---
title: "Custodial vs. self-custodial stablecoin cards: who actually holds your money?"
seoTitle: "Custodial vs. self-custodial stablecoin cards"
description: "Who holds the stablecoins behind your card: custodial vs. self-custodial models, smart-account allowances, failure modes, and what August 2026 showed."
date: "2026-09-23"
category: "stablecoins"
author: "BlindPay Team"
faq:
  - q: "What is the difference between a custodial and a self-custodial crypto card?"
    a: "With a custodial card, the provider holds the stablecoins in wallets it controls and tracks your share on a ledger. With a self-custodial card, the stablecoins stay in a wallet you control, and the card can only spend within an allowance you grant. Custodial is simpler to recover; self-custodial keeps funds out of the provider's hands."
  - q: "How does Gnosis Pay work?"
    a: "Gnosis Pay gives each user a Safe smart account that the user controls. A Roles Module sets a spending allowance the card can draw from, and a Delay Module puts a 25-hour delay on direct transactions through it, per Gnosis Pay's documentation. The card is a Visa debit card that spends from that account."
  - q: "Can you spend from your own wallet with a card?"
    a: "Yes, with a self-custodial card. The stablecoins stay in a smart account or wallet you control, and you authorize the card program to spend up to a limit. You still go through identity checks, because card rails require the issuer to identify every cardholder even when the wallet itself is permissionless."
  - q: "Who holds the keys on a crypto card?"
    a: "On a custodial card, the provider or its custodian holds the keys to the wallets where your stablecoins sit. On a self-custodial card, you hold the keys, often through a smart account with recovery options. Read the card terms: they should say who controls the wallet and what happens to your balance if the provider fails."
  - q: "Are self-custodial crypto cards safer?"
    a: "They remove one risk and add another. Your balance does not depend on the provider staying solvent, and in the August 2026 Rain-managed Solana contract incident self-custodial wallets were reported unaffected. But you take on key management, and smart contract modules can have bugs of their own, as Gnosis Pay's June 2026 post-mortem showed."
---

A custodial stablecoin card keeps your USDC or USDT in wallets the provider controls and tracks your balance on its ledger. A self-custodial card leaves the stablecoins in a wallet you control and lets the card spend only within an allowance you set. Custodial is easier to recover. Self-custodial means the provider never holds your money.

The card in your hand looks the same either way. What changes is who can move the funds, what happens if the company behind the card fails, and what you lose if you lose your phone.

This guide explains both models, how smart-account allowances work, and what a real incident in August 2026 showed about shared infrastructure. For the basics, read [what a stablecoin-backed card is](/resources/more/what-is-a-stablecoin-backed-card) and the issuing view in [what stablecoin card issuing is](/resources/more/what-is-stablecoin-card-issuing).

**Key takeaways**

- Custodial: the provider holds the stablecoins; you hold a claim on its ledger.
- Self-custodial: you hold the stablecoins in a wallet or smart account; the card spends within an allowance.
- Both models still require identity checks, because card issuers must identify every cardholder.
- In the August 2026 Rain-managed Solana contract incident, card balances in the affected contract were hit and self-custodial wallets were reported unaffected.
- Neither model is risk-free. Self-custodial setups move the risk to keys and smart contract code.

## What do custodial, self-custodial, and non-custodial mean?

Three terms describe who controls the money at each point. They are often mixed up, so here are plain definitions.

- **Custodial.** A company holds the assets on your behalf. It controls the private keys to the wallets, and your balance is an entry on its books.
- **Self-custodial.** You control the wallet and its keys. No company can move the funds without your authorization, within whatever rules the wallet's code sets.
- **Non-custodial payment processing.** A payment company executes a transaction you authorize from your own wallet, for that exact amount, without holding a balance for you before or after.

A card can be custodial or self-custodial. A payout or collection service sitting next to the card can be non-custodial. The three describe different jobs.

## How does a custodial stablecoin card work?

In a custodial program, you send stablecoins to the provider and it keeps them in wallets it controls. When you tap the card, the program checks its ledger, places a hold, and approves in milliseconds.

1. **Deposit.** You send USDC to a deposit address the provider gives you, or buy stablecoins inside its app.
2. **Ledger credit.** The provider credits your account on its books. The actual stablecoins sit in pooled or segregated wallets it controls.
3. **Purchase.** The authorization reads your ledger balance and writes a hold.
4. **Settlement.** The provider converts from its own wallets to fund settlement with the network.
5. **Withdrawal.** To take money out, you ask the provider to send stablecoins to an outside wallet or to pay out to a bank.

This is how most exchange-linked cards work. Coinbase Card, for example, spends from a Coinbase account balance, per [Coinbase's card page](https://www.coinbase.com/card).

## How does a self-custodial stablecoin card work?

In a self-custodial program, the stablecoins stay in a wallet you control, usually a smart account. You grant the card a spending allowance, and the program can only pull up to that limit.

neobankbeat's [explainer on stablecoin cards](https://www.neobankbeat.com/blog/stablecoin-cards-explained) (November 2025) describes this as a spending allowance enforced by the smart contract. It also makes a point people miss: "Even fully self-custodial programmes must identify cardholders... The wallet may be permissionless; the plastic isn't."

Gnosis Pay is the best documented example. Per [its documentation](https://docs.gnosispay.com/concepts/safe/overview):

- Each user gets a **Safe smart account** they control.
- A **Roles Module** sets the spending allowance the card can draw from.
- A **Delay Module** adds a 25-hour transaction delay, set long on purpose to discourage direct use of the module.

[Coin Bureau's card roundup](https://coinbureau.com/analysis/best-crypto-debit-cards) (updated March 2026) describes Gnosis Pay as a self-custodial spend card focused on the EEA and UK, with no added FX markup beyond the Visa rate.

