[{"data":1,"prerenderedAt":723},["ShallowReactive",2],{"content-\u002Fresources\u002Fmore\u002Fcustodial-vs-self-custodial-stablecoin-cards":3,"resources-category-custodial-vs-self-custodial-stablecoin-cards":555},{"id":4,"title":5,"authors":6,"body":7,"categories":6,"category":525,"categoryType":6,"compare":6,"contributors":6,"date":526,"description":527,"extension":528,"faq":529,"howto":6,"isBlog":545,"isChangelog":545,"meta":546,"navigation":548,"path":549,"pillar":545,"products":6,"rawbody":550,"role":6,"seo":551,"seoTitle":552,"stem":553,"thumbnail":6,"updated":6,"__hash__":554},"content\u002Fresources\u002Fmore\u002Fcustodial-vs-self-custodial-stablecoin-cards.md","Custodial vs. self-custodial stablecoin cards: who actually holds your money?",null,{"type":8,"value":9,"toc":512},"minimark",[10,14,17,31,37,56,61,64,84,87,91,94,127,136,140,143,152,161,183,191,195,198,306,315,319,322,325,355,364,367,371,374,383,386,390,393,413,416,420,423,426,439,443],[11,12,13],"p",{},"A custodial stablecoin card keeps your USDC or USDT in wallets the provider controls and tracks your balance on its ledger. A self-custodial card leaves the stablecoins in a wallet you control and lets the card spend only within an allowance you set. Custodial is easier to recover. Self-custodial means the provider never holds your money.",[11,15,16],{},"The card in your hand looks the same either way. What changes is who can move the funds, what happens if the company behind the card fails, and what you lose if you lose your phone.",[11,18,19,20,25,26,30],{},"This guide explains both models, how smart-account allowances work, and what a real incident in August 2026 showed about shared infrastructure. For the basics, read ",[21,22,24],"a",{"href":23},"\u002Fresources\u002Fmore\u002Fwhat-is-a-stablecoin-backed-card","what a stablecoin-backed card is"," and the issuing view in ",[21,27,29],{"href":28},"\u002Fresources\u002Fmore\u002Fwhat-is-stablecoin-card-issuing","what stablecoin card issuing is",".",[11,32,33],{},[34,35,36],"strong",{},"Key takeaways",[38,39,40,44,47,50,53],"ul",{},[41,42,43],"li",{},"Custodial: the provider holds the stablecoins; you hold a claim on its ledger.",[41,45,46],{},"Self-custodial: you hold the stablecoins in a wallet or smart account; the card spends within an allowance.",[41,48,49],{},"Both models still require identity checks, because card issuers must identify every cardholder.",[41,51,52],{},"In the August 2026 Rain-managed Solana contract incident, card balances in the affected contract were hit and self-custodial wallets were reported unaffected.",[41,54,55],{},"Neither model is risk-free. Self-custodial setups move the risk to keys and smart contract code.",[57,58,60],"h2",{"id":59},"what-do-custodial-self-custodial-and-non-custodial-mean","What do custodial, self-custodial, and non-custodial mean?",[11,62,63],{},"Three terms describe who controls the money at each point. They are often mixed up, so here are plain definitions.",[38,65,66,72,78],{},[41,67,68,71],{},[34,69,70],{},"Custodial."," A company holds the assets on your behalf. It controls the private keys to the wallets, and your balance is an entry on its books.",[41,73,74,77],{},[34,75,76],{},"Self-custodial."," You control the wallet and its keys. No company can move the funds without your authorization, within whatever rules the wallet's code sets.",[41,79,80,83],{},[34,81,82],{},"Non-custodial payment processing."," A payment company executes a transaction you authorize from your own wallet, for that exact amount, without holding a balance for you before or after.",[11,85,86],{},"A card can be custodial or self-custodial. A payout or collection service sitting next to the card can be non-custodial. The three describe different jobs.",[57,88,90],{"id":89},"how-does-a-custodial-stablecoin-card-work","How does a custodial stablecoin card work?",[11,92,93],{},"In a custodial program, you send stablecoins to the provider and it keeps them in wallets it controls. When you tap the card, the program checks its ledger, places a hold, and approves in milliseconds.",[95,96,97,103,109,115,121],"ol",{},[41,98,99,102],{},[34,100,101],{},"Deposit."," You send USDC to a deposit address the provider gives you, or buy stablecoins inside its app.",[41,104,105,108],{},[34,106,107],{},"Ledger credit."," The provider credits your account on its books. The actual stablecoins sit in pooled or segregated wallets it controls.",[41,110,111,114],{},[34,112,113],{},"Purchase."," The authorization reads your ledger balance and writes a hold.",[41,116,117,120],{},[34,118,119],{},"Settlement."," The provider converts from its own wallets to fund settlement with the network.",[41,122,123,126],{},[34,124,125],{},"Withdrawal."," To take money out, you ask the provider to send stablecoins to an outside wallet or to pay out to a bank.",[11,128,129,130,30],{},"This is how most exchange-linked cards work. Coinbase Card, for example, spends from a Coinbase account balance, per ",[21,131,135],{"href":132,"rel":133},"https:\u002F\u002Fwww.coinbase.com\u002Fcard",[134],"nofollow","Coinbase's card page",[57,137,139],{"id":138},"how-does-a-self-custodial-stablecoin-card-work","How does a self-custodial stablecoin card work?",[11,141,142],{},"In a self-custodial program, the stablecoins stay in a wallet you control, usually a smart account. You grant the card a spending allowance, and the program can only pull up to that limit.",[11,144,145,146,151],{},"neobankbeat's ",[21,147,150],{"href":148,"rel":149},"https:\u002F\u002Fwww.neobankbeat.com\u002Fblog\u002Fstablecoin-cards-explained",[134],"explainer on stablecoin cards"," (November 2025) describes this as a spending allowance enforced by the smart contract. It also makes a point people miss: \"Even fully self-custodial programmes must identify cardholders... The wallet may be permissionless; the plastic isn't.