Custodial vs Non-Custodial Crypto Payments

When a merchant accepts crypto payments, someone has to hold the funds between the customer paying and the merchant receiving. Who holds those funds — and for how long — is the single