[{"data":1,"prerenderedAt":642},["ShallowReactive",2],{"content-\u002Fresources\u002Fmore\u002Fhow-to-verify-non-custodial-payment-provider":3,"resources-category-how-to-verify-non-custodial-payment-provider":457},{"id":4,"title":5,"authors":6,"body":7,"categories":6,"category":427,"categoryType":6,"compare":6,"contributors":6,"date":428,"description":429,"extension":430,"faq":431,"howto":6,"isBlog":447,"isChangelog":447,"meta":448,"navigation":450,"path":451,"pillar":447,"products":6,"rawbody":452,"role":6,"seo":453,"seoTitle":454,"stem":455,"thumbnail":6,"updated":428,"__hash__":456},"content\u002Fresources\u002Fmore\u002Fhow-to-verify-non-custodial-payment-provider.md","How to verify a payment provider is really non-custodial: 8 checks you can run yourself",null,{"type":8,"value":9,"toc":415},"minimark",[10,14,17,23,42,47,50,67,78,91,95,98,113,121,125,128,293,297,300,308,311,315,318,334,337,341,344,353,357,372,375,386,390,407],[11,12,13],"p",{},"To verify a provider is really non-custodial, test where your money sits at every step: inspect the token approval you sign, look for any balance the provider holds for you, read the terms for who owns funds in transit, and run a failed payment in a sandbox. A real non-custodial flow never leaves value parked under the provider's sole control.",[11,15,16],{},"\"Non-custodial\" is easy to write on a landing page. It is harder to prove, and the proof matters most on the day something breaks. These eight checks take an afternoon and turn a marketing claim into evidence you can put in a vendor file.",[11,18,19],{},[20,21,22],"strong",{},"Key takeaways",[24,25,26,30,33,36,39],"ul",{},[27,28,29],"li",{},"Custody is a question of control: who can move the value without your signature, and for how long.",[27,31,32],{},"On EVM chains, check that the approval you sign covers the quoted amount, not an unlimited allowance.",[27,34,35],{},"A provider-held \"balance\" in a dashboard means someone custodies it. Find out who.",[27,37,38],{},"Run failure tests in the sandbox. Where funds go when a payout fails tells you more than any diagram.",[27,40,41],{},"Many products mix models. Ask which features are custodial, not whether the company is.",[43,44,46],"h2",{"id":45},"what-does-non-custodial-actually-mean-for-a-payment-provider","What does \"non-custodial\" actually mean for a payment provider?",[11,48,49],{},"It means the provider never holds your funds under its own independent control beyond the single transaction you authorized. You keep the keys, you approve each movement, and value does not sit in a provider account between payments.",[51,52,53],"blockquote",{},[11,54,55,58,59,62,63,66],{},[20,56,57],{},"Definition:"," A ",[20,60,61],{},"non-custodial payment provider"," executes a payment you authorize from a wallet or account you control, without taking ownership of the funds or holding them as a balance on your behalf. A ",[20,64,65],{},"custodial"," provider holds the funds in accounts or wallets it controls and owes you a balance.",[11,68,69,70,77],{},"US regulators drew the same line years ago. FinCEN's May 2019 guidance (",[71,72,76],"a",{"href":73,"rel":74},"https:\u002F\u002Fwww.fincen.gov\u002Fresources\u002Fstatutes-regulations\u002Fguidance\u002Fapplication-fincens-regulations-certain-business-models",[75],"nofollow","FIN-2019-G001",") calls wallets where third parties control user funds \"hosted\" and wallets where users control funds \"unhosted\". It looks at four criteria: who owns the value, where it is stored, whether the owner interacts directly with the payment system, and whether the intermediary has total independent control over the value. Those four questions are a good frame for every check below.",[11,79,80,81,85,86,90],{},"For the conceptual background, start with ",[71,82,84],{"href":83},"\u002Fresources\u002Fmore\u002Fnon-custodial-payments-explained","non-custodial payments explained"," and the ",[71,87,89],{"href":88},"\u002Fresources\u002Fmore\u002Fcustodial-vs-non-custodial-vs-mpc-wallets","custodial vs non-custodial wallet comparison",". This page is the test plan.",[43,92,94],{"id":93},"why-bother-checking-what-goes-wrong-when-custody-is-unclear","Why bother checking? What goes wrong when custody is unclear?",[11,96,97],{},"Custody decides who owns the money if the provider fails. Two recent cases show the cost of guessing wrong.",[11,99,100,101,106,107,112],{},"In January 2023, the judge in the Celsius bankruptcy ruled that assets in its Earn accounts belonged to the bankruptcy estate, because the terms of use transferred title to Celsius (",[71,102,105],{"href":103,"rel":104},"https:\u002F\u002Fwww.axios.com\u002F2023\u002F01\u002F04\u002Fcelsius-bankruptcy-earn-accounts",[75],"Axios","). Customers became unsecured creditors. In the Synapse case, the CFPB alleged the company failed \"to maintain adequate records of the location of consumers' funds\", and partner banks found a shortfall of between $60 and $90 million (",[71,108,111],{"href":109,"rel":110},"https:\u002F\u002Fwww.consumerfinance.gov\u002Fenforcement\u002Factions\u002Fsynapse-financial-technologies-inc\u002F",[75],"CFPB",").",[11,114,115,116,120],{},"Neither was a blockchain hack. Both were questions of who held what, on paper and in practice. ",[71,117,119],{"href":118},"\u002Fresources\u002Fmore\u002Fwhat-happens-if-a-stablecoin-payment-provider-fails","What happens if a stablecoin payment provider fails"," walks through the insolvency scenarios in more detail.",[43,122,124],{"id":123},"what-are-the-8-checks","What are the 8 checks?",[11,126,127],{},"Run them in order. The first four need documents and a block explorer. The last four need a sandbox account and an hour of a solutions engineer's