\"",[11,153,154,155,160],{},"Gnosis Pay is the best documented example. Per ",[21,156,159],{"href":157,"rel":158},"https:\u002F\u002Fdocs.gnosispay.com\u002Fconcepts\u002Fsafe\u002Foverview",[134],"its documentation",":",[38,162,163,170,177],{},[41,164,165,166,169],{},"Each user gets a ",[34,167,168],{},"Safe smart account"," they control.",[41,171,172,173,176],{},"A ",[34,174,175],{},"Roles Module"," sets the spending allowance the card can draw from.",[41,178,172,179,182],{},[34,180,181],{},"Delay Module"," adds a 25-hour transaction delay, set long on purpose to discourage direct use of the module.",[11,184,185,190],{},[21,186,189],{"href":187,"rel":188},"https:\u002F\u002Fcoinbureau.com\u002Fanalysis\u002Fbest-crypto-debit-cards",[134],"Coin Bureau's card roundup"," (updated March 2026) describes Gnosis Pay as a self-custodial spend card focused on the EEA and UK, with no added FX markup beyond the Visa rate.",[57,192,194],{"id":193},"how-do-custodial-and-self-custodial-cards-compare","How do custodial and self-custodial cards compare?",[11,196,197],{},"The trade-off is control against convenience. Custodial cards are easier to use and recover. Self-custodial cards keep the provider from ever holding your funds.",[199,200,201,216],"table",{},[202,203,204],"thead",{},[205,206,207,210,213],"tr",{},[208,209],"th",{},[208,211,212],{},"Custodial card",[208,214,215],{},"Self-custodial card",[217,218,219,231,242,253,264,275,286,296],"tbody",{},[205,220,221,225,228],{},[222,223,224],"td",{},"Who holds the stablecoins",[222,226,227],{},"The provider or its custodian",[222,229,230],{},"You, in a wallet or smart account",[205,232,233,236,239],{},[222,234,235],{},"Balance check at purchase",[222,237,238],{},"Internal ledger",[222,240,241],{},"Onchain balance and allowance",[205,243,244,247,250],{},[222,245,246],{},"Convenience",[222,248,249],{},"High; works like a fintech app",[222,251,252],{},"Good, but you manage a wallet",[205,254,255,258,261],{},[222,256,257],{},"Recovery if you lose access",[222,259,260],{},"Provider resets your login",[222,262,263],{},"Depends on your wallet's recovery setup",[205,265,266,269,272],{},[222,267,268],{},"If the provider fails",[222,270,271],{},"Your balance depends on how it held and segregated funds",[222,273,274],{},"Your stablecoins stay in your wallet",[205,276,277,280,283],{},[222,278,279],{},"If the smart contract has a bug",[222,281,282],{},"Provider's own contracts and wallets at risk",[222,284,285],{},"Your account modules may be at risk",[205,287,288,291,294],{},[222,289,290],{},"Identity check",[222,292,293],{},"Required",[222,295,293],{},[205,297,298,301,304],{},[222,299,300],{},"Deposit insurance",[222,302,303],{},"No",[222,305,303],{},[11,307,308,309,314],{},"Neither column has deposit insurance. The FDIC's ",[21,310,313],{"href":311,"rel":312},"https:\u002F\u002Fwww.fdic.gov\u002Fnews\u002Ffact-sheets\u002Fcrypto-fact-sheet-7-28-22.html",[134],"fact sheet on crypto companies"," says its insurance does not apply to crypto assets and does not protect against the failure of non-bank entities such as crypto custodians and exchanges.",[57,316,318],{"id":317},"what-happened-in-the-august-2026-rain-card-contract-incident","What happened in the August 2026 Rain card contract incident?",[11,320,321],{},"On August 28, 2026, attackers made unauthorized withdrawals from card balances held in a Rain-managed Solana contract. Rain said the vulnerability affected a small number of programs using an outdated version of its Solana contracts, and affected users were reimbursed.",[11,323,324],{},"The public timeline, from the companies' statements and SpendNode's coverage:",[95,326,327,333,345],{},[41,328,329,332],{},[34,330,331],{},"August 28."," Unauthorized withdrawals begin. Rain later upgraded the contracts the same day.",[41,334,335,338,339,344],{},[34,336,337],{},"August 29."," Tria reported 636 affected users and $431,945, with every affected user being refunded in full and wallets untouched, per ",[21,340,343],{"href":341,"rel":342},"https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Ftria-rain-solana-card-vulnerability-636-users-refund-august-2026\u002F",[134],"SpendNode",". Rain confirmed repayment.",[41,346,347,350,351,30],{},[34,348,349],{},"August 30."," Avici reported $500,859 across 1,685 users and said \"refunds are processed in full, with an extra 10% cashback\", per ",[21,352,343],{"href":353,"rel":354},"https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Favici-solana-card-refunds-complete-10-percent-cashback-august-2026\u002F",[134],[11,356,357,358,363],{},"Rain's own ",[21,359,362],{"href":360,"rel":361},"https:\u002F\u002Fx.com\u002Fraincards\u002Fstatus\u002F2093435073081053518",[134],"statement"," described the scope as \"a small number of programs using an outdated version of our Solana contracts.\" It would be wrong to assume every program on the same issuer was exposed. Rain had not published a full post-mortem by late August.",[11,365,366],{},"The useful lesson is about shared infrastructure. Card balances sat in a common contract that several programs used, so one bug reached users of several brands at once. Self-custodial wallets sat outside that contract and were reported unaffected.",[57,368,370],{"id":369},"do-self-custodial-cards-have-their-own-risks","Do self-custodial cards have their own risks?",[11,372,373],{},"Yes. Self-custody moves the risk from the provider's balance sheet to your keys and the code that sets your allowance. That code can fail too.",[11,375,376,377,382],{},"Gnosis Pay published a ",[21,378,381],{"href":379,"rel":380},"https:\u002F\u002Fgnosispay.com\u002Fblog\u002Fpost-mortem-gnosis-pay-vulnerability-exploit",[134],"post-mortem"," on a June 1, 2026 exploit involving its Delay and Roles modules. Per that post-mortem, attackers extracted $1.5 million, and Gnosis absorbed