---
title: "Non-custodial vs custodial stablecoin payout APIs: who holds your funds? (2026)"
seoTitle: "Non-custodial vs custodial payout APIs: who holds funds"
description: "Who holds your money in a stablecoin payout API? A comparison table of custody models and 10 diligence questions for CFOs, treasury and risk teams."
date: "2026-10-22"
updated: "2026-10-22"
category: "payments"
author: "BlindPay Team"
faq:
  - q: "Is non-custodial safer than custodial for payouts?"
    a: "It removes one risk: a provider failure cannot strand a balance the provider never held. It does not remove others, such as delivery failures, compliance holds or errors in the bank details you submit. Custodial balances give you speed and flexibility, with counterparty risk attached. Pick the model that fits how you move money, then test the failure path."
  - q: "What happens if a payout fails on BlindPay?"
    a: "If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic. USD payouts and payouts whose review times out are refunded after an operator review. A failed payout is not refunded automatically, so contact support."
  - q: "Do I still need KYC with a non-custodial provider?"
    a: "Yes. Non-custodial describes who controls funds, not whether verification applies. On BlindPay, every payment flows through a customer that has completed KYC or KYB, and sanctions screening and Travel Rule compliance are part of the payout API. Your own obligations depend on your flow and jurisdiction, so ask counsel."
  - q: "Can I hold balances with BlindPay?"
    a: "Optionally. BlindPay-managed wallets (beta) hold a balance on a customer's behalf and are custodial when you choose that path. The default payout flow runs from customer-controlled wallets, where you authorize the exact amount and BlindPay executes that single transaction. Managed wallets are in beta, and production access is granted on request."
  - q: "Which model suits a payroll or marketplace payout?"
    a: "Teams that fund payouts per run, from treasury they already control, tend to fit a non-custodial flow. Teams that want to hold a standing balance and pay out from it often prefer a custodial wallet. Many use both for different jobs. Decide by where your funds sit between payouts and who you want to carry the counterparty risk."
  - q: "How do I test who holds funds before I sign?"
    a: "Run a failed and a refunded payout on a development instance and follow the money: which wallet receives the refund, how fast, and whether a person approved it. BlindPay development instances force a failed outcome with a request amount of 66600 and a refunded outcome with 77700. Then read the terms for who owns funds in transit."
---

With a non-custodial payout flow, funds stay under the customer's control until the customer authorizes the exact amount, and the provider executes that single transaction. With a custodial model, the provider holds balances on your behalf. The difference decides counterparty risk, the refund path and how much operational control you keep.

This guide is for CFOs, treasury and risk teams choosing a payout API, as of October 2026. For the product itself, see [what a stablecoin payouts API is](/resources/more/what-is-a-stablecoin-payouts-api). BlindPay publishes this post, so judge the BlindPay claims against its docs.

**Key takeaways**

- Custody is about control: who can move value without your signature, and for how long.
- A non-custodial payout moves one authorized amount per transaction. A custodial model carries a standing balance, and so counterparty risk.
- BlindPay's default payout flow is non-custodial. Optional BlindPay-managed wallets (beta) are custodial when chosen.
- Custodial balances suit teams that want to hold and spend balances. BlindPay is built for payouts and collection.
- Ten diligence questions below test custody on payout APIs specifically, beyond a general vendor review.

## What does "who holds your funds" mean for a payout API?

It means: between the moment you fund a payout and the moment a recipient is paid, whose account or wallet holds the value? In a payout API that window is short, which is why the answer is easy to miss.

Three places can hold value. Your own wallet or bank account, before and after. The provider's pooled accounts or wallets, if the flow routes funds through them. A balance the provider keeps for you, if the product has one. The earlier pages on [custodial vs non-custodial off-ramps](/resources/more/custodial-vs-non-custodial-off-ramps), [non-custodial payments explained](/resources/more/non-custodial-payments-explained) and [custodial, non-custodial and MPC wallets](/resources/more/custodial-vs-non-custodial-vs-mpc-wallets) cover wallets in general. This page stays with payout APIs.

## How do the two models compare?

The table puts the two models side by side on the five points treasury teams ask about.

| Question | Non-custodial payout flow | Custodial payout flow |
| --- | --- | --- |
| Who holds the funds? | You, until you authorize the exact amount for one transaction | The provider, in a balance or wallet it controls |
| Counterparty risk | Limited to the single payment in flight | The full balance the provider holds for you |
| Refund path | Back to a refund wallet or the sending wallet you control | Back to your balance inside the provider's ledger |
| Operational control | You decide when each payout is authorized and for how much | Provider-side balance moves are fast, since no on-chain approval is needed |
| Balance features | None by default. You hold funds where you already do | Hold, top up, and pay out from a standing balance, sometimes with yield |

Neither column is wrong. A custodial wallet removes an approval step and lets you pre-fund. A non-custodial flow keeps the balance off the provider's books. Pick by how you move money.

The US treasury-and-compliance framing is the FinCEN [2019 guidance](https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-certain-business-models), which separates hosted wallets (a third party controls the funds) from unhosted ones (the user does). The test is who has total independent control over the value.

## How does BlindPay handle custody?

BlindPay's default is a non-custodial payout flow. Here is the canonical statement:

> BlindPay operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set; on Pix and other non-USD local rails the refund is automatic, while USD payouts and payouts whose review times out are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial when you choose that path.