time.",[129,130,131,153],"table",{},[132,133,134],"thead",{},[135,136,137,141,144,147,150],"tr",{},[138,139,140],"th",{},"#",[138,142,143],{},"Check",[138,145,146],{},"Evidence to ask for",[138,148,149],{},"Passes when",[138,151,152],{},"Warning sign",[154,155,156,174,191,208,225,242,259,276],"tbody",{},[135,157,158,162,165,168,171],{},[159,160,161],"td",{},"1",[159,163,164],{},"Flow of funds",[159,166,167],{},"A diagram of every account and wallet the money touches",[159,169,170],{},"Each step names who controls the value and for how long",[159,172,173],{},"\"Funds are pooled\" with no detail",[135,175,176,179,182,185,188],{},[159,177,178],{},"2",[159,180,181],{},"On-chain authorization",[159,183,184],{},"The approval or signature your wallet produces",[159,186,187],{},"Amount equals the quoted payout",[159,189,190],{},"Unlimited allowance, or a transfer to a provider address",[135,192,193,196,199,202,205],{},[159,194,195],{},"3",[159,197,198],{},"Stored balance",[159,200,201],{},"Dashboard and API objects",[159,203,204],{},"No provider-held balance on the non-custodial path",[159,206,207],{},"A \"balance\" you cannot see on-chain",[135,209,210,213,216,219,222],{},[159,211,212],{},"4",[159,214,215],{},"Title in the terms",[159,217,218],{},"Terms of service, customer agreement",[159,220,221],{},"You keep ownership of funds in transit",[159,223,224],{},"Language that transfers title to the provider",[135,226,227,230,233,236,239],{},[159,228,229],{},"5",[159,231,232],{},"Keys",[159,234,235],{},"Wallet setup docs",[159,237,238],{},"You hold the keys, or the custodial option is labeled as such",[159,240,241],{},"Vague answers about key management",[135,243,244,247,250,253,256],{},[159,245,246],{},"6",[159,248,249],{},"Failure path",[159,251,252],{},"Sandbox test of a failed or refunded payout",[159,254,255],{},"Funds return to a wallet you control, with a transaction hash",[159,257,258],{},"\"Contact support\" as the only answer",[135,260,261,264,267,270,273],{},[159,262,263],{},"7",[159,265,266],{},"Fiat leg",[159,268,269],{},"Settlement and reconciliation records",[159,271,272],{},"Records match the bank's at every step",[159,274,275],{},"Records that only exist in the provider's ledger",[135,277,278,281,284,287,290],{},[159,279,280],{},"8",[159,282,283],{},"Exceptions",[159,285,286],{},"Written list of custodial features",[159,288,289],{},"Custodial features are named and opt-in",[159,291,292],{},"\"We are fully non-custodial\" with no exceptions listed",[43,294,296],{"id":295},"how-do-you-check-the-on-chain-authorization","How do you check the on-chain authorization?",[11,298,299],{},"Open the approval transaction on a block explorer and read two fields: the spender and the amount. If the amount equals the quoted payout, your exposure is limited to that payment.",[11,301,302,303,307],{},"On EVM chains, stablecoins are ERC-20 tokens. A provider that pulls funds asks your wallet to call ",[304,305,306],"code",{},"approve"," on the token contract, naming its contract as the spender. The explorer shows the exact allowance. An allowance of the maximum integer value is a standing permission to pull more later. That is not custody in the legal sense, but it is control in the practical one.",[11,309,310],{},"Other chains use different mechanics. Stellar uses a signed transaction, and Solana uses token delegation for a set amount. The test is the same: the authorization should be scoped to one payment. If instead the flow asks you to send funds to a provider address first, the provider holds them until it pays out, and you are in a custodial step.",[43,312,314],{"id":313},"how-do-you-test-the-failure-path","How do you test the failure path?",[11,316,317],{},"Create a payout in the sandbox that is designed to fail, then follow the money. A non-custodial provider returns funds to a wallet you control and gives you a transaction hash you can verify.",[11,319,320,321,324,325,328,329,333],{},"Ask the provider how to force each terminal status in development. Some APIs use sentinel amounts that trigger ",[304,322,323],{},"failed"," or ",[304,326,327],{},"refunded"," outcomes on purpose. Then check three things: which wallet received the refund, whether the refund happened on-chain, and whether a human had to approve it. ",[71,330,332],{"href":331},"\u002Fresources\u002Fmore\u002Fstablecoin-payout-statuses-explained","Stablecoin payout statuses explained"," covers what each status means.",[11,335,336],{},"Be precise about what you learn. Some refunds are automatic, others go through a review queue. Neither is wrong, but you need to know which applies to your rails so your support team can answer the recipient.",[43,338,340],{"id":339},"what-if-the-provider-is-custodial-for-part-of-the-flow","What if the provider is custodial for part of the flow?",[11,342,343],{},"That is normal, and it is fine if it is disclosed and protected. Many products offer an optional hosted wallet next to a non-custodial payout path. The question is whether you know which one you are using.",[11,345,346,347,352],{},"When a step is custodial, ask how the provider protects you. New York's Department of Financial Services updated its guidance on ",[71,348,351],{"href":349,"rel":350},"https:\u002F\u002Fwww.dfs.ny.gov\u002Findustry-guidance\u002Findustry-letters\u002Fil20250930-updated-guidance-custodial-structures",[75],"custodial structures"," on September 30, 2025. It expects custodians to segregate customer assets on-chain and in internal ledgers, keep an audit trail for omnibus wallets, and make sure the beneficial interest always remains with the customer. That is a useful benchmark even outside New York. Regulatory treatment of custody varies by jurisdiction, so treat it as a reference, not a rule that applies to every provider.",[43,354,356],{"id":355},"how-does-blindpay-answer-these-checks","How does BlindPay answer these