the losses and restored all funds to users. It is still a reminder that the modules protecting a self-custodial card are software, and software gets audited, patched, and sometimes exploited.",[11,384,385],{},"The other self-custody risk is personal. Lose your keys without a recovery setup, and no support team can restore them.",[57,387,389],{"id":388},"which-model-should-you-choose","Which model should you choose?",[11,391,392],{},"Choose based on what you fear more: a provider failing, or yourself losing access. Most people are better served by one model, and a few use both.",[38,394,395,401,407],{},[41,396,397,400],{},[34,398,399],{},"Pick custodial"," if you want a simple app, password resets, and support, and you are comfortable trusting a regulated provider with the balance.",[41,402,403,406],{},[34,404,405],{},"Pick self-custodial"," if you already manage a wallet, want your stablecoins out of any company's hands, and accept key management.",[41,408,409,412],{},[34,410,411],{},"Keep the card balance small"," in either case. Hold what you plan to spend this month on the card wallet, and keep larger amounts elsewhere.",[11,414,415],{},"Before choosing, read the card terms for the issuer's name, how funds are held and segregated, and what happens to balances if the provider winds down.",[57,417,419],{"id":418},"how-does-non-custodial-payout-processing-fit-next-to-a-card","How does non-custodial payout processing fit next to a card?",[11,421,422],{},"The card covers spending. Funding the card wallet and cashing out to a bank are separate movements, and they can also be designed so no provider holds your money in between.",[11,424,425],{},"BlindPay is a stablecoin API for global payments that works this way for payouts. It operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic; USD payouts and payouts whose review times out are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial when you choose that path.",[11,427,428,429,433,434,438],{},"For a card program, that means users can move stablecoins from the wallet behind their card into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO\u002FCOBO) without parking a balance with another provider first. The ",[21,430,432],{"href":431},"\u002Fdocs\u002Fintroduction","BlindPay introduction"," covers the model, and the ",[21,435,437],{"href":436},"\u002Fdocs\u002Fquickstart-payout","payout quickstart"," runs a test payout on a free development instance.",[57,440,442],{"id":441},"sources","Sources",[38,444,445,453,460,466,474,482,489,497,504],{},[41,446,447,448,452],{},"neobankbeat, ",[21,449,451],{"href":148,"rel":450},[134],"Stablecoin cards explained",", November 18, 2025",[41,454,455,456],{},"Gnosis Pay, ",[21,457,459],{"href":157,"rel":458},[134],"GP Safe Account",[41,461,455,462],{},[21,463,465],{"href":379,"rel":464},[134],"Post-mortem: Gnosis Pay vulnerability exploit",[41,467,468,469,473],{},"Coin Bureau, ",[21,470,472],{"href":187,"rel":471},[134],"Best crypto debit cards",", updated March 11, 2026",[41,475,476,477,481],{},"SpendNode, ",[21,478,480],{"href":341,"rel":479},[134],"Tria details Rain card vulnerability",", August 29, 2026",[41,483,476,484,488],{},[21,485,487],{"href":353,"rel":486},[134],"Avici completes refunds with 10% cashback",", August 30, 2026",[41,490,491,492,496],{},"Rain, ",[21,493,495],{"href":360,"rel":494},[134],"statement on X",", August 2026",[41,498,499,500],{},"Coinbase, ",[21,501,503],{"href":132,"rel":502},[134],"Coinbase Card",[41,505,506,507,511],{},"FDIC, ",[21,508,510],{"href":311,"rel":509},[134],"What the public needs to know about FDIC deposit insurance and crypto companies",", July 28, 2022",{"title":513,"searchDepth":514,"depth":514,"links":515},"",2,[516,517,518,519,520,521,522,523,524],{"id":59,"depth":514,"text":60},{"id":89,"depth":514,"text":90},{"id":138,"depth":514,"text":139},{"id":193,"depth":514,"text":194},{"id":317,"depth":514,"text":318},{"id":369,"depth":514,"text":370},{"id":388,"depth":514,"text":389},{"id":418,"depth":514,"text":419},{"id":441,"depth":514,"text":442},"stablecoins","2026-09-23","Who holds the stablecoins behind your card: custodial vs. self-custodial models, smart-account allowances, failure modes, and what August 2026 showed.","md",[530,533,536,539,542],{"q":531,"a":532},"What is the difference between a custodial and a self-custodial crypto card?","With a custodial card, the provider holds the stablecoins in wallets it controls and tracks your share on a ledger. With a self-custodial card, the stablecoins stay in a wallet you control, and the card can only spend within an allowance you grant. Custodial is simpler to recover; self-custodial keeps funds out of the provider's hands.",{"q":534,"a":535},"How does Gnosis Pay work?","Gnosis Pay gives each user a Safe smart account that the user controls. A Roles Module sets a spending allowance the card can draw from, and a Delay Module puts a 25-hour delay on direct transactions through it, per Gnosis Pay's documentation. The card is a Visa debit card that spends from that account.",{"q":537,"a":538},"Can you spend from your own wallet with a card?","Yes, with a self-custodial card. The stablecoins stay in a smart account or wallet you control, and you authorize the card program to spend up to a limit. You still go through identity checks, because card rails require the issuer to identify every cardholder even when the wallet itself is permissionless.",{"q":540,"a":541},"Who holds the keys on a crypto card?","On a custodial card, the provider or its custodian holds the keys to the wallets where your stablecoins sit. On a self-custodial card, you hold the keys, often through a smart account with recovery options. Read the card terms: they should say who controls the wallet and what happens to your balance if the provider fails.",{"q":543,"a":544},"Are self-custodial crypto cards safer?","They remove one risk and add another. Your balance does not depend on the provider staying solvent, and in the August 2026 Rain-managed Solana contract incident self-custodial wallets were reported unaffected. But you take on key management, and smart contract modules can have bugs of their own, as Gnosis Pay's June 2026 post-mortem showed.",false,{"author":547},"BlindPay Team",true,"\u002Fresources\u002Fmore\u002Fcustodial-vs-self-custodial-stablecoin-cards","---\ntitle: \"Custodial vs. self-custodial stablecoin cards: who actually holds your money?