The spread is the difference between the market price and the actual rate. It is not always listed as a fee, so always ask the provider how much extra they charge. 

How to judge which gateway offers the best value

Not every payment gateway is right for every business. To find the best option, compare the total cost based on your business needs.

1. Add up all five costs: add the gateway fee, network fee, conversion spread, payout fee, and your own staff time.
2. Use your actual amount: for example, with $100,000, the difference between one percent and 0.35 percent is $650 without considering any other costs.
3. Count the extra work: A non-custodial gateway might have lower fees, but you may need your own off-ramp (a service that turns crypto into bank money) and good wallet security.
4. Match the model to your needs: If you want to receive regular money in your bank account and avoid managing crypto, paying a higher fee for a custodial gateway may be worth it.

If the fees above and the risks earlier in this guide point you toward direct-to-wallet payments, Oppi Payment is one option to consider. Here is what Oppi’s own pages say, so you can check each point yourself.

What Oppi Payment offers

• Direct-to-wallet settlement: According to Oppi Payment crypto payment solution for business page, payments settle in crypto straight into your own wallet. Oppi states that it does not take custody of merchant funds.

• Simple pricing: Oppi publishes a flat 0.35% fee per transaction, with no setup fee and no monthly subscription. 

• Wide coin support: Oppi Payment’s crypto payment infrastructure page lists 40+ cryptocurrencies across Ethereum, BSC, Polygon, TRON, and Solana.

• Easy ways to start: Oppi Payment offers a payment page, a payment button, invoices, or the API depending on your team. 

Who it suits

Oppi Payment fits businesses that want to receive crypto or stablecoins in their own wallet. That includes cross-border sellers, B2B companies, and digital product businesses.

What to keep in mind

Oppi Payment does not offer fiat settlement, so you will need your own exchange or off-ramp if you want to move money in your bank. You are also responsible for wallet security and your own tax records, as covered earlier in this guide.

Want the full background? Read what Oppi Payment is then test us with the seven questions in the “How to Check Whether a Gateway Is Truly Non-Custodial” section.

Once the blockchain has verified a transaction, the payment is final. On networks this can be done in seconds. On Bitcoin, the confirmation may be delayed. Once they have been confirmed, the custodial gateways combine the payouts into a single bunch. The money may be deposited at the bank in one day or more. 

With a non-custodial gateway, the money is yours, but it is still crypto. The only way to convert them to fiat is to transfer them to an exchange or one of its offline comrades. That partner will then convert the crypto to fiat and send the money to your bank account. The partner will also conduct its “know your business” checks.

Stablecoins are cryptocurrencies that maintain a stable value, usually around one US dollar. USDC is issued by Circle, while USDT is issued by Tether. They both are available on multiple blockchains, with its own token standards, such as ERC-20 (Ethereum), TRC-20 (TRON), BEP-20 (BNB Smart Chain), and SPL (Solana).

The network has to be the same on both sides. For example, USDT sent via TRC-20 has to be received on the TRON network. So it is important to know to set the proper network during your checkout. 

There are no card chargebacks with either model because payments with crypto cannot be reversed by a bank. But there are still conflicts, and laws are there that protect consumers. 

Each type of model processes refunds in a unique way. The return of the balance will be noted by the custody provider, and a fee will be taken from your total. non-custodial balance, you will send the refund from your wallet, so you need a long-lasting procedure to verify the customer's refund wallet address. 

Plan for the common payment exceptions:

• Underpayments: This happens when the customer pays less than the amount that is written on the invoice, and this usually happens because the exchange deducted money. 

• Overpayments: The customer pays more and wants the extra money back. 

• Expired quotes: This does not mean that the price of a cryptocurrency will always be the same at the time it expires. 

• Wrong network: The correct token is received on the wrong blockchain or is not received. 

Always write a policy for each possible case before going live, and display all these policies on your checkout or terms page. 

If you are choosing between a custodial and a non-custodial gateway, the one who holds the license and who keeps the records. The choice does not remove your responsibilities. This section explains the rules, taxes, and record-keeping habits so you know what to expect before you start using the service. 

Who needs a license?

Custodial providers handle your money, so regulators treat them like financial firms. In the US, FinCEN’s 2019 guidance says crypto payment processors must register and perform anti-money laundering (AML) checks. That includes KYC/KYB, which means checking who their customers and businesses are.