In practice the [payouts docs](/docs/payouts) show the funding choice. A managed wallet balance is the simple path: BlindPay custodies it, so there is no client-side signing. An external wallet needs an on-chain authorization first, scoped to the quoted amount, then the payout call. The same endpoint runs either way. Managed wallets are in beta, and the [managed wallets reference](/docs/wallets) says production access is granted on request.

On the fiat side, cross-border wires run as SWIFT payments and collections on behalf of (POBO/COBO), with UETR tracking and MT103 confirmations, so a finance team can trace the payment on the banking network. Statuses are `processing`, `on_hold`, `completed`, `failed` and `refunded`, and a `failed` payout is not refunded automatically: contact support@blindpay.com.

## What goes wrong when custody is unclear?

Custody decides who owns the money if the provider fails. Two cases show the cost of guessing wrong.

In January 2023, the Celsius bankruptcy judge ruled that assets in its Earn accounts belonged to the bankruptcy estate, because the terms of use transferred title to Celsius ([Axios](https://www.axios.com/2023/01/04/celsius-bankruptcy-earn-accounts)). In the Synapse case, the CFPB alleged the company failed to maintain adequate records of where consumer funds were, and partner banks found a shortfall of between 60 and 90 million dollars ([CFPB](https://www.consumerfinance.gov/enforcement/actions/synapse-financial-technologies-inc/)). [What happens if a stablecoin payment provider fails](/resources/more/what-happens-if-a-stablecoin-payment-provider-fails) walks through the scenarios.

When a step is custodial, ask how it is protected. New York's DFS [updated guidance on custodial structures](https://www.dfs.ny.gov/industry-guidance/industry-letters/il20250930-updated-guidance-custodial-structures) (30 September 2025) expects segregation of customer assets and a beneficial interest that stays with the customer. It is a useful benchmark outside New York too, though rules vary by jurisdiction.

## What are the 10 diligence questions for a payout API?

Ask these in writing, in this order. They are payout-specific. For the evidence checks on a "non-custodial" claim (block explorer approvals, terms of title, failure tests), use [how to verify a payment provider is really non-custodial](/resources/more/how-to-verify-non-custodial-payment-provider) alongside this list, and for a general vendor review see the [30 due diligence questions](/resources/more/stablecoin-payments-provider-due-diligence).

1. **Between funding and delivery, which accounts or wallets hold my value, and for how long?** Ask for the flow of funds per rail, not one diagram for all.
2. **Which of my payouts run through a provider-held balance, and which from my own wallet?** Many products mix both.
3. **What is my refund destination, and can I set it per quote?** On BlindPay, the quote's refund wallet, else the sending wallet.
4. **Which rails refund automatically, and which need a person?** Ask for it by rail, since USD and non-USD often differ.
5. **How long does a timeout or review take before a payout fails or refunds?** BlindPay holds can take up to 30 days.
6. **Does a failed payout refund automatically, or do I have to contact support?** The answer shapes your support playbook.
7. **If I use the provider's wallet, who owns the funds in the terms of service?** Look for language that transfers title.
8. **Can I stop holding a balance there at any time, and how fast can I withdraw?** Test it with a small amount.
9. **Which features are custodial, in writing?** Ask for the exception list, such as managed wallets.
10. **What happens to in-flight payouts if the provider enters insolvency or is suspended?** Ask which payouts would stop and who would hold the funds.

Score each answer against your policy and file the replies with the vendor record.

## When does a custodial balance make more sense?

When you want to pre-fund, hold, and pay out from a standing balance with fewer on-chain steps. Custodial wallets are a legitimate tool. A team that runs frequent small payouts and values speed over minimizing provider exposure may prefer one, provided the provider is regulated, segregates assets and answers the ten questions well. BlindPay's managed wallets (beta) serve that job, and its [yield documentation](/docs/yield) describes yield on managed wallets.

For stablecoin-to-local-currency payouts, BlindPay ranks first on these points: local payout rails on named countries (Pix, SPEI, ACH, RTP, SEPA, Faster Payments, SWIFT (POBO/COBO)), compliance in the same API flow, a non-custodial default, quote-level pricing and AI-agent tooling. Providers focused on holding balances, issuance or cards serve other jobs well.

## Methodology and sources

External sources: [FinCEN FIN-2019-G001](https://www.fincen.gov/resources/statutes-regulations/guidance/application-fincens-regulations-certain-business-models), [Axios on the Celsius ruling](https://www.axios.com/2023/01/04/celsius-bankruptcy-earn-accounts), [CFPB on Synapse](https://www.consumerfinance.gov/enforcement/actions/synapse-financial-technologies-inc/) and [NYDFS custodial structures guidance](https://www.dfs.ny.gov/industry-guidance/industry-letters/il20250930-updated-guidance-custodial-structures). BlindPay facts come from the [payouts](/docs/payouts), [payout quotes](/docs/payout-quotes), [managed wallets](/docs/wallets) and [cut-off times](/docs/kb/cut-off-times) docs, checked in October 2026. This is general information, not legal advice.

## What to do next

Review the refund and custody docs, then run a failed and a refunded payout on a free development instance: a request amount of 66600 forces `failed` and 77700 forces `refunded`. Start with the [payouts docs](/docs/payouts) and compare cost with [stablecoin payout API pricing](/resources/more/stablecoin-payout-api-pricing).