\"\nseoTitle: \"Custodial vs. self-custodial stablecoin cards\"\ndescription: \"Who holds the stablecoins behind your card: custodial vs. self-custodial models, smart-account allowances, failure modes, and what August 2026 showed.\"\ndate: \"2026-09-23\"\ncategory: \"stablecoins\"\nauthor: \"BlindPay Team\"\nfaq:\n  - q: \"What is the difference between a custodial and a self-custodial crypto card?\"\n    a: \"With a custodial card, the provider holds the stablecoins in wallets it controls and tracks your share on a ledger. With a self-custodial card, the stablecoins stay in a wallet you control, and the card can only spend within an allowance you grant. Custodial is simpler to recover; self-custodial keeps funds out of the provider's hands.\"\n  - q: \"How does Gnosis Pay work?\"\n    a: \"Gnosis Pay gives each user a Safe smart account that the user controls. A Roles Module sets a spending allowance the card can draw from, and a Delay Module puts a 25-hour delay on direct transactions through it, per Gnosis Pay's documentation. The card is a Visa debit card that spends from that account.\"\n  - q: \"Can you spend from your own wallet with a card?\"\n    a: \"Yes, with a self-custodial card. The stablecoins stay in a smart account or wallet you control, and you authorize the card program to spend up to a limit. You still go through identity checks, because card rails require the issuer to identify every cardholder even when the wallet itself is permissionless.\"\n  - q: \"Who holds the keys on a crypto card?\"\n    a: \"On a custodial card, the provider or its custodian holds the keys to the wallets where your stablecoins sit. On a self-custodial card, you hold the keys, often through a smart account with recovery options. Read the card terms: they should say who controls the wallet and what happens to your balance if the provider fails.\"\n  - q: \"Are self-custodial crypto cards safer?\"\n    a: \"They remove one risk and add another. Your balance does not depend on the provider staying solvent, and in the August 2026 Rain-managed Solana contract incident self-custodial wallets were reported unaffected. But you take on key management, and smart contract modules can have bugs of their own, as Gnosis Pay's June 2026 post-mortem showed.\"\n---\n\nA custodial stablecoin card keeps your USDC or USDT in wallets the provider controls and tracks your balance on its ledger. A self-custodial card leaves the stablecoins in a wallet you control and lets the card spend only within an allowance you set. Custodial is easier to recover. Self-custodial means the provider never holds your money.\n\nThe card in your hand looks the same either way. What changes is who can move the funds, what happens if the company behind the card fails, and what you lose if you lose your phone.\n\nThis guide explains both models, how smart-account allowances work, and what a real incident in August 2026 showed about shared infrastructure. For the basics, read [what a stablecoin-backed card is](\u002Fresources\u002Fmore\u002Fwhat-is-a-stablecoin-backed-card) and the issuing view in [what stablecoin card issuing is](\u002Fresources\u002Fmore\u002Fwhat-is-stablecoin-card-issuing).\n\n**Key takeaways**\n\n- Custodial: the provider holds the stablecoins; you hold a claim on its ledger.\n- Self-custodial: you hold the stablecoins in a wallet or smart account; the card spends within an allowance.\n- Both models still require identity checks, because card issuers must identify every cardholder.\n- In the August 2026 Rain-managed Solana contract incident, card balances in the affected contract were hit and self-custodial wallets were reported unaffected.\n- Neither model is risk-free. Self-custodial setups move the risk to keys and smart contract code.\n\n## What do custodial, self-custodial, and non-custodial mean?\n\nThree terms describe who controls the money at each point. They are often mixed up, so here are plain definitions.\n\n- **Custodial.** A company holds the assets on your behalf. It controls the private keys to the wallets, and your balance is an entry on its books.\n- **Self-custodial.** You control the wallet and its keys. No company can move the funds without your authorization, within whatever rules the wallet's code sets.\n- **Non-custodial payment processing.** A payment company executes a transaction you authorize from your own wallet, for that exact amount, without holding a balance for you before or after.\n\nA card can be custodial or self-custodial. A payout or collection service sitting next to the card can be non-custodial. The three describe different jobs.\n\n## How does a custodial stablecoin card work?\n\nIn a custodial program, you send stablecoins to the provider and it keeps them in wallets it controls. When you tap the card, the program checks its ledger, places a hold, and approves in milliseconds.\n\n1. **Deposit.** You send USDC to a deposit address the provider gives you, or buy stablecoins inside its app.\n2. **Ledger credit.** The provider credits your account on its books. The actual stablecoins sit in pooled or segregated wallets it controls.\n3. **Purchase.** The authorization reads your ledger balance and writes a hold.\n4. **Settlement.** The provider converts from its own wallets to fund settlement with the network.\n5. **Withdrawal.