---
title: "How to choose a stablecoin card issuing provider: an 8-point framework and a neutral look at Bridge, Rain, BVNK, and Gnosis Pay"
seoTitle: "How to choose a stablecoin card issuing provider"
description: "An 8-point framework for choosing a stablecoin card issuing provider, a neutral look at Bridge, Rain, BVNK, and Gnosis Pay, and the payout layer beside it."
date: "2026-10-02"
category: "payments"
author: "BlindPay Team"
faq:
  - q: "What is the best stablecoin card issuing provider?"
    a: "There is no single best provider. The right one depends on your markets, the card network you need, whether you want custodial or self-custodial balances, who owns compliance, and how fast you need to launch. Score Bridge, Rain, BVNK, Gnosis Pay, and others on the same criteria, then run a pilot before you sign."
  - q: "What is the difference between a card issuer and a program manager?"
    a: "The issuer is the licensed bank or e-money institution whose BIN the card runs on, and it carries the regulatory responsibility. The program manager designs and runs the card program under the issuer's rules: onboarding, limits, support, and reporting. Most stablecoin card platforms act as program manager and bring a sponsor bank with them."
  - q: "Should I build my own stablecoin card stack or buy one?"
    a: "Buy, unless cards are your core product and you already have a sponsor bank relationship, a processor contract, and a compliance team. Building means negotiating a BIN, integrating a processor, writing authorization logic against stablecoin balances, and passing network certification. A platform compresses that into an integration measured in weeks."
  - q: "Does Mastercard own BVNK now?"
    a: "Yes. Mastercard announced the acquisition of BVNK on March 17, 2026, reported at up to $1.8 billion including up to $300 million contingent, and completed it on August 3, 2026. BVNK's site describes linking virtual cards to stablecoin balances and rewards on balances. Check its current product terms directly before you plan around them."
  - q: "Which provider handles payouts to local bank accounts next to a card program?"
    a: "A card platform pays merchants through the card network. Paying rent, salaries, or suppliers in local currency needs a payout provider. BlindPay converts USDC and USDT into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO/COBO), and runs next to whichever card issuer you choose."
---

Choose a stablecoin card issuing provider on eight criteria: market coverage, card network, settlement model, custody model, compliance ownership, fee transparency, SDK quality, and time to launch. Bridge, Rain, BVNK, and Gnosis Pay package these differently. The issuer runs the card. A separate payout layer, such as BlindPay, can handle funding and local cash-out.

That split matters because a card only covers one job: paying merchants that accept Visa or Mastercard. The money still has to arrive in the program, and users still need to reach a bank account for rent, payroll, and invoices. This guide covers how to evaluate the card side honestly, and where the other legs go.

**Key takeaways**

- Compare providers on the same eight criteria, scored against your markets and users, not on a feature list.
- Visa reported more than 130 stablecoin-linked card programs in more than 50 countries as of March 31, 2026, so most teams buy a platform rather than build.
- Settlement model and custody model are the two choices that are hardest to change after launch.
- The August 28, 2026 Rain-managed Solana contract incident is a reminder to ask how a provider isolates programs on shared contracts.
- Pair the issuer with a payout provider for the funding and cash-out legs instead of forcing the card to do everything.

For the basics of the product itself, start with [what stablecoin card issuing is](/resources/more/what-is-stablecoin-card-issuing).

## What does a stablecoin card issuing provider actually do?

A stablecoin card issuing provider lets you put a Visa or Mastercard card in your users' hands that spends from a stablecoin balance. It bundles the licensed issuer, the processor, and the program tooling into one integration.

A few terms come up in every vendor call:

- **Issuer (or BIN sponsor):** the licensed bank or e-money institution whose bank identification number the card runs on. It carries the regulatory responsibility.
- **Program manager:** the company that designs and operates the card program under the issuer's rules. Most stablecoin card platforms play this role.
- **Processor:** the system that receives each authorization request from the network and approves or declines it in real time.
- **Settlement model:** how the program pays the network for card spend, in fiat over bank rails or directly in a stablecoin such as USDC.
- **Custody model:** who controls the stablecoin balance the card spends from: the provider (custodial) or the user's own smart account (self-custodial).

The step-by-step flow of a single purchase is covered in [how stablecoin card transactions settle](/resources/more/how-stablecoin-card-transactions-settle).

## Should you build a card stack or buy one?

Buy, unless cards are your core product and you already have a sponsor bank, a processor contract, and a compliance team. Building the stack yourself takes months of negotiation and certification before the first card ships.

The market has moved toward platforms. [Visa reported](https://www.visa.com/en-us/thought-leadership/innovation/stablecoin-linked-cards-monetize-money-movement) more than 130 stablecoin-linked card programs across more than 50 countries, and expects the number of programs to roughly double in 2026. A platform that bundles issuer, processor, and program tooling is the shorter path to joining them.

Building makes sense when you need control that no platform offers, such as a custom authorization rule set or a settlement arrangement only your bank partner supports. The [developer guide to issuing stablecoin cards through an API](/resources/more/how-to-issue-stablecoin-cards-api) lists what a card issuing API has to expose if you go that way.

