Custodial vs non-custodial crypto payment gateways
A custodial crypto payment gateway receives customer funds into wallets the platform controls, credits the merchant an internal balance, and pays out later. A non-custodial gateway routes each payment to an address the merchant controls, so the platform never holds the funds at any point. Every gateway on the market is one of these two things, whatever its marketing says, and the difference decides who can freeze, lose, convert, or delay your revenue.
How a custodial gateway processes a payment
The platform generates a deposit address it controls and shows it to your customer. The customer pays, the platform detects the payment, and your merchant account is credited on an internal ledger, the way a bank credits an account. The actual coins sit in the platform's wallets, often pooled with other merchants' funds in what terms of service call an omnibus wallet. Reaching your money is a second step: a withdrawal you trigger, or a settlement the platform runs on a schedule, usually with a network fee and sometimes with a service fee. Between the payment and the payout, your revenue exists as the platform's promise to pay you.
That promise is usually kept, and naming the model is no accusation of theft. The model simply grants the platform powers a merchant should know about before signing: it can hold a balance pending document checks, convert assets when regulation demands it, charge fees on inactivity, and fail with your float on its books. Every one of those has happened at real gateways, lawfully, under terms the merchants had accepted.
How a non-custodial gateway processes a payment
The merchant connects wallet material at signup: an extended public key, an account address, or a view key, depending on the chain. The gateway derives a payment address from that material for each invoice, which means the customer pays the merchant directly, at an address the platform could not spend from if it wanted to. The platform's work is observation: watch the chain, match the incoming transaction to the right invoice, and tell the merchant's store when it confirms. There is no balance and no payout, because the money never made a stop between the customer and the merchant.
The mechanisms vary by chain family. Bitcoin-family chains derive a fresh address per payment from the merchant's extended public key. Account chains like Ethereum or Solana need a unique address per payment, so gateways deploy small per-payment forwarding contracts whose destination is fixed to the merchant's own wallet at creation. Chains with payment references, like XRP or Stellar, use the merchant's own account plus a per-invoice tag or memo. Monero is watched through a view key that can see incoming payments but never spend them. Different plumbing, same property: the platform can observe, and only observe.
What custody changes in practice
| Event | Custodial gateway | Non-custodial gateway |
|---|---|---|
| Platform freezes your account | Your balance waits with it | Past revenue is already in your wallet |
| Platform becomes insolvent | You are a creditor for the balance | Nothing of yours is on its books |
| Regulation forces an asset change | Balances can be converted platform-wide | Your wallet is outside the platform's reach |
| You want your money | Withdraw or wait for settlement | You already have it |
| You lose your own keys | The platform still has the funds | Your responsibility, like any wallet |
The last row is the honest cost of the non-custodial model. A platform that cannot touch your funds also cannot recover them for you if you lose your own keys. Merchants who choose self-custody take on wallet hygiene: hardware wallets, backups, and, where the gateway offers one, a recovery kit that re-derives payment addresses independently of the platform.
When each model is the right choice
Custodial gateways earn their place when the merchant wants services that require holding funds: settlement in euros or dollars to a bank account, instant conversion so crypto volatility never touches the books, refunds pushed from a balance, and a regulated counterparty the finance team can put in a vendor file. A business that does not want to operate wallets at all is describing a custodial product, and should pick a licensed one.
Non-custodial gateways fit merchants who want crypto revenue in crypto, under their own keys, from the moment it confirms. The model removes the platform's freeze, insolvency, and conversion surface entirely, usually skips platform identity checks because the platform holds nothing that regulation attaches to, and settles at the speed of the chain instead of a payout schedule. The trade is responsibility: your keys, your backups, your refunds sent by hand.
Common questions
- Is a non-custodial gateway safer than a custodial one?
- It removes a specific set of risks: platform freezes, platform insolvency, forced conversions, and payout delays cannot touch funds the platform never holds. It adds a different risk: your own key management. Which trade is safer depends on whether you trust your wallet hygiene more than a platform's balance sheet.
- Why do custodial gateways require identity verification?
- Holding other people's funds is the activity that pulls a platform into money-transmission and similar regulatory categories in most jurisdictions, and those categories carry customer identification duties. A platform that never takes possession of customer funds is outside the trigger in many regimes, which is why non-custodial gateways can often onboard with an email and a wallet.
- Can a gateway be partly custodial?
- Yes, and many are. Common hybrids include a non-custodial default flow with an optional held balance, or direct settlement on some chains and balance settlement on others. The reliable test is per-flow: for the specific way your payments arrive, ask who controls the receiving address and whether a withdrawal step exists.
- Does non-custodial mean the gateway never touches the transaction?
- It never holds the funds, but it may still broadcast transactions on your behalf, such as sweeping a per-payment forwarding contract into your wallet or relaying a gasless stablecoin payment a customer signed. In a well-designed system those broadcasts cannot redirect funds anywhere except the destination fixed in advance.
Where this site stands: NoHoldPay is a non-custodial gateway, and the product page documents its settlement mechanics per chain. For the checklist version of this article, see how to tell if a gateway is actually non-custodial.