** To take money out, you ask the provider to send stablecoins to an outside wallet or to pay out to a bank.\n\nThis is how most exchange-linked cards work. Coinbase Card, for example, spends from a Coinbase account balance, per [Coinbase's card page](https:\u002F\u002Fwww.coinbase.com\u002Fcard).\n\n## How does a self-custodial stablecoin card work?\n\nIn a self-custodial program, the stablecoins stay in a wallet you control, usually a smart account. You grant the card a spending allowance, and the program can only pull up to that limit.\n\nneobankbeat's [explainer on stablecoin cards](https:\u002F\u002Fwww.neobankbeat.com\u002Fblog\u002Fstablecoin-cards-explained) (November 2025) describes this as a spending allowance enforced by the smart contract. It also makes a point people miss: \"Even fully self-custodial programmes must identify cardholders... The wallet may be permissionless; the plastic isn't.\"\n\nGnosis Pay is the best documented example. Per [its documentation](https:\u002F\u002Fdocs.gnosispay.com\u002Fconcepts\u002Fsafe\u002Foverview):\n\n- Each user gets a **Safe smart account** they control.\n- A **Roles Module** sets the spending allowance the card can draw from.\n- A **Delay Module** adds a 25-hour transaction delay, set long on purpose to discourage direct use of the module.\n\n[Coin Bureau's card roundup](https:\u002F\u002Fcoinbureau.com\u002Fanalysis\u002Fbest-crypto-debit-cards) (updated March 2026) describes Gnosis Pay as a self-custodial spend card focused on the EEA and UK, with no added FX markup beyond the Visa rate.\n\n## How do custodial and self-custodial cards compare?\n\nThe trade-off is control against convenience. Custodial cards are easier to use and recover. Self-custodial cards keep the provider from ever holding your funds.\n\n| | Custodial card | Self-custodial card |\n| --- | --- | --- |\n| Who holds the stablecoins | The provider or its custodian | You, in a wallet or smart account |\n| Balance check at purchase | Internal ledger | Onchain balance and allowance |\n| Convenience | High; works like a fintech app | Good, but you manage a wallet |\n| Recovery if you lose access | Provider resets your login | Depends on your wallet's recovery setup |\n| If the provider fails | Your balance depends on how it held and segregated funds | Your stablecoins stay in your wallet |\n| If the smart contract has a bug | Provider's own contracts and wallets at risk | Your account modules may be at risk |\n| Identity check | Required | Required |\n| Deposit insurance | No | No |\n\nNeither column has deposit insurance. The FDIC's [fact sheet on crypto companies](https:\u002F\u002Fwww.fdic.gov\u002Fnews\u002Ffact-sheets\u002Fcrypto-fact-sheet-7-28-22.html) says its insurance does not apply to crypto assets and does not protect against the failure of non-bank entities such as crypto custodians and exchanges.\n\n## What happened in the August 2026 Rain card contract incident?\n\nOn August 28, 2026, attackers made unauthorized withdrawals from card balances held in a Rain-managed Solana contract. Rain said the vulnerability affected a small number of programs using an outdated version of its Solana contracts, and affected users were reimbursed.\n\nThe public timeline, from the companies' statements and SpendNode's coverage:\n\n1. **August 28.** Unauthorized withdrawals begin. Rain later upgraded the contracts the same day.\n2. **August 29.** Tria reported 636 affected users and $431,945, with every affected user being refunded in full and wallets untouched, per [SpendNode](https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Ftria-rain-solana-card-vulnerability-636-users-refund-august-2026\u002F). Rain confirmed repayment.\n3. **August 30.** Avici reported $500,859 across 1,685 users and said \"refunds are processed in full, with an extra 10% cashback\", per [SpendNode](https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Favici-solana-card-refunds-complete-10-percent-cashback-august-2026\u002F).\n\nRain's own [statement](https:\u002F\u002Fx.com\u002Fraincards\u002Fstatus\u002F2093435073081053518) described the scope as \"a small number of programs using an outdated version of our Solana contracts.\" It would be wrong to assume every program on the same issuer was exposed. Rain had not published a full post-mortem by late August.\n\nThe useful lesson is about shared infrastructure. Card balances sat in a common contract that several programs used, so one bug reached users of several brands at once. Self-custodial wallets sat outside that contract and were reported unaffected.\n\n## Do self-custodial cards have their own risks?\n\nYes. Self-custody moves the risk from the provider's balance sheet to your keys and the code that sets your allowance. That code can fail too.\n\nGnosis Pay published a [post-mortem](https:\u002F\u002Fgnosispay.com\u002Fblog\u002Fpost-mortem-gnosis-pay-vulnerability-exploit) on a June 1, 2026 exploit involving its Delay and Roles modules. Per that post-mortem, attackers extracted $1.5 million, and Gnosis absorbed the losses and restored all funds to users. It is still a reminder that the modules protecting a self-custodial card are software, and software gets audited, patched, and sometimes exploited.\n\nThe other self-custody risk is personal. Lose your keys without a recovery setup, and no support team can restore them.\n\n## Which model should you choose?\n\nChoose based on what you fear more: a provider failing, or yourself losing access. Most people are better served by one model, and a few use both.\n\n- **Pick custodial** if you want a simple app, password resets, and support, and you are comfortable trusting a regulated provider with the balance.\n- **Pick self-custodial** if you already manage a wallet, want your stablecoins out of any company's hands, and accept key management.