checks?",[11,358,359,360,362,363,367,368,112],{},"BlindPay operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. On EVM chains that authorization is an ERC-20 ",[304,361,306],{}," for the quoted amount, returned in the ",[71,364,366],{"href":365},"\u002Fdocs\u002Fpayout-quotes","payout quote",". Stellar uses a signed transaction and Solana uses token delegation (",[71,369,371],{"href":370},"\u002Fdocs\u002Fpayouts","payouts",[11,373,374],{},"If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic, while USD payouts and payouts whose review times out are refunded after an operator review.",[11,376,377,378,382,383,385],{},"Optional BlindPay-managed wallets (beta) are custodial when you choose that path (",[71,379,381],{"href":380},"\u002Fdocs\u002Fwallets","managed wallets","). That is the exception list for check 8, in writing. Development instances let you force a ",[304,384,327],{}," outcome with a sentinel amount, so you can run check 6 before you sign anything.",[43,387,389],{"id":388},"what-should-you-do-next","What should you do next?",[11,391,392,393,85,397,401,402,406],{},"Put the eight checks in your vendor file and ask every shortlisted provider for the evidence in the table. Pair it with the ",[71,394,396],{"href":395},"\u002Fresources\u002Fmore\u002Fstablecoin-payments-provider-due-diligence","30 due diligence questions",[71,398,400],{"href":399},"\u002Fresources\u002Fmore\u002Fcustodial-vs-non-custodial-off-ramps","custody risk questions for off-ramps",". If blockchain rails are new to your team, ",[71,403,405],{"href":404},"\u002Fresources\u002Fmore\u002Fblockchain-payments-vs-crypto-payments","blockchain payments vs crypto payments"," explains the basics first.",[11,408,409,410,414],{},"Run check 6 yourself on a BlindPay development instance by following the ",[71,411,413],{"href":412},"\u002Fdocs\u002Fquickstart-payout","payout quickstart",".",{"title":416,"searchDepth":417,"depth":417,"links":418},"",2,[419,420,421,422,423,424,425,426],{"id":45,"depth":417,"text":46},{"id":93,"depth":417,"text":94},{"id":123,"depth":417,"text":124},{"id":295,"depth":417,"text":296},{"id":313,"depth":417,"text":314},{"id":339,"depth":417,"text":340},{"id":355,"depth":417,"text":356},{"id":388,"depth":417,"text":389},"compliance","2026-10-11","Eight checks that prove whether a blockchain payment provider ever holds your funds: on-chain approvals, stored balances, terms of title, failure tests.","md",[432,435,438,441,444],{"q":433,"a":434},"How can I tell if a payment provider is non-custodial?","Look for evidence, not the label. Ask for a flow-of-funds diagram, check the token approval your wallet signs on a block explorer, look for any balance the provider holds for you, and read the terms for who owns funds in transit. Then run a failed payment in the sandbox and watch where the money goes. Each check either confirms the claim or shows where custody starts.",{"q":436,"a":437},"Does signing an ERC-20 approval give the provider custody of my wallet?","No. An ERC-20 approve call lets one contract pull up to a set amount of one token from your wallet. Your keys and the rest of your balance stay with you. The risk sits in the amount: an approval for exactly the quoted payout limits exposure to that payment, while an unlimited approval lets the spender pull more later. Check the amount on a block explorer.",{"q":439,"a":440},"Why does it matter whether a provider is custodial?","Because custody decides who owns the money if the provider fails. In the Celsius bankruptcy, a judge ruled in January 2023 that assets in Earn accounts belonged to the estate, so customers became unsecured creditors. In the Synapse case, the CFPB alleged poor records of where consumer funds sat, with a shortfall of $60 to $90 million. Less custody means less of this exposure.",{"q":442,"a":443},"Is a non-custodial payment provider unregulated?","Not necessarily. Non-custodial describes who controls funds, not whether a business needs licenses. A provider that converts currency or transmits value can still have money transmission, AML, and sanctions obligations depending on the jurisdiction and the flow. Regulatory treatment varies by country and by product, so ask each provider which licenses and registrations cover your specific flow. This is general information, not legal advice.",{"q":445,"a":446},"Is BlindPay non-custodial?","For payout flows from customer-controlled wallets, yes. You authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet or the sending wallet; non-USD local rails refund automatically, while USD payouts and timed-out reviews are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial.",false,{"author":449},"BlindPay Team",true,"\u002Fresources\u002Fmore\u002Fhow-to-verify-non-custodial-payment-provider","---\ntitle: \"How to verify a payment provider is really non-custodial: 8 checks you can run yourself\"\nseoTitle: \"How to verify a provider is really non-custodial\"\ndescription: \"Eight checks that prove whether a blockchain payment provider ever holds your funds: on-chain approvals, stored balances, terms of title, failure tests.\"\ndate: \"2026-10-11\"\nupdated: \"2026-10-11\"\ncategory: \"compliance\"\nauthor: \"BlindPay Team\"\nfaq:\n  - q: \"How can I tell if a payment provider is non-custodial?\"\n    a: \"Look for evidence, not the label. Ask for a flow-of-funds diagram, check the token approval your wallet signs on a block explorer, look for any balance the provider holds for you, and read the terms for who owns funds in transit. Then run a failed payment in the sandbox and watch where the money goes. Each check either confirms the claim or shows where custody starts.\"\n  - q: \"Does signing an ERC-20 approval give the provider custody of my wallet?