Non-custodial crypto payment is a payment flow where customer funds settle directly into a wallet the merchant controls, with no intermediate balance held by the payment processor.
This is the structural opposite of a custodial gateway. In a custodial flow — the default for most major crypto payment processors — the customer pays into the processor's wallet, the processor records a credit to the merchant's internal balance, and the merchant later withdraws to their own wallet. Two on-chain transactions, one trust relationship: the merchant relies on the processor to stay solvent and operational until the withdrawal clears.
In a non-custodial flow, there is one on-chain transaction. It lands directly in the merchant's wallet, keyed by the merchant alone. The processor's role ends at routing (deciding which coin and chain to accept), conversion (e.g. converting the incoming asset into a stablecoin at the moment of receipt), and accounting. Funds already paid are already in the merchant's possession — independent of what happens to the processor afterward.
Why it matters
- Counterparty risk. Custodial processors carry the risk that the operator becomes insolvent, suspends withdrawals, or freezes accounts. Non-custodial flows eliminate this category by design — the processor never controls the funds, so it cannot fail to release them.
- Regulatory surface. A processor that never holds customer funds typically falls outside money-transmitter, VASP, and e-money licensing regimes in most jurisdictions. Custodial processors usually require those authorizations to operate legally, which translates into higher fees and tighter onboarding.
- Settlement speed. Custodial path: pay → processor balance → manual or scheduled withdrawal → on-chain settlement, often hours to days. Non-custodial path: pay → on-chain settlement, in the same confirmation window as the original payment — typically seconds to minutes for stablecoin transfers, and ~10 minutes for a Bitcoin block confirmation.
- Refund mechanics. Custodial processors can issue refunds from their float. Non-custodial flows require the merchant to authorize a refund payout from their own wallet, usually via the processor's payout API.
How MixPay implements it
MixPay's non-custodial mode settles every payment directly into the merchant's Mixin Wallet — a decentralized wallet on the Mixin Network where the merchant alone holds the private key. MixPay does not hold a balance for non-custodial accounts; the merchant dashboard renders transaction history from chain rather than from an internal ledger.
Custody type is fixed per account. Merchants that need both models — for example, a platform that wants its own take-rate held in a managed balance while sub-merchant payouts go non-custodial — provision two separate MixPay accounts. The API surface is identical for both, so the operational cost of running two accounts is mostly the reconciliation work, not the integration work.
Common misconceptions
- Non-custodial does not mean decentralized. Non-custodial describes who holds the funds, not how the surrounding infrastructure is governed. A non-custodial processor is still a centralized company with APIs, account onboarding, and (usually) KYC.
- Non-custodial is not categorically safer. Counterparty risk is reduced, but key-management risk is transferred to the merchant. Lose access to the wallet and there is no support team to recover the funds.
- Non-custodial does not mean anonymous. Non-custodial flows can be fully KYC'd at signup, and the on-chain transactions remain publicly traceable on the underlying blockchain.
Related terms
self-custody, custodial gateway, money services business, Mixin Wallet, stablecoin settlement — additional entries will be added as the glossary grows.