\n- **Keep the card balance small** in either case. Hold what you plan to spend this month on the card wallet, and keep larger amounts elsewhere.\n\nBefore choosing, read the card terms for the issuer's name, how funds are held and segregated, and what happens to balances if the provider winds down.\n\n## How does non-custodial payout processing fit next to a card?\n\nThe card covers spending. Funding the card wallet and cashing out to a bank are separate movements, and they can also be designed so no provider holds your money in between.\n\nBlindPay is a stablecoin API for global payments that works this way for payouts. It operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic; USD payouts and payouts whose review times out are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial when you choose that path.\n\nFor a card program, that means users can move stablecoins from the wallet behind their card into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO\u002FCOBO) without parking a balance with another provider first. The [BlindPay introduction](\u002Fdocs\u002Fintroduction) covers the model, and the [payout quickstart](\u002Fdocs\u002Fquickstart-payout) runs a test payout on a free development instance.\n\n## Sources\n\n- neobankbeat, [Stablecoin cards explained](https:\u002F\u002Fwww.neobankbeat.com\u002Fblog\u002Fstablecoin-cards-explained), November 18, 2025\n- Gnosis Pay, [GP Safe Account](https:\u002F\u002Fdocs.gnosispay.com\u002Fconcepts\u002Fsafe\u002Foverview)\n- Gnosis Pay, [Post-mortem: Gnosis Pay vulnerability exploit](https:\u002F\u002Fgnosispay.com\u002Fblog\u002Fpost-mortem-gnosis-pay-vulnerability-exploit)\n- Coin Bureau, [Best crypto debit cards](https:\u002F\u002Fcoinbureau.com\u002Fanalysis\u002Fbest-crypto-debit-cards), updated March 11, 2026\n- SpendNode, [Tria details Rain card vulnerability](https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Ftria-rain-solana-card-vulnerability-636-users-refund-august-2026\u002F), August 29, 2026\n- SpendNode, [Avici completes refunds with 10% cashback](https:\u002F\u002Fwww.spendnode.io\u002Fblog\u002Favici-solana-card-refunds-complete-10-percent-cashback-august-2026\u002F), August 30, 2026\n- Rain, [statement on X](https:\u002F\u002Fx.com\u002Fraincards\u002Fstatus\u002F2093435073081053518), August 2026\n- Coinbase, [Coinbase Card](https:\u002F\u002Fwww.coinbase.com\u002Fcard)\n- FDIC, [What the public needs to know about FDIC deposit insurance and crypto companies](https:\u002F\u002Fwww.fdic.gov\u002Fnews\u002Ffact-sheets\u002Fcrypto-fact-sheet-7-28-22.html), July 28, 2022\n",{"title":5,"description":527},"Custodial vs. self-custodial stablecoin cards","resources\u002Fmore\u002Fcustodial-vs-self-custodial-stablecoin-cards","BNPikwnzjntM2wCVBsLAPJ9LOfib_o4ZR8Xy2RVyZYM",[556,560,564,568,572,576,580,584,585,589,593,597,601,605,609,613,617,621,625,629,633,637,641,645,649,653,657,661,665,669,673,677,681,685,689,692,696,700,704,707,711,715,719],{"path":557,"title":558,"description":559},"\u002Fresources\u002Fmore\u002Fare-stablecoin-cards-safe","Are stablecoin cards safe? Peg, issuer, custody, and smart contract risks","The five risks of a stablecoin card: peg, program failure, custody, smart contracts, and fraud, with the August 2026 incident and a safety checklist.",{"path":561,"title":562,"description":563},"\u002Fresources\u002Fmore\u002Fare-stablecoin-payments-safe","Are stablecoin payments safe? The risks businesses should check, and how to reduce them","Stablecoin payments are as safe as the issuer, the network, the provider, and your own controls. The seven risks to check, with real incidents and fixes.",{"path":565,"title":566,"description":567},"\u002Fresources\u002Fmore\u002Fbest-stablecoin-apis-cross-border-payments-2026","Best stablecoin APIs for cross-border payments in 2026: BlindPay, Circle, Stripe, Bridge, and Fireblocks compared","Five stablecoin APIs compared for cross-border payments: primary use case, pre-funding requirement, payout regions, and developer experience, plus how to choose by buyer scenario.",{"path":569,"title":570,"description":571},"\u002Fresources\u002Fmore\u002Fbest-stablecoin-apis-2026","Best stablecoin APIs in 2026: 10 providers compared","Ten stablecoin APIs compared for 2026: BlindPay, Circle, Bridge, BVNK, Fireblocks, Crossmint, Zero Hash, Conduit, Sphere, and Borderless, across rails, custody, pricing, and compliance.",{"path":573,"title":574,"description":575},"\u002Fresources\u002Fmore\u002Fbest-virtual-account-providers-stablecoins","Best virtual account providers for stablecoins in 2026: BlindPay, Bridge, HIFI, Noah, and Conduit compared","Five virtual account providers for fiat and stablecoins compared on deposit rails, settlement chains, account naming, and custody, plus a 30-day test plan.",{"path":577,"title":578,"description":579},"\u002Fresources\u002Fmore\u002Fbusiness-vs-consumer-crypto-on-ramps","Business vs consumer crypto on-ramps: what changes when a company buys stablecoins","A consumer on-ramp sells crypto to one person, usually by card. A business on-ramp turns company bank deposits into stablecoins via an API. What differs.",{"path":581,"title":582,"description":583},"\u002Fresources\u002Fmore\u002Fcrypto-debit-card-vs-stablecoin-card-for-business","Crypto debit card vs. stablecoin card for business: custody, accounting, tax, and controls compared","Why a company should treat crypto debit cards and stablecoin cards differently: budget predictability, custody risk, per-swipe tax events, accounting, and spend controls.",{"path":549,"title":5,"description":527},{"path":586,"title":587,"description":588},"\u002Fresources\u002Fmore\u002Fdo-you-need-a-crypto-wallet-for-stablecoin-payments","Do you need a crypto wallet to make stablecoin payments?","Who needs a wallet in a stablecoin payment, who doesn't, and how payment providers hide keys, networks, gas, and confirmations