\"\n    a: \"No. An ERC-20 approve call lets one contract pull up to a set amount of one token from your wallet. Your keys and the rest of your balance stay with you. The risk sits in the amount: an approval for exactly the quoted payout limits exposure to that payment, while an unlimited approval lets the spender pull more later. Check the amount on a block explorer.\"\n  - q: \"Why does it matter whether a provider is custodial?\"\n    a: \"Because custody decides who owns the money if the provider fails. In the Celsius bankruptcy, a judge ruled in January 2023 that assets in Earn accounts belonged to the estate, so customers became unsecured creditors. In the Synapse case, the CFPB alleged poor records of where consumer funds sat, with a shortfall of $60 to $90 million. Less custody means less of this exposure.\"\n  - q: \"Is a non-custodial payment provider unregulated?\"\n    a: \"Not necessarily. Non-custodial describes who controls funds, not whether a business needs licenses. A provider that converts currency or transmits value can still have money transmission, AML, and sanctions obligations depending on the jurisdiction and the flow. Regulatory treatment varies by country and by product, so ask each provider which licenses and registrations cover your specific flow. This is general information, not legal advice.\"\n  - q: \"Is BlindPay non-custodial?\"\n    a: \"For payout flows from customer-controlled wallets, yes. You authorize the exact amount and BlindPay executes that single transaction. If a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet or the sending wallet; non-USD local rails refund automatically, while USD payouts and timed-out reviews are refunded after an operator review. Optional BlindPay-managed wallets (beta) are custodial.\"\n---\n\nTo verify a provider is really non-custodial, test where your money sits at every step: inspect the token approval you sign, look for any balance the provider holds for you, read the terms for who owns funds in transit, and run a failed payment in a sandbox. A real non-custodial flow never leaves value parked under the provider's sole control.\n\n\"Non-custodial\" is easy to write on a landing page. It is harder to prove, and the proof matters most on the day something breaks. These eight checks take an afternoon and turn a marketing claim into evidence you can put in a vendor file.\n\n**Key takeaways**\n\n- Custody is a question of control: who can move the value without your signature, and for how long.\n- On EVM chains, check that the approval you sign covers the quoted amount, not an unlimited allowance.\n- A provider-held \"balance\" in a dashboard means someone custodies it. Find out who.\n- Run failure tests in the sandbox. Where funds go when a payout fails tells you more than any diagram.\n- Many products mix models. Ask which features are custodial, not whether the company is.\n\n## What does \"non-custodial\" actually mean for a payment provider?\n\nIt means the provider never holds your funds under its own independent control beyond the single transaction you authorized. You keep the keys, you approve each movement, and value does not sit in a provider account between payments.\n\n> **Definition:** A **non-custodial payment provider** executes a payment you authorize from a wallet or account you control, without taking ownership of the funds or holding them as a balance on your behalf. A **custodial** provider holds the funds in accounts or wallets it controls and owes you a balance.\n\nUS regulators drew the same line years ago. FinCEN's May 2019 guidance ([FIN-2019-G001](https:\u002F\u002Fwww.fincen.gov\u002Fresources\u002Fstatutes-regulations\u002Fguidance\u002Fapplication-fincens-regulations-certain-business-models)) calls wallets where third parties control user funds \"hosted\" and wallets where users control funds \"unhosted\". It looks at four criteria: who owns the value, where it is stored, whether the owner interacts directly with the payment system, and whether the intermediary has total independent control over the value. Those four questions are a good frame for every check below.\n\nFor the conceptual background, start with [non-custodial payments explained](\u002Fresources\u002Fmore\u002Fnon-custodial-payments-explained) and the [custodial vs non-custodial wallet comparison](\u002Fresources\u002Fmore\u002Fcustodial-vs-non-custodial-vs-mpc-wallets). This page is the test plan.\n\n## Why bother checking? What goes wrong when custody is unclear?\n\nCustody decides who owns the money if the provider fails. Two recent cases show the cost of guessing wrong.\n\nIn January 2023, the judge in the Celsius bankruptcy ruled that assets in its Earn accounts belonged to the bankruptcy estate, because the terms of use transferred title to Celsius ([Axios](https:\u002F\u002Fwww.axios.com\u002F2023\u002F01\u002F04\u002Fcelsius-bankruptcy-earn-accounts)). Customers became unsecured creditors. In the Synapse case, the CFPB alleged the company failed \"to maintain adequate records of the location of consumers' funds\", and partner banks found a shortfall of between $60 and $90 million ([CFPB](https:\u002F\u002Fwww.consumerfinance.gov\u002Fenforcement\u002Factions\u002Fsynapse-financial-technologies-inc\u002F)).\n\nNeither was a blockchain hack. Both were questions of who held what, on paper and in practice. [What happens if a stablecoin payment provider fails](\u002Fresources\u002Fmore\u002Fwhat-happens-if-a-stablecoin-payment-provider-fails) walks through the insolvency scenarios in more detail.\n\n## What are the 8 checks?\n\nRun them in order. The first four need documents and a block explorer. The last four need a sandbox account and an hour of a solutions engineer's time.