## Which criteria should you use to compare providers?

Use the same eight criteria for every provider and score each one against your own markets and users. A provider that is strong in Latin America can be the wrong pick for an EEA consumer card.

| Criterion | What to ask | Why it matters |
| --- | --- | --- |
| Market coverage | Which countries can cardholders live in today, and which are planned? | A card you can't offer in your main market is a non-starter |
| Card network | Visa, Mastercard, or both? Physical and virtual cards? | Network rules and acceptance follow from this |
| Settlement model | Does the program settle with the network in fiat, or in USDC? | Changes your liquidity needs and conversion timing |
| Custody model | Custodial ledger or self-custodial smart account? | Decides who holds funds and what fails if the provider fails |
| Compliance ownership | Who runs KYC, KYB, sanctions screening, and monitoring? | You need a clear split before a bank partner signs off |
| Fee transparency | Interchange share, per-card fees, FX and conversion spread | "No fee" claims often sit in the spread |
| SDK and API quality | Sandbox, webhooks, card controls, dispute endpoints | Sets your engineering cost for years |
| Time to launch | Weeks or months to first live card, and what blocks it | Usually gated by the sponsor bank, not the API |

Two of these are hard to reverse. Moving from custodial to self-custodial balances, or from fiat to USDC settlement, usually means a new program, new contracts, and reissued cards. Decide those first. [Custodial vs self-custodial stablecoin cards](/resources/more/custodial-vs-self-custodial-stablecoin-cards) walks through the custody trade-off in detail.

## Where does BlindPay fit next to a card issuer?

The cleanest stack uses the issuer for cards and BlindPay for funding and local payouts. The card provider handles authorization and merchant spend. BlindPay handles money coming into the program and money leaving it for a bank account.

On the funding side, [BlindPay virtual accounts](/docs/virtual-accounts) give each customer a US account with its own routing and account number. Each ACH, wire, or SWIFT deposit converts to USDC or USDT and lands in the wallet linked to the account, which can be the wallet the card spends from.

On the payout side, BlindPay converts USDC and USDT into local currency over Pix, SPEI, ACH, RTP, SEPA, and SWIFT (POBO/COBO) with UETR tracking and MT103 confirmations. A live quote locks the rate and fees before the stablecoins move, there is no pre-funding, and plans are published with no volume floor. That covers the payments a card can't make: rent, salaries, supplier invoices, and transfers to a user's own bank.

## How do Bridge, Rain, BVNK, and Gnosis Pay compare?

Each of the four describes its card offering differently, and each has had notable news in 2025 and 2026. The table sticks to what each company says publicly and what has been reported, with links in the sources list.

| Provider | How it describes the card offering | Notable public fact |
| --- | --- | --- |
| Bridge (a Stripe company) | "Launch a compliant consumer or commercial card program to users in multiple markets with a single integration," with users spending stablecoin balances | Visa partnership announced April 30, 2025, starting with Argentina, Colombia, Ecuador, Mexico, Peru, and Chile |
| Rain | "Stablecoin payments platform for enterprise," covering card programs, wallets, and scoped cards for agentic payments | August 28, 2026 vulnerability in an outdated version of its Solana contracts affecting a small number of programs; affected users reported repaid |
| BVNK | Enterprise stablecoin payments, including linking virtual cards to stablecoin balances and rewards on balances | Mastercard completed its acquisition of BVNK on August 3, 2026 |
| Gnosis Pay | Card programs on Safe smart accounts with self-custody and spending allowances | June 1, 2026 exploit of its Delay and Roles modules; its post-mortem says Gnosis absorbed the losses and restored all user funds |

Read the table as a starting point, not a ranking. Bridge's Visa partnership signals strength in Latin America. BVNK now sits inside a card network. Rain positions around enterprise programs and agent use cases. Gnosis Pay is the reference design for self-custodial spend. For how BlindPay compares on the payout job, see the [Bridge](/compare/bridge) and [BVNK](/compare/bvnk) comparison pages.

## What should you ask about the settlement model?

Ask whether the program settles with the card network in fiat or directly in USDC, and who converts. The answer decides how much fiat liquidity the program has to hold and when stablecoins are sold.

In the traditional model, the program converts stablecoins to fiat and settles with the network over bank rails. In the newer model, the issuer settles with the network in USDC. [Visa launched USDC settlement in the United States](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21951.html) on December 16, 2025, with Cross River Bank and Lead Bank as initial banking participants, settling over Solana. By [April 29, 2026](https://corporate.visa.com/en/sites/visa-perspectives/newsroom/visa-expands-stablecoin-settlement-adds-five-blockchains.html), Visa's settlement pilot supported nine blockchains and a $7 billion annualized settlement run rate. That is settlement activity, not card spend.

Questions for the provider:

- Which settlement model does my program use today, and can it change later?
- Which chains and stablecoins does settlement support?
- How much fiat buffer do you require, and who funds it?