The same guidance states that wallet providers who don't accept and don't transfer value aren't treated in this way. That is why non-custodial software is regulated differently.

“No KYC” is not “no obligations."

You still have to follow sanctions, taxes, and consumer laws. In 2021, BitPay paid $507,375 to settle 2,102 apparent sanctions violations, according to OFAC. The lesson is simple: someone needs to check who you are working with. 

EU rules in plain words

Starting July 1, 2026, EU companies that provide crypto services like storage, transfers, or exchanges must have a CASP (crypto-asset service provider) license under MiCA. Recital 83 states that non-custodial wallet software providers are not included in its rules. 

But MiCA focuses on what a company does, not what it is called. If a "non-custodial" gateway also stores or converts money, those services need a license. Check the provider on the ESMA register yourself. 

Travel Rule and US stablecoin law

• Travel Rule: Owners of cryptocurrencies are required to pass on sender/receiver information with transfers. To be compatible with your customer's exchange, you might be required to validate that you are the owner of your receiving wallet. 

• GENIUS Act: The US stablecoin law was signed on July 18, 2025, and will come into effect on January 18, 2027. Starting July 18, 2028, providers in the United States are only permitted to provide certain stablecoins by certain issuers. In mid-October 2026, proposals were still being finalized. 

How crypto payments are taxed

In the US, IRS Notice 2014-21 says that crypto you receive for goods or services is income. You should record the value of that crypto in U.S. dollars on the day you receive it. The price then becomes your cost basis, a term you will use for calculating gains or losses when the time comes. 

If you use a broker, they may send you a Form 1099‑DA. If you use a provider, they usually will not send such a form. Therefore, you must keep your records and still report the income.

Accounting and EU reporting

• Accounting: ASU 2023‑08 says that certain crypto assets must be measured at fair value. Many stablecoins may not be covered by this rule. Ask your auditor how you should treat crypto, such as USDC or USDT. 

• EU: DAC8 started on January 1, 2026. It requires crypto providers to send user data to tax authorities. The first data exchange must happen by September 30, 2027. 

Many gateways say they are non-custodial, but not all of them are. Check these seven questions.

1. Who creates and keeps the keys for the receiving addresses?
   A good answer: “You do. We only see your public key.” A public key can create receiving addresses, but it cannot spend your money. A warning answer: “Our system keeps the keys safe for you.”

2. Can you move, freeze, or delay my money?
   A good answer is a clear “no,” with a simple reason. A warning answer: “Only in rare cases.”

3. Is there a balance in my name on your platform?
   If you have to withdraw your money from a balance, the provider holds it for you. That is custody, even if the balance is optional.

4. Is non-custodial the default, or do I have to switch it on?
   Some providers are custodial, so you may need to change the settings to use a non-custodial model.

5. What happens if you shut down?
   You should still be able to receive and spend your money using your own wallet.

6. Has anyone outside your company checked your security?
   Ask for the audit report, what it covered, and when it was done. A badge on a website is not enough.

7. Which licenses do you hold, and where?
   Ask for the license number, then look it up yourself on the regulator’s public list. In the EU, that is ESMA’s register. In the US, it is FinCEN’s MSB search (the list of registered money services businesses).

There are no right and wrong answers. The right choice depends on how your business handles money and works best for your needs.

When a custodial gateway makes sense

If you do not have anyone to keep the wallet safe, or if you want the provider to handle compliance checks and tax forms, then choose a custodial gateway. A custodial gateway is ideal for retailers and firms that must follow strict accounting. 

When a non-custodial gateway makes sense

if you want money the moment they confirm, you plan to hold or spend stablecoins, and a frozen balance would hurt your cash flow, then choose a non-custodial gateway. It suits cross‑border sellers and B2B companies that pay suppliers in stablecoins. 

Five-question decision framework

1. Do you want fiat money in your bank account without using crypto?
   If yes, then a custodial gateway suits you better. If not, then a non-custodial gateway suits you better.

2. Can someone on your team own wallet security?
   If yes, then a non-custodial gateway suits you better. If not, then a custodial gateway is the safer fit.

3. Would a frozen or delayed payout seriously hurt your cash flow?
   If yes, then a non-custodial gateway is the better fit. If not, then either model can work.

4. Do you want the provider to run compliance screening and send tax forms?
   If yes, then a custodial gateway is the better fit. If not, then a non-custodial gateway is the better fit.