from payers and recipients.",{"path":590,"title":591,"description":592},"\u002Fresources\u002Fmore\u002Fhow-merchants-accept-stablecoin-payments","How merchants accept stablecoin payments: the complete 2026 guide","To accept stablecoin payments you need a receiving method, an off-ramp to local currency, and a settlement account. The full flow, costs, and options.",{"path":594,"title":595,"description":596},"\u002Fresources\u002Fmore\u002Fstablecoin-payment-orchestration-cross-border-payouts","How stablecoins fit into payment orchestration for cross-border payouts","Stablecoins are a settlement rail inside an orchestration strategy, not a replacement for banking. What changes: pre-funding, settlement time, FX visibility, and last-mile delivery over Pix and SPEI.",{"path":598,"title":599,"description":600},"\u002Fresources\u002Fmore\u002Faccept-bank-transfers-settle-in-stablecoins","How to accept bank transfers and settle in stablecoins using virtual accounts","Accept ACH, wire, and SWIFT and settle in USDC or USDT: the flow, the token, chain, and custody choices, and when a virtual account beats a memo code.",{"path":602,"title":603,"description":604},"\u002Fresources\u002Fmore\u002Fhow-to-choose-a-blockchain-payment-api","How to choose a blockchain payment API: a technical buyer's checklist","Seven checks for a blockchain payment API: SDKs, OpenAPI quality, abstraction level, networks, built-in compliance, local payout rails, and pricing.",{"path":606,"title":607,"description":608},"\u002Fresources\u002Fmore\u002Fhow-to-choose-a-stablecoin-api","How to choose a stablecoin API: the 6 questions that actually matter","Six criteria for evaluating a stablecoin API: pre-funding, compliance automation, local payout rails, settlement speed, developer experience, and pricing transparency, with a scorecard you can send to every vendor.",{"path":610,"title":611,"description":612},"\u002Fresources\u002Fmore\u002Fhow-to-evaluate-a-wallet-integration-provider","How to evaluate a wallet integration provider: 12-point checklist","A 12-point checklist for choosing a wallet or stablecoin payments provider: custody, chains, rails, pricing, compliance, SOC 2, SLAs, and AI tooling.",{"path":614,"title":615,"description":616},"\u002Fresources\u002Fmore\u002Fhow-to-fund-a-stablecoin-card","How to fund a stablecoin card: exchanges, wallet transfers, virtual accounts, and bank deposits","Four ways to fund a stablecoin card, compared by speed, cost, and control: exchange withdrawal, wallet transfer, virtual account deposit, and card top-up.",{"path":618,"title":619,"description":620},"\u002Fresources\u002Fmore\u002Fis-stripe-a-stablecoin-api","Is Stripe a stablecoin API? What a payout API, Stripe, and Bridge each do","Partly. Stripe offers stablecoin checkout and balances, and owns Bridge, a stablecoin infrastructure API. What each covers for cross-border payouts.",{"path":622,"title":623,"description":624},"\u002Fresources\u002Fmore\u002Fis-xrp-a-stablecoin","Is XRP a stablecoin? No, and here is the difference","XRP is not a stablecoin: its price floats freely with the market. Ripple's actual stablecoin is RLUSD. Here is how the two differ and why it matters.",{"path":626,"title":627,"description":628},"\u002Fresources\u002Fmore\u002Fstablecoin-api-pricing-explained","Stablecoin API pricing: mint fees, spread, and what you actually pay","The basis-point figure on a stablecoin provider's pricing page rarely matches the invoice, because mint fees, burn fees, spread, and issuer fees usually live below the line the marketing page shows.",{"path":630,"title":631,"description":632},"\u002Fresources\u002Fmore\u002Fstablecoin-api-vs-crypto-payment-gateway","Stablecoin API vs crypto payment gateway: what's the difference?","A crypto payment gateway accepts crypto at checkout. A stablecoin API moves money across borders through code, and neither side needs a wallet.",{"path":634,"title":635,"description":636},"\u002Fresources\u002Fmore\u002Fstablecoin-api-vs-traditional-cross-border-rails","Stablecoin API vs traditional cross-border rails: a plain-English guide for payments teams","A stablecoin API moves money across borders using dollar-pegged tokens like USDC instead of correspondent banks. How the flow works, what no pre-funding means, and a side-by-side table against SWIFT.",{"path":638,"title":639,"description":640},"\u002Fresources\u002Fmore\u002Fstablecoin-card-vs-crypto-debit-prepaid-credit","Stablecoin card vs. crypto debit card vs. prepaid vs. credit: which type of crypto card is which?","Four kinds of crypto card compared: funding source, when conversion happens, tax timing, volatility, fees to check, and who each one suits.",{"path":642,"title":643,"description":644},"\u002Fresources\u002Fmore\u002Fstablecoin-depeg-risk-payments","Stablecoin depeg risk for payment companies: what past depegs teach and how to set limits","A depeg hurts a payment flow only while you hold the stablecoin. What USDC's 2023 depeg and UST's collapse teach, and the limits and triggers to set.",{"path":646,"title":647,"description":648},"\u002Fresources\u002Fmore\u002Fstablecoin-payments-statistics-2026","Stablecoin payment statistics 2026: volume, B2B share, and cross-border data","Sourced stablecoin payment statistics for 2026: real payment volume vs transfer volume, B2B share, domestic vs cross-border, top markets, and chains.",{"path":650,"title":651,"description":652},"\u002Fresources\u002Fmore\u002Fstablecoin-card-statistics-2026","State of stablecoin cards 2026: volume, programs, networks, and risks (data report)","Sourced stablecoin card statistics for 2026: Visa volume and programs, monthly onchain spend, average ticket, chain and token mix, and incidents.",{"path":654,"title":655,"description":656},"\u002Fresources\u002Fmore\u002Ftypes-of-stablecoin-apis","Types of stablecoin APIs: issuer, wallet, orchestration, payout, and