\n\n| # | Check | Evidence to ask for | Passes when | Warning sign |\n| --- | --- | --- | --- | --- |\n| 1 | Flow of funds | A diagram of every account and wallet the money touches | Each step names who controls the value and for how long | \"Funds are pooled\" with no detail |\n| 2 | On-chain authorization | The approval or signature your wallet produces | Amount equals the quoted payout | Unlimited allowance, or a transfer to a provider address |\n| 3 | Stored balance | Dashboard and API objects | No provider-held balance on the non-custodial path | A \"balance\" you cannot see on-chain |\n| 4 | Title in the terms | Terms of service, customer agreement | You keep ownership of funds in transit | Language that transfers title to the provider |\n| 5 | Keys | Wallet setup docs | You hold the keys, or the custodial option is labeled as such | Vague answers about key management |\n| 6 | Failure path | Sandbox test of a failed or refunded payout | Funds return to a wallet you control, with a transaction hash | \"Contact support\" as the only answer |\n| 7 | Fiat leg | Settlement and reconciliation records | Records match the bank's at every step | Records that only exist in the provider's ledger |\n| 8 | Exceptions | Written list of custodial features | Custodial features are named and opt-in | \"We are fully non-custodial\" with no exceptions listed |\n\n## How do you check the on-chain authorization?\n\nOpen the approval transaction on a block explorer and read two fields: the spender and the amount. If the amount equals the quoted payout, your exposure is limited to that payment.\n\nOn EVM chains, stablecoins are ERC-20 tokens. A provider that pulls funds asks your wallet to call `approve` on the token contract, naming its contract as the spender. The explorer shows the exact allowance. An allowance of the maximum integer value is a standing permission to pull more later. That is not custody in the legal sense, but it is control in the practical one.\n\nOther chains use different mechanics. Stellar uses a signed transaction, and Solana uses token delegation for a set amount. The test is the same: the authorization should be scoped to one payment. If instead the flow asks you to send funds to a provider address first, the provider holds them until it pays out, and you are in a custodial step.\n\n## How do you test the failure path?\n\nCreate a payout in the sandbox that is designed to fail, then follow the money. A non-custodial provider returns funds to a wallet you control and gives you a transaction hash you can verify.\n\nAsk the provider how to force each terminal status in development. Some APIs use sentinel amounts that trigger `failed` or `refunded` outcomes on purpose. Then check three things: which wallet received the refund, whether the refund happened on-chain, and whether a human had to approve it. [Stablecoin payout statuses explained](\u002Fresources\u002Fmore\u002Fstablecoin-payout-statuses-explained) covers what each status means.\n\nBe precise about what you learn. Some refunds are automatic, others go through a review queue. Neither is wrong, but you need to know which applies to your rails so your support team can answer the recipient.\n\n## What if the provider is custodial for part of the flow?\n\nThat is normal, and it is fine if it is disclosed and protected. Many products offer an optional hosted wallet next to a non-custodial payout path. The question is whether you know which one you are using.\n\nWhen a step is custodial, ask how the provider protects you. New York's Department of Financial Services updated its guidance on [custodial structures](https:\u002F\u002Fwww.dfs.ny.gov\u002Findustry-guidance\u002Findustry-letters\u002Fil20250930-updated-guidance-custodial-structures) on September 30, 2025. It expects custodians to segregate customer assets on-chain and in internal ledgers, keep an audit trail for omnibus wallets, and make sure the beneficial interest always remains with the customer. That is a useful benchmark even outside New York. Regulatory treatment of custody varies by jurisdiction, so treat it as a reference, not a rule that applies to every provider.\n\n## How does BlindPay answer these checks?\n\nBlindPay operates as a non-custodial payment processor for payout flows from customer-controlled wallets: you authorize the exact amount and BlindPay executes that single transaction. On EVM chains that authorization is an ERC-20 `approve` for the quoted amount, returned in the [payout quote](\u002Fdocs\u002Fpayout-quotes). Stellar uses a signed transaction and Solana uses token delegation ([payouts](\u002Fdocs\u002Fpayouts)).\n\nIf a payout cannot be delivered after the stablecoins are collected, BlindPay refunds them to the quote's refund wallet, or to the sending wallet when none is set. On Pix and other non-USD local rails the refund is automatic, while USD payouts and payouts whose review times out are refunded after an operator review.\n\nOptional BlindPay-managed wallets (beta) are custodial when you choose that path ([managed wallets](\u002Fdocs\u002Fwallets)). That is the exception list for check 8, in writing. Development instances let you force a `refunded` outcome with a sentinel amount, so you can run check 6 before you sign anything.\n\n## What should you do next?\n\nPut the eight checks in your vendor file and ask every shortlisted provider for the evidence in the table. Pair it with the [30 due diligence questions](\u002Fresources\u002Fmore\u002Fstablecoin-payments-provider-due-diligence) and the [custody risk questions for off-ramps](\u002Fresources\u002Fmore\u002Fcustodial-vs-non-custodial-off-ramps). If blockchain rails are new to your team, [blockchain payments vs crypto payments](\u002Fresources\u002Fmore\u002Fblockchain-payments-vs-crypto-payments) explains the basics first.\n\nRun check 6 yourself on a BlindPay development instance by following the [payout quickstart](\u002Fdocs\u002Fquickstart-payout).