Custodial vs non-custodial crypto payments: the short answer
Whoever holds the private keys controls the coins. That is the whole difference between custodial and non-custodial crypto payments. With a custodial crypto payment gateway, the provider creates and holds the keys to the addresses your customers pay into, and keeps a record of what belongs to you until you withdraw it. With a non-custodial crypto payment processor, payments land in addresses that only you can spend from. The processor watches the blockchain and tells you what arrived, but it can't move the money.
Neither model is right for every business. Custodial is usually easier to run, especially with many coins. Non-custodial removes the provider as a party you have to trust, and hands you the operational work instead. Crypto Merchant is custodial, so this article is upfront about what that means, where the risks sit, and how we handle them.
How a custodial crypto payment gateway works
In a custodial setup, the gateway generates the deposit addresses, holds their keys and moves coins on your instructions. The balance in your dashboard is the provider's ledger of the coins it holds for your business. Crypto Merchant works like this:
- Every invoice gets its own deposit address, so each payment is matched to its invoice without memos or tags.
- Once a payment is confirmed on-chain, it is swept into a pool wallet dedicated to your business, either automatically or when you start a sweep.
- A ledger records exactly which coins belong to your business.
- When you want the money, you pay out to your own wallet, either coin by coin or after swapping everything into one holding coin.
You never handle a private key. In return, you rely on the provider to keep the keys safe and to send your payouts when you ask. The details are in Wallets, sweeps & gas.
How a non-custodial crypto payment processor works
Non-custodial processors keep the spending keys out of their own hands. There are a few common designs:
- Addresses from your extended public key. You give the processor a key that can create receiving addresses but can't spend from them, so each order gets a new address in your own wallet.
- One address per merchant. Every payment goes to a single address you control, and the processor tells payments apart by amount, memo or timing.
- Self-hosted payment software. You run the processor on your own server, connected to your own wallet. Open-source projects such as BTCPay Server work this way.
- Smart-contract forwarding. On some networks, a contract receives the payment and passes it on to your address.
In each case the processor can see payments and update your orders, but the coins sit in a wallet whose recovery phrase belongs to you, and only you.
The trade-offs: sweeps, gas, payouts, swaps and recovery
The question of who holds the keys sounds abstract until you look at the daily work. This is where the two models differ in practice.
Sweeps: collecting payments from many addresses
A fresh address for each payment is the cleanest way to match payments to orders, but it leaves your money spread across many addresses, and someone has to bring it together. A custodial gateway does that for you. On Crypto Merchant, confirmed payments are swept into your pool wallet automatically or when you choose, and you pay only the network fee, with no sweep fee on top. In a non-custodial setup, consolidating is your job. For Bitcoin-style coins, a good wallet copes with many addresses. For tokens on account-based networks, it takes more effort.
Gas for token payments
Moving a token such as USDT costs a fee in the network's own coin: moving USDT on Tron needs TRX, for example. A fresh deposit address that received USDT holds no TRX, so the fee has to come from somewhere before the USDT can move. A custodial gateway handles this centrally. On Crypto Merchant, your one-time go-live payment of $25 is credited in full to a gas balance that pays these fees for sweeps and swaps. Without a custodian, you keep the network coin on hand and fund transfers yourself, on every network you accept. Crypto network fees explained goes deeper.
Payouts
Here non-custodial wins: there is no payout step, because the money is already in your wallet. With a custodial gateway you ask for a payout and it is sent on-chain to an address you saved. On Crypto Merchant you can pay out at any time, with no minimum, and only Admins on your team can do it. See Payouts & swaps.
Swaps into one holding coin
If you accept several coins but want to hold one, such as a stablecoin, a custodial gateway can do the swap for you. Crypto Merchant can swap everything you receive into one holding coin, automatically every 24 hours or when you pay out. Swap rates include a service margin, and the network fees come from your gas balance. Without a custodian, you would move each coin to an exchange and swap it there yourself.
