The five risks of a stablecoin card: peg, program failure, custody, smart contracts, and fraud, with the August 2026 incident and a safety checklist.
Stablecoin cards are as safe as the weakest of five layers: the stablecoin's peg, the program's finances, the custody model, the smart contracts, and your own account security. None of these balances is a bank deposit. Most risk can be reduced with a licensed program, a small card balance, and spending controls turned on.
The question is not whether stablecoin cards are safe in general. It is which risks a specific card exposes you to and how much money you keep on it. This guide walks through each risk with a real example and ends with a checklist. For how the cards work, see what a stablecoin-backed card is.
Key takeaways
There are five. Each sits in a different layer of the card, and each is reduced in a different way.
| Risk | What can go wrong | Who carries it | How to reduce it |
|---|---|---|---|
| Peg and reserves | The stablecoin trades below one dollar or reserves fall short | Holder of the stablecoin | Hold well-reported stablecoins; keep balances small |
| Program or issuer failure | The program manager, custodian, or partner stops operating | Cardholders with funds held by the program | Use licensed programs that segregate customer funds |
| Custody | Funds held by a third party are frozen, lost, or mismanaged | Cardholders in custodial programs | Know who holds your funds; consider self-custodial options |
| Smart contract and infrastructure | A bug or exploit in shared contracts drains balances | Everyone using the affected contracts | Prefer programs with audits, monitoring, and a reimbursement record |
| Account fraud | Stolen card details, phishing, or account takeover | Cardholder, then program under its policies | 3-D Secure, freeze controls, limits, strong login security |
Custodial: a third party holds the stablecoins on your behalf, and the card spends from its ledger.
Self-custodial: you hold the keys to the wallet, and the card spends from it under rules set in a smart contract.
Yes. A stablecoin is only as stable as its reserves and the market's confidence in redemption. If it trades below one dollar, the card converts fewer dollars per token.
How much this matters depends on the funding model. A just-in-time card keeps the balance in stablecoins until purchase, so a depeg hits the whole balance. A prefunded card has already converted the money into fiat at load time, so only unloaded stablecoins are exposed. Just-in-time vs prefunded stablecoin cards explains the two models.
Dollar stablecoins carry most card volume today. The best stablecoin for card spending compares USDC, USDT, and euro stablecoins on reserves and regulation.
It depends on how funds are held. In a custodial program, your balance is a claim on the program or its custodian, and getting it back depends on how well customer funds were segregated.
That is why licensing and segregation are on every safety checklist. A licensed issuer or e-money institution has to follow rules on how customer money is held. A program that cannot name its issuing bank or licensed partner gives you nothing to check.
Deposit insurance does not fill the gap. The FDIC's fact sheet on crypto companies (July 2022) says deposit insurance does not apply to crypto assets and does not protect against the default, insolvency, or bankruptcy of non-bank entities, including crypto custodians and exchanges.
It showed that shared infrastructure creates shared risk. A single contract version used by several programs became a single point of failure.
On August 28, 2026, unauthorized withdrawals hit card balances held in a Rain-managed Solana contract. Rain described it as a vulnerability "impacting a small number of programs using an outdated version of our Solana contracts." Rain upgraded the contracts the same day and confirmed repayment the next day.
Two affected programs published numbers:
| Program | Affected users | Amount | Outcome |
|---|---|---|---|
| Tria | 636 | $431,945 | Every affected user being refunded in full (per SpendNode, August 29, 2026) |
| Avici | 1,685 | $500,859 | Refunds processed in full with an extra 10% cashback (per SpendNode, August 30, 2026) |
Self-custodial wallets were reported unaffected because they sat outside the affected contract. Rain had not published a full post-mortem at the time of writing, and not every program built on Rain was exposed.
Self-custodial cards have their own contract risk. Gnosis Pay reported an exploit of its Delay and Roles modules on June 1, 2026, and its post-mortem says attackers extracted $1.5 million and that Gnosis absorbed the losses and restored all funds to users. Custodial vs self-custodial stablecoin cards compares how each model fails.
Mostly the same way it happens on any card: stolen card numbers, phishing, and account takeover. The card rails are the same, so the same protections apply.
What changes is the recovery path. Card purchases go through network dispute rules, but a stablecoin transfer out of your wallet is final once confirmed. If an attacker gets into the account that funds the card, they may move stablecoins out directly instead of using the card. Are stablecoin payments reversible? explains why onchain transfers cannot be pulled back.
Watch for these scam signals:
Run through ten checks. A program that fails several of them is not worth a large balance.
The tenth check, an exit path, is where BlindPay sits. A card is a spending interface. Getting money out to a bank account needs a payout rail.
BlindPay converts USDC or USDT into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO/COBO), with KYC, KYB, and sanctions screening built into the API flow. For payouts from wallets the customer controls, BlindPay works as a non-custodial payment processor: the customer authorizes the exact amount and BlindPay executes that single transaction, so the stablecoins stay in the customer's wallet until a payout is authorized. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet or the sending wallet; on Pix and other non-USD local rails the refund is automatic, while USD payouts and payouts whose review times out are refunded after an operator review. Managed wallets, offered in beta, are custodial when a customer chooses that path.
For card programs, that means the payout leg does not add another pooled balance to the risk list. Non-custodial payments explained covers the model in more detail.
Pick a licensed program, keep a small balance, and turn on every control the app offers. Then make sure you can reach a bank account without the card.
If you run a card program and want a payout path that keeps funds under your customers' control, test it on a free BlindPay development instance with the payout quickstart. For the layers behind every card, read what stablecoin card issuing is. For the business-side view of the same risks, see are stablecoin payments safe.
Stablecoin payments are as safe as the issuer, the network, the provider, and your own controls. The seven risks to check, with real incidents and fixes.
Five stablecoin APIs compared for cross-border payments: primary use case, pre-funding requirement, payout regions, and developer experience, plus how to choose by buyer scenario.
Ten stablecoin APIs compared for 2026: BlindPay, Circle, Bridge, BVNK, Fireblocks, Crossmint, Zero Hash, Conduit, Sphere, and Borderless, across rails, custody, pricing, and compliance.