\n",{"title":5,"description":429},"How to verify a provider is really non-custodial","resources\u002Fmore\u002Fhow-to-verify-non-custodial-payment-provider","uAeOhTwZH0teiNwtdp95rl_via1NvUzLSE5ncUCVK7E",[458,462,466,470,474,478,482,486,490,494,498,502,506,510,514,518,522,526,527,531,535,539,543,547,551,555,559,563,567,571,575,579,583,587,591,595,599,603,607,611,614,618,622,626,630,634,638],{"path":459,"title":460,"description":461},"\u002Fresources\u002Fmore\u002Faml-audit-readiness-risk-monitoring","AML audit readiness: what regulators ask for and how to prove your risk monitoring works","The evidence examiners expect from automated risk monitoring: a 10-item evidence table, good vs poor practice, SAR timelines, RFIs, and a 30-day plan.",{"path":463,"title":464,"description":465},"\u002Fresources\u002Fmore\u002Fare-blockchain-payments-legal","Are blockchain payments legal? Rules in the US, EU, UK, Brazil, and Mexico","Blockchain payments are legal for businesses in the US, EU, UK, Brazil, and Mexico, under different rules. What each country regulates, as of October 2026.",{"path":467,"title":468,"description":469},"\u002Fresources\u002Fmore\u002Fare-stablecoin-card-purchases-taxable","Are stablecoin card purchases taxable? A country-by-country overview of disposals, gains, and records","Why a stablecoin card purchase can be a taxable disposal, how the US, UK, Germany, Spain, the Netherlands, and Brazil differ, and which records to keep.",{"path":471,"title":472,"description":473},"\u002Fresources\u002Fmore\u002Fare-stablecoin-payments-reversible","Are stablecoin payments reversible? Finality, custody, and fraud explained","Stablecoin transfers settle final in minutes and cannot be reversed. That finality proves custody at every step, but it also opens a fraud gap on the fiat side of the payment.",{"path":475,"title":476,"description":477},"\u002Fresources\u002Fmore\u002Fautomated-kyc-kyb-vs-manual-onboarding","Automated KYC\u002FKYB vs. manual onboarding: what actually changes","A side-by-side comparison of automated and manual KYC\u002FKYB for fintechs: onboarding time, false-positive rates, cost per verification, scaling across jurisdictions, and audit-trail quality, plus the cases where a human reviewer is still required.",{"path":479,"title":480,"description":481},"\u002Fresources\u002Fmore\u002Fbrazil-self-custody-wallet-declaration","Brazil's self-custody wallet rule: COAF reporting for transfers of US$10,000 or more","Since October 1, 2026, Brazil requires reports to COAF on transfers of US$10,000+ to or from self-custodied wallets. What counts, who reports, what to do.",{"path":483,"title":484,"description":485},"\u002Fresources\u002Fmore\u002Fbuild-vs-buy-automated-risk-monitoring","Build vs. buy automated risk monitoring: a decision framework and 15 provider questions","Build, buy point solutions, or use an integrated provider? Compare three ways to run automated risk monitoring, who stays responsible, and 15 questions.",{"path":487,"title":488,"description":489},"\u002Fresources\u002Fmore\u002Fcompliance-agents-cross-border-stablecoin-payments","Compliance agents for cross-border stablecoin payments: a global regulatory guide","How compliance agents apply FinCEN, MiCA, FCA, MAS, and Banco Central do Brasil rules to cross-border stablecoin payments: jurisdiction table, the FATF Travel Rule, multi-list sanctions screening, the four components of a compliant program, and questions to ask a compliance provider.",{"path":491,"title":492,"description":493},"\u002Fresources\u002Fmore\u002Fcross-border-stablecoin-card-compliance-by-country","Compliance for cross-border stablecoin card programs: a country readiness template","A country readiness template for stablecoin card programs: onboarding rules, funding rails, and payout rails for the US, LatAm, and the EU.",{"path":495,"title":496,"description":497},"\u002Fresources\u002Fmore\u002Fcrypto-wallet-compliance-checklist","Crypto wallet compliance checklist: KYC, KYT, and Travel Rule","The compliance that comes with crypto wallets and stablecoin payments: KYC and KYB, KYT, the Travel Rule, address screening, MSB rules, and 15 checks.",{"path":499,"title":500,"description":501},"\u002Fresources\u002Fmore\u002Fdirect-vs-indirect-stablecoin-exchange","Direct vs indirect stablecoin exchange: who holds the stablecoin, and who carries compliance","In direct exchange, both parties hold stablecoins and own compliance. In indirect exchange, a provider settles in stablecoins behind a normal bank payment.",{"path":503,"title":504,"description":505},"\u002Fresources\u002Fmore\u002Fdo-merchants-need-a-license-to-accept-stablecoins","Do merchants need a license to accept stablecoin payments? KYC, KYB, and compliance explained","Usually no: the license sits with the provider that moves the funds. What merchants still owe on KYB, sanctions, tax, and records in the US, EU, Brazil.",{"path":507,"title":508,"description":509},"\u002Fresources\u002Fmore\u002Fdo-stablecoin-cards-require-kyc","Do stablecoin cards require KYC? What to expect, what gets checked, and why \"no KYC\" cards fall short","Why stablecoin cards ask for ID even with a permissionless wallet, what KYC and KYB collect, why no-KYC cards fall short, and how to fix a rejection.",{"path":511,"title":512,"description":513},"\u002Fresources\u002Fmore\u002Fgenius-act-timeline-key-dates","GENIUS Act and MiCA timeline: the key dates for stablecoin payment teams","Every GENIUS Act and MiCA date that matters to a stablecoin payment flow, how the US effective date is calculated, and what to finish before each deadline.",{"path":515,"title":516,"description":517},"\u002Fresources\u002Fmore\u002Fhow-to-automate-kyc-kyb-stablecoin-payments","How to automate KYC and KYB for stablecoin payments","A developer