Recovery
With non-custodial payments, your recovery phrase is the only backup. With a custodial gateway, recovery is the provider's job, so ask how they handle it. Crypto Merchant's answer is further down.
| Custodial gateway | Non-custodial processor | |
|---|---|---|
| Who holds the keys | The provider | You |
| Sweeping many addresses | Done for you | Your wallet, your work |
| Gas for token transfers | Paid centrally (a gas balance on Crypto Merchant) | You keep the network coin on every network |
| Getting paid | Request a payout | Already in your wallet |
| Swapping coins | Built in, rate includes a margin | On an exchange, by yourself |
| Backups | The provider's recovery process | Your own recovery phrase |
| Where the main risk sits | With the provider | With you and your devices |
The risks of each model
Both models carry real risk. The difference is where it sits.
Custodial risks
- Counterparty risk. Your coins are only as safe as the provider's security and its business. A breach, a failure or a shutdown can affect your balance.
- Holds and delays. A custodian can pause payouts. Crypto Merchant's Terms allow a payout to be delayed for security checks or network congestion, and payments to be held on an account that breaks the Terms or the law.
- No deposit protection. A custodial balance is not a bank account. On Crypto Merchant, balances don't earn interest and aren't covered by any deposit insurance or government protection scheme.
Non-custodial risks
- Key loss. If the recovery phrase is lost or destroyed, the coins are gone for good.
- Key theft. Malware, phishing and backups left in cloud storage are common ways recovery phrases get stolen.
- Operational mistakes. Running out of gas on one network, sending from the wrong wallet or misconfiguring a self-hosted server all cost time or money.
One risk is shared: if the server that shows customers the payment address is compromised, an attacker could swap in their own address. That is true whether you or a provider runs the checkout.
How Crypto Merchant handles custody and security
Crypto Merchant is custodial. We hold the keys to your pool wallet and to the deposit addresses used for your invoices, and we move coins on your instructions. You don't receive those private keys. Here is how that is set up; the full description is in Security & recovery.
One master recovery phrase, kept offline
Every wallet is derived from one master recovery phrase using the open BIP-39 and BIP-44 standards. The operator keeps the phrase written on paper, offline. On the server, it is stored only in encrypted form. Each business has its own account number under that phrase, so its addresses are separate from every other business. Because every address follows a standard derivation path, all addresses and their keys can be rebuilt on new hardware, even if every server is lost.
A fresh deposit address per invoice
Every invoice gets its own deposit address. Addresses are reused only after a cool-down period, and an address with a reported or unconfirmed payment is never handed out again.
Team roles and two-step sign-in
Team roles limit who can move money. Admins can do everything, Managers can do everything except moving money out and managing the team, and Staff can only view. Only Admins can add payout addresses or make payouts. Sign-in can require a code sent by email or a code from an authenticator app, and passwords and API keys are stored only as hashes.
How to keep custodial risk small
Because you can pay out at any time with no minimum, you decide how much sits with a custodial provider. A practical routine looks like this:
- 1
Save and double-check payout addresses
Check every character and the network. Coins sent to a wrong address or on the wrong network can't be recovered.
- 2
Pay out on a schedule
Daily, weekly, or whenever your balance passes an amount you are comfortable leaving with a third party.
- 3
Choose per coin or one holding coin
Per coin keeps exactly what customers paid. One holding coin, such as a stablecoin, keeps your books simple.
- 4
Lock down the account
Turn on authenticator-app sign-in, give each person the lowest role they need, and keep API keys and webhook secrets on your server.
- 5
Reconcile regularly
Compare the sales statements under Reports with your payouts and your own order records.
When each model fits
Most businesses can decide by looking at who will run payments day to day and which coins they want to accept.
| Your situation | Better fit | Why |
|---|---|---|
| Small team, no crypto specialist | Custodial | Sweeps, gas and recovery are handled for you. |
| You accept tokens such as USDT on several networks | Custodial | No need to keep gas coins on every network. |
| You want one holding coin without using an exchange | Custodial | Swaps are built in. |
| Your policy says only you may control the keys | Non-custodial | No third party ever holds your coins. |
| Mostly Bitcoin, with the skills to run your own server | Non-custodial | Self-hosted software and your own wallet can work well. |
| You want convenience with little exposure | Custodial, with frequent payouts | Your balance with the provider stays small. |
Many merchants land in the last row: they let a gateway handle the blockchain work and pay out often to a wallet they control. If you are still choosing a provider, the crypto payment gateway comparison lines up the options, and our pricing is one rate: 1% per paid invoice, with free setup. When you're ready, you can create an account.