## How should you weigh shared-infrastructure risk?

Ask how the provider isolates one program from another on shared smart contracts and shared ledgers. A flaw in shared infrastructure can hit many programs at once, even when each program is run well.

The Rain incident shows the pattern. On August 28, 2026, unauthorized withdrawals hit card balances held in a Rain-managed Solana contract. Rain described "a vulnerability impacting a small number of programs using an outdated version of our Solana contracts." [Tria reported](https://www.spendnode.io/blog/tria-rain-solana-card-vulnerability-636-users-refund-august-2026/) 636 affected users and $431,945, with every affected user being refunded in full. [Avici reported](https://www.spendnode.io/blog/avici-solana-card-refunds-complete-10-percent-cashback-august-2026/) $500,859 across 1,685 users, refunded in full plus 10% cashback. Self-custodial wallets were reported unaffected.

The useful questions are about process, not blame:

- Are program balances held in separate contracts or one shared contract?
- How are contract upgrades rolled out across programs, and how fast?
- Who reimburses users after an incident, and in what time frame?

[Are stablecoin cards safe?](/resources/more/are-stablecoin-cards-safe) covers the full risk list for users.

## How do you run the evaluation step by step?

Run a short, structured process: write requirements, shortlist on hard constraints, score on the eight criteria, then pilot. Most teams can do this in four to six weeks.

1. **Write your requirements.** List target countries, card types, expected monthly spend, custody preference, and who your users are.
2. **Filter on hard constraints.** Drop any provider that can't issue in your main market or on your required network.
3. **Send the same questionnaire to each.** Use the eight criteria above. The [stablecoin API RFP template](/resources/more/stablecoin-api-rfp-template) has a scoring format you can adapt.
4. **Check compliance ownership in writing.** Confirm who runs KYC, KYB, sanctions screening, and monitoring. [Stablecoin card issuing compliance](/resources/more/stablecoin-card-issuing-compliance) lists the duties by party.
5. **Model the full cost.** Include card fees, conversion spread, FX markup, and the cost of funding and cash-out legs.
6. **Plan the funding and payout legs.** Decide how money enters the program and how users or your company reach bank accounts.
7. **Pilot with real cards.** Issue to staff, test authorizations, partial captures, refunds, and a dispute before you sign a long contract.

## Which stack fits which company?

Match the stack to the job your users actually need done. A card alone rarely covers it.

- **A wallet or neobank in Latin America:** a card platform with Latin American coverage, plus local payouts over Pix and SPEI for transfers to bank accounts.
- **A self-custody wallet in the EEA:** a self-custodial card program, plus SEPA payouts for users who want euros in a bank.
- **A company paying a global team:** expense cards for small spend, plus local payouts for salaries and invoices.
- **An enterprise already holding balances with a platform:** keep the card there, and route local-currency payouts to a payout provider where coverage is stronger.

## What is the next step?

Shortlist two or three card providers on the eight criteria, then design the funding and payout legs before you sign. Create a free [BlindPay development instance](/docs/quickstart-payout) to test virtual account deposits and Pix, SPEI, ACH, or SEPA payouts with test stablecoins while your card pilot runs.

## Sources

- [Visa: How stablecoin-linked cards are modernizing money movement (updated March 31, 2026)](https://www.visa.com/en-us/thought-leadership/innovation/stablecoin-linked-cards-monetize-money-movement)
- [Visa: Visa Launches Stablecoin Settlement in the United States (December 16, 2025)](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21951.html)
- [Visa: Adding Five Blockchains for Settlement (April 29, 2026)](https://corporate.visa.com/en/sites/visa-perspectives/newsroom/visa-expands-stablecoin-settlement-adds-five-blockchains.html)
- [Visa and Bridge partnership (April 30, 2025)](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21371.html)
- [Bridge cards](https://www.bridge.xyz/product/cards)
- [Rain](https://www.rain.xyz/)
- [Rain statement on the Solana contract vulnerability](https://x.com/raincards/status/2093435073081053518)
- [BVNK](https://www.bvnk.com/)
- [Mastercard completes acquisition of BVNK (August 3, 2026)](https://investor.mastercard.com/investor-news/investor-news-details/2026/Mastercard-completes-acquisition-of-BVNK-to-advance-global-stablecoin-capabilities/default.aspx)
- [The Block: Mastercard to acquire BVNK for up to $1.8 billion](https://www.theblock.co/post/393898/mastercard-to-acquire-stablecoin-infrastructure-firm-bvnk-for-up-to-1-8-billion)
- [Gnosis Pay](https://gnosispay.com/)
- [Gnosis Pay post-mortem](https://gnosispay.com/blog/post-mortem-gnosis-pay-vulnerability-exploit)
- [SpendNode: Tria details Rain card vulnerability (August 29, 2026)](https://www.spendnode.io/blog/tria-rain-solana-card-vulnerability-636-users-refund-august-2026/)
- [SpendNode: Avici completes refunds (August 30, 2026)](https://www.spendnode.io/blog/avici-solana-card-refunds-complete-10-percent-cashback-august-2026/)