guide to automated KYC and KYB for stablecoin payment flows: how verification runs inside a payment API, step-by-step workflows for individuals and businesses, jurisdiction requirements for the US, EU, UK, Singapore, and Brazil, and what to check before settlement.",{"path":519,"title":520,"description":521},"\u002Fresources\u002Fmore\u002Fhow-to-choose-automated-risk-monitoring-vendor","How to choose an automated risk monitoring vendor for a fintech startup","A buyer's guide to automated risk monitoring vendors for early-stage fintechs: the five criteria that matter (regulatory coverage, integration effort, false-positive rate, pricing model, audit output), the question to ask a vendor on each, a checklist table, and what it costs.",{"path":523,"title":524,"description":525},"\u002Fresources\u002Fmore\u002Freduce-false-positives-transaction-monitoring","How to reduce false positives in transaction monitoring without missing real risk","Cut AML alert noise without losing real cases: a 7-step tuning process, the levers that work, the metrics to watch, and what automation should never close.",{"path":451,"title":5,"description":429},{"path":528,"title":529,"description":530},"\u002Fresources\u002Fmore\u002Fhow-wallet-screening-works-stablecoin-payments","How wallet screening works in stablecoin payments: exposure, risk scores, and frozen addresses","How wallet screening works: OFAC-listed addresses, direct and indirect exposure, risk scores, issuer freezes, and what to do when an address is flagged.",{"path":532,"title":533,"description":534},"\u002Fresources\u002Fmore\u002Fkyc-vs-kyb-vs-kyt","KYC vs KYB vs KYT: what each check covers in blockchain payments","KYC verifies people, KYB verifies businesses and their owners, and KYT watches transactions and wallets. What each covers, when it runs, and who owns it.",{"path":536,"title":537,"description":538},"\u002Fresources\u002Fmore\u002Fstablecoin-payment-licenses-msb-mtl-vasp-emi","MSB vs money transmitter license vs VASP vs EMI: which license does a stablecoin payment flow need?","MSB registration, state money transmitter licenses, VASP, EMI, and PSAV compared: who needs each, what triggers it, and when your provider covers you.",{"path":540,"title":541,"description":542},"\u002Fresources\u002Fmore\u002Fmica-stablecoin-rules-explained","MiCA stablecoin rules explained for payment companies","What MiCA means if your business uses stablecoins in the EU: EMTs vs ARTs, issuer requirements, why USDC is compliant and USDT was delisted, and a practical checklist.",{"path":544,"title":545,"description":546},"\u002Fresources\u002Fmore\u002Fongoing-sanctions-screening-how-often-to-rescreen","Ongoing sanctions screening: how often to rescreen and what to screen","How often to rescreen customers against sanctions lists, what to screen beyond names, and a cadence that holds up under OFAC strict liability.",{"path":548,"title":549,"description":550},"\u002Fresources\u002Fmore\u002Fpsav-brazil-explained","PSAV in Brazil: the Central Bank's virtual asset license explained","PSAV is Brazil's authorization for virtual asset service providers, created by BCB Resolutions 519, 520, and 521 under Law 14.478\u002F2022. What it requires and who needs it.",{"path":552,"title":553,"description":554},"\u002Fresources\u002Fmore\u002Freal-time-transaction-monitoring-stablecoin-payments","Real-time transaction monitoring for cross-border stablecoin payments","Why stablecoin cross-border flows need different monitoring than wires: the signals that get scored (wallet address risk, velocity, corridor risk, on\u002Foff-ramp counterparties), real-time vs. batch monitoring, and a worked example of a flagged pattern from alert to decision.",{"path":556,"title":557,"description":558},"\u002Fresources\u002Fmore\u002Fblockchain-payment-provider-red-flags","Red flags when choosing a blockchain payments provider: 10 warning signs and what to ask","Ten warning signs to catch before you sign with a blockchain payments provider, how each shows up in a sales call or sandbox, and the question to ask.",{"path":560,"title":561,"description":562},"\u002Fresources\u002Fmore\u002Fstablecoin-card-and-payout-compliance-map","Stablecoin card and payout compliance map: who owns KYC, KYB, sanctions, and the Travel Rule","A compliance map for programs that run stablecoin cards and payouts together: KYC, KYB, monitoring, sanctions, Travel Rule, and records, split by owner.",{"path":564,"title":565,"description":566},"\u002Fresources\u002Fmore\u002Fstablecoin-card-issuing-compliance","Stablecoin card issuing compliance: KYC, KYB, and regulatory coverage explained","What compliance stablecoin card issuing requires: KYC vs. KYB, who is responsible for what, how rules differ in the US, EU, UK, and Latin America, and ongoing monitoring.",{"path":568,"title":569,"description":570},"\u002Fresources\u002Fmore\u002Fstablecoin-cards-europe-mica","Stablecoin cards in Europe: MiCA, euro stablecoins, and what licensing means for cardholders and card programs","How MiCA applies to stablecoin cards in Europe: who needs authorization, how to check a provider on the ESMA register, euro vs dollar stablecoins, SEPA.",{"path":572,"title":573,"description":574},"\u002Fresources\u002Fmore\u002Fstablecoin-cards-united-states-regulation","Stablecoin cards in the United States: the GENIUS Act, sponsor banks, and Visa USDC settlement","How US stablecoin cards are structured and regulated: sponsor bank, program manager, processor, the GENIUS Act, Visa USDC settlement, FDIC coverage, tax.",{"path":576,"title":577,"description":578},"\u002Fresources\u002Fmore\u002Fstablecoin-off-ramp-limits","Stablecoin off-ramp limits: per-transaction, daily, and monthly caps explained","Why off-ramps cap how much you can convert per transaction, day, and month, how the