## How do custodial and self-custodial cards compare?

The trade-off is control against convenience. Custodial cards are easier to use and recover. Self-custodial cards keep the provider from ever holding your funds.

| | Custodial card | Self-custodial card |
| --- | --- | --- |
| Who holds the stablecoins | The provider or its custodian | You, in a wallet or smart account |
| Balance check at purchase | Internal ledger | Onchain balance and allowance |
| Convenience | High; works like a fintech app | Good, but you manage a wallet |
| Recovery if you lose access | Provider resets your login | Depends on your wallet's recovery setup |
| If the provider fails | Your balance depends on how it held and segregated funds | Your stablecoins stay in your wallet |
| If the smart contract has a bug | Provider's own contracts and wallets at risk | Your account modules may be at risk |
| Identity check | Required | Required |
| Deposit insurance | No | No |

Neither column has deposit insurance. The FDIC's [fact sheet on crypto companies](https://www.fdic.gov/news/fact-sheets/crypto-fact-sheet-7-28-22.html) says its insurance does not apply to crypto assets and does not protect against the failure of non-bank entities such as crypto custodians and exchanges.

## What happened in the August 2026 Rain card contract incident?

On August 28, 2026, attackers made unauthorized withdrawals from card balances held in a Rain-managed Solana contract. Rain said the vulnerability affected a small number of programs using an outdated version of its Solana contracts, and affected users were reimbursed.

The public timeline, from the companies' statements and SpendNode's coverage:

1. **August 28.** Unauthorized withdrawals begin. Rain later upgraded the contracts the same day.
2. **August 29.** Tria reported 636 affected users and $431,945, with every affected user being refunded in full and wallets untouched, per [SpendNode](https://www.spendnode.io/blog/tria-rain-solana-card-vulnerability-636-users-refund-august-2026/). Rain confirmed repayment.
3. **August 30.** Avici reported $500,859 across 1,685 users and said "refunds are processed in full, with an extra 10% cashback", per [SpendNode](https://www.spendnode.io/blog/avici-solana-card-refunds-complete-10-percent-cashback-august-2026/).

Rain's own [statement](https://x.com/raincards/status/2093435073081053518) described the scope as "a small number of programs using an outdated version of our Solana contracts." It would be wrong to assume every program on the same issuer was exposed. Rain had not published a full post-mortem by late August.

The useful lesson is about shared infrastructure. Card balances sat in a common contract that several programs used, so one bug reached users of several brands at once. Self-custodial wallets sat outside that contract and were reported unaffected.

## Do self-custodial cards have their own risks?

Yes. Self-custody moves the risk from the provider's balance sheet to your keys and the code that sets your allowance. That code can fail too.

Gnosis Pay published a [post-mortem](https://gnosispay.com/blog/post-mortem-gnosis-pay-vulnerability-exploit) on a June 1, 2026 exploit involving its Delay and Roles modules. Per that post-mortem, attackers extracted $1.5 million, and Gnosis absorbed the losses and restored all funds to users. It is still a reminder that the modules protecting a self-custodial card are software, and software gets audited, patched, and sometimes exploited.

The other self-custody risk is personal. Lose your keys without a recovery setup, and no support team can restore them.

## Which model should you choose?

Choose based on what you fear more: a provider failing, or yourself losing access. Most people are better served by one model, and a few use both.

- **Pick custodial** if you want a simple app, password resets, and support, and you are comfortable trusting a regulated provider with the balance.
- **Pick self-custodial** if you already manage a wallet, want your stablecoins out of any company's hands, and accept key management.
- **Keep the card balance small** in either case. Hold what you plan to spend this month on the card wallet, and keep larger amounts elsewhere.

Before choosing, read the card terms for the issuer's name, how funds are held and segregated, and what happens to balances if the provider winds down.

## How does non-custodial payout processing fit next to a card?

The card covers spending. Funding the card wallet and cashing out to a bank are separate movements, and they can also be designed so no provider holds your money in between.

BlindPay is a stablecoin API for global payments that works this way for payouts. It operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic; USD payouts and payouts whose review times out are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial when you choose that path.

For a card program, that means users can move stablecoins from the wallet behind their card into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO/COBO) without parking a balance with another provider first. The [BlindPay introduction](/docs/introduction) covers the model, and the [payout quickstart](/docs/quickstart-payout) runs a test payout on a free development instance.

## Sources

- neobankbeat, [Stablecoin cards explained](https://www.neobankbeat.com/blog/stablecoin-cards-explained), November 18, 2025
- Gnosis Pay, [GP Safe Account](https://docs.gnosispay.com/concepts/safe/overview)
- Gnosis Pay, [Post-mortem: Gnosis Pay vulnerability exploit](https://gnosispay.com/blog/post-mortem-gnosis-pay-vulnerability-exploit)
- Coin Bureau, [Best crypto debit cards](https://coinbureau.com/analysis/best-crypto-debit-cards), updated March 11, 2026
- SpendNode, [Tria details Rain card vulnerability](https://www.spendnode.io/blog/tria-rain-solana-card-vulnerability-636-users-refund-august-2026/), August 29, 2026
- SpendNode, [Avici completes refunds with 10% cashback](https://www.spendnode.io/blog/avici-solana-card-refunds-complete-10-percent-cashback-august-2026/), August 30, 2026
- Rain, [statement on X](https://x.com/raincards/status/2093435073081053518), August 2026
- Coinbase, [Coinbase Card](https://www.coinbase.com/card)
- FDIC, [What the public needs to know about FDIC deposit insurance and crypto companies](https://www.fdic.gov/news/fact-sheets/crypto-fact-sheet-7-28-22.html), July 28, 2022