5. Will you mainly keep or spend stablecoins as stablecoins?
   If yes, then a non-custodial gateway is the better fit. If not, then a custodial gateway works well, or you can use a non-custodial gateway with a separate off-ramp (a service that turns crypto into bank money).

Pre-Launch Checklist

1. First, get key control and ensure that each receiving address's keys are under your control.
2. Use hardware wallets, payment address whitelists, tested backups, and multisig or MPC (a wallet that requires multiple users or devices to approve a transfer).
3. Next, choose the networks and tokens that you will accept. Find a fiat partner if you require funds in your bank.
4. Verify webhook signing (a signature proving messages come from the gateway), idempotency (so a repeated message cannot mark one order as paid twice), a sandbox for testing, confirmation thresholds, and an API that only has the permissions they need. 
5. Create an exception policy that addresses underpayments, overpayments, expired quotes, incorrect networks, and refunds.
6. Keep a log of the order ID, transaction hash, token, network, and fair market value at the time of receipt. 
7. Check sanctions screening, licensing needs, and Travel Rule questions with an adviser.
8. Make small live payments, and write down how you would switch vendors in a week.

What is the difference between a custodial and a non-custodial crypto payment gateway?

In a custodial payment gateway, they store your customer's crypto in wallets that they manage and release it to you by offering a payment later, usually in fiat. In a non-custodial payment gateway, the funds are directly transferred to a wallet under your control, and the payment provider never has control of your wallet or your funds. 

Is a non-custodial crypto payment gateway safer?

With non-custodial, the risk of a provider hack, insolvency, or freeze like Prime Trust did in 2023 is avoided. But it moves security to you, so lost keys, phishing, or insider access become your problem. 

Can a non-custodial gateway freeze my funds?

If the gateway really never has your keys or a balance, it cannot technically freeze funds that are already in your wallet. It can still stop helping you block invoices or shut down. Some tokens, such as USDC and USDT, can also be frozen by their issuers at the level no matter which gateway you use.

Do I still need KYC/KYB and compliance with a non-custodial gateway?

In general, yes. However, the gateway conducts a less thorough inquiry, but you'll always follow sanctions rules, tax law, consumer law, and your industry's license requirements. Additionally, your off-ramp exchange will also perform KYB checks of your business. Get advice from a lawyer in your country before you go live.

How do I get fiat with a non-custodial gateway?

You send crypto or stablecoins from your wallet to an exchange or off-ramp partner that will convert them and send your money into your bank. This adds an additional step, a fee, and an KYB verification process with that partner. Many businesses keep part of their revenue to pay suppliers and convert only what they need.  

How do refunds work with crypto payment gateways?

With a custodial gateway, the provider usually sends the refund from your balance and charges a network fee. With a non-custodial gateway, you send the refund from your own wallet. In both cases, confirm the customer’s refund address and network in writing, and decide upfront whether you refund the crypto amount or the original fiat value.

Are there chargebacks with crypto payments?

No, not in the card sense. Cryptopayment is only confirmed on a blockchain, so no bank can reverse it. Customers can still dispute a sale with you, and consumer protection laws may require refunds for faulty goods or services. Having a transparent refund policy and keeping detailed records is crucial for resolving conflicts fairly. 

How should my business account for crypto payments for tax?

In the US, when you receive crypto for goods or services, it’s treated as income at fair market value on a date you receive it. That same value also becomes your cost basis for tax calculations, so you must keep records for every payment. Include the transaction value in USD on the day you received it. Tax rules differ by country, so it’s smart to work with an accountant who understands crypto.

What happens if my crypto payment processor goes bankrupt?

If you use a custodial processor, any money that it processes for you could be subject to a lengthy litigation process, and you might only receive a percentage of your balance. This was encountered by those seeking the prime trust line of credit in 2023. If the gateway you choose is truly non-custodial, your money remains your money, but you'll have to upgrade the software you use to accept payments. 

The right gateway comes down to three things: who controls the money, how long, and what protects it while it's in the hands of others. A custodial gateway provides the ability to get fiat money, and you do less crypto work, but it comes at the cost of relying on the provider's services. A non-custodial gateway gives you control and speed, but you own your wallet security and your own records.

Use the five questions and the seven vendor checks in this guide, and pick the risk your team can manage best. However, if direct-to-wallet payments are right for your business, you can read how to accept crypto payments as a business.