caps map to KYC and KYB tiers, and the documents that raise them.",{"path":580,"title":581,"description":582},"\u002Fresources\u002Fmore\u002Fstablecoin-regulation-tracker-2026","Stablecoin regulation in 2026: MiCA, the GENIUS Act, Brazil, and Japan","Where stablecoin regulation stands in 2026: MiCA in the EU, the GENIUS Act in the US, Brazil's VASP regime, and Japan's issuer rules, compared for payment businesses.",{"path":584,"title":585,"description":586},"\u002Fresources\u002Fmore\u002Fstablecoin-regulation-uk-singapore-hong-kong","Stablecoin regulation in the UK, Singapore, and Hong Kong: where each regime stands in 2026","UK rules start 25 October 2027, Singapore is consulting on its stablecoin law, and Hong Kong licensed its first issuers in April 2026.",{"path":588,"title":589,"description":590},"\u002Fresources\u002Fmore\u002Fgenius-act-for-businesses","The GENIUS Act explained for businesses that use stablecoins","What the GENIUS Act means if your business sends, receives, or holds stablecoins: who it regulates, the dates that matter, and what to do before 2027.",{"path":592,"title":593,"description":594},"\u002Fresources\u002Fmore\u002Ftravel-rule-workflow-hold-return-reject","The Travel Rule in an automated workflow: what to collect, when to hold, when to return","How to automate Travel Rule compliance for stablecoin transfers: what data to collect, the checks before release, and when to hold, reject, or return.",{"path":596,"title":597,"description":598},"\u002Fresources\u002Fmore\u002Ftransaction-monitoring-red-flags-stablecoin-payments","Transaction monitoring red flags for stablecoin payments: 12 rules to automate","The 12 red flags automated transaction monitoring should catch in stablecoin and cross-border payments, with rule logic, actions, and the data each needs.",{"path":600,"title":601,"description":602},"\u002Fresources\u002Fmore\u002Fverification-of-payee-instant-payments","Verification of payee in instant payments: how rails check the recipient before money moves","How EU Verification of Payee, UK Confirmation of Payee, Pix, SPEI, and US payee name checks confirm the recipient before an instant payment becomes final.",{"path":604,"title":605,"description":606},"\u002Fresources\u002Fmore\u002Fvirtual-account-requirements-kyc-kyb","Virtual account requirements: KYC, KYB, and what the bank reviews before it says yes","What you need to open a virtual account: KYC or KYB, the extra fields and source of funds documents the bank reviews, who owns each step, and timelines.",{"path":608,"title":609,"description":610},"\u002Fresources\u002Fmore\u002Fwhat-are-compliance-agents-in-fintech","What are compliance agents in fintech? How they work and what they do for payments","Compliance agents are autonomous software components that run KYC, KYB, sanctions screening, and transaction monitoring inside a payment flow, then document every decision. How they work, what they do for payments, how they differ from traditional compliance software, and how BlindPay embeds them in its API.",{"path":118,"title":612,"description":613},"What happens to your money if a stablecoin payment provider fails?","Issuer, provider, or bank: who fails decides what you get back. What the GENIUS Act and state law protect, where money sits mid-payment, and a runbook.",{"path":615,"title":616,"description":617},"\u002Fresources\u002Fmore\u002Fwhat-is-kyb","What is KYB? Know Your Business verification explained","KYB verifies a company's legal existence, ownership, and control before it can transact. What it checks, who counts as a beneficial owner, and how it differs from KYC.",{"path":619,"title":620,"description":621},"\u002Fresources\u002Fmore\u002Fwhat-is-a-vasp","What is a VASP? Virtual asset service provider explained","A VASP is any business that exchanges, transfers, or custodies virtual assets like stablecoins for customers. FATF's definition and what it requires in practice.",{"path":623,"title":624,"description":625},"\u002Fresources\u002Fmore\u002Fwhat-is-automated-risk-monitoring-fintech","What is automated risk monitoring in fintech?","A reference explainer on automated risk monitoring for fintechs: the four components (KYC\u002FKYB, transaction monitoring, sanctions and watchlist screening, compliance automation), what each one flags, a manual vs. automated comparison, and what FinCEN, FATF, and OFAC actually require.",{"path":627,"title":628,"description":629},"\u002Fresources\u002Fmore\u002Ftravel-rule-stablecoin-off-ramps","What is the travel rule for stablecoin off-ramps? Thresholds, data, and failed checks","The travel rule makes off-ramps pass sender and receiver data with transfers. Thresholds by country, required data, and what happens when checks fail.",{"path":631,"title":632,"description":633},"\u002Fresources\u002Fmore\u002Fgenius-act-usdt-foreign-stablecoin-issuers","What the GENIUS Act means for USDT and other foreign-issued stablecoins","Can USDT stay available in the US under the GENIUS Act? The foreign issuer path, the 2027 and 2028 deadlines, and what payment companies should ask now.",{"path":635,"title":636,"description":637},"\u002Fresources\u002Fmore\u002Fcrypto-on-ramp-compliance-who-owns-what","Who owns compliance when you integrate a crypto on-ramp API? KYC, KYB, KYT, and holds","An on-ramp API splits compliance between the provider and you. Who runs KYC, KYB, KYT, sanctions, and the travel rule, and what stays on your side.",{"path":639,"title":640,"description":641},"\u002Fresources\u002Fmore\u002Fsource-of-funds-crypto-off-ramps","Why do crypto off-ramps ask for source of funds? Documents, triggers, and on-chain proof","Why off-ramps ask where your stablecoins came from, how source of funds differs from source of wealth, what triggers a request, and which documents pass.",1792461843044]