non-custodial APIs compared","The five types of stablecoin APIs, what each one does, and who holds the funds and the compliance work in each. Plus how they differ from exchange APIs.",{"path":658,"title":659,"description":660},"\u002Fresources\u002Fmore\u002Fusdc-vs-usdt-for-payments","USDC vs USDT for payments: which should businesses use?","USDC offers stronger reserve transparency and US regulatory posture; USDT offers deeper liquidity in emerging markets. Most payment flows should support both.",{"path":662,"title":663,"description":664},"\u002Fresources\u002Fmore\u002Fvirtual-account-fees","Virtual account fees: every cost between the payer's bank and the stablecoin wallet","Monthly, deposit, wire, SWIFT, conversion, and partner fees on a virtual account: who pays each one, and a worked 10,000 USD wire to USDC example.",{"path":666,"title":667,"description":668},"\u002Fresources\u002Fmore\u002Fvisa-mastercard-stablecoin-settlement","Visa and Mastercard stablecoin settlement explained: what changed in 2025 and 2026","How Visa's USDC settlement and $7B run rate, Mastercard's BVNK deal, and INFINIOS in Bahrain change card settlement, and what stays the same for payouts.",{"path":670,"title":671,"description":672},"\u002Fresources\u002Fmore\u002Fwallet-api-vs-embedded-wallet-sdk-vs-white-label","Wallet API vs embedded SDK vs white-label: which fits?","Compare the three wallet integration models on control, launch time, engineering effort, security, lock-in, and cost, with a five-question decision tree.",{"path":674,"title":675,"description":676},"\u002Fresources\u002Fmore\u002Ftypes-of-crypto-off-ramps","What are the types of crypto off-ramps? Payment APIs, off-ramp wallets, exchanges, OTC desks, and wallet ramps compared","The five kinds of crypto off-ramp compared: who each serves, who holds funds, limits, trade-offs, consumer vs business, and why stablecoins win.",{"path":678,"title":679,"description":680},"\u002Fresources\u002Fmore\u002Fwhat-happens-on-chain-in-a-stablecoin-payment","What happens on-chain in a stablecoin payment? A step-by-step walkthrough","A stablecoin payment in five steps: bank deposit, conversion to USDC or USDT, on-chain delivery to a wallet, payout authorization, and local currency out.",{"path":682,"title":683,"description":684},"\u002Fresources\u002Fmore\u002Fwhat-is-usdc","What is USDC? The dollar-pegged stablecoin explained","USDC is a dollar-pegged stablecoin issued by Circle, backed 1:1 by cash and short-term Treasuries and redeemable for US dollars. How it works and where it's used.",{"path":686,"title":687,"description":688},"\u002Fresources\u002Fmore\u002Fwhat-is-a-stablecoin-api","What is a stablecoin API? Infrastructure explained","A stablecoin API lets businesses move money with stablecoins through code: wallets, conversion, local payout rails, and compliance behind one integration.",{"path":23,"title":690,"description":691},"What is a stablecoin-backed card? How spending USDC with a card works, in plain English","A stablecoin-backed card spends USDC or USDT wherever Visa or Mastercard works. The four parts behind it, who does what, and where the money comes from.",{"path":693,"title":694,"description":695},"\u002Fresources\u002Fmore\u002Fwhat-is-a-stablecoin","What is a stablecoin? Definition, types, and how they work","A stablecoin is a digital token designed to hold a fixed value, usually one US dollar. Learn how they stay stable, the main types, and what they are used for.",{"path":697,"title":698,"description":699},"\u002Fresources\u002Fmore\u002Fwhat-is-an-off-ramp-wallet","What is an off-ramp wallet? A deposit address that pays out to a bank account","An off-ramp wallet turns every USDC or USDT deposit into fiat paid to a linked bank account, with no quote or payout call. How it works, fees, minimums.",{"path":701,"title":702,"description":703},"\u002Fresources\u002Fmore\u002Fwhat-is-crypto-wallet-integration","What is crypto wallet integration? A developer's guide","Crypto wallet integration adds wallets, key custody, signing, and compliance to an app. The six components, three integration models, and cost drivers.",{"path":28,"title":705,"description":706},"What is stablecoin card issuing? How it works, who uses it, and how it differs from crypto debit cards","Stablecoin card issuing explained: how a USDC or USDT balance pays a card merchant in local currency, who runs each layer, and how it differs from a crypto debit card.",{"path":708,"title":709,"description":710},"\u002Fresources\u002Fmore\u002Fwhat-is-stablecoin-infrastructure","What is stablecoin infrastructure? The 8 layers of a stablecoin payments stack","Stablecoin infrastructure is the stack that issues, moves, converts, secures, and checks stablecoins. Here are its 8 layers and who provides each.",{"path":712,"title":713,"description":714},"\u002Fresources\u002Fmore\u002Fstablecoin-card-demand-by-country","Where stablecoin card demand is growing: the US, India, UAE, Vietnam, Pakistan, and beyond","Which countries ask AI about stablecoin cards most, why interest is rising in India, the UAE, Vietnam, and Pakistan, and where local payouts matter.",{"path":716,"title":717,"description":718},"\u002Fresources\u002Fmore\u002Fbest-network-to-off-ramp-stablecoins","Which network should you use to off-ramp stablecoins? Finality, fees, and confirmations by chain","How Ethereum, Polygon, Base, Arbitrum, Solana, Tron, Stellar, Tempo, and Arc compare for off-ramps: time to finality, fee model, and which tokens work.",{"path":720,"title":721,"description":722},"\u002Fresources\u002Fmore\u002Fbest-stablecoin-for-card-spending","Which stablecoin is best for card spending? USDC vs USDT vs euro stablecoins","Which stablecoins power crypto cards in 2026: USDC vs USDT vs euro stablecoins and synthetic dollars, compared on reserves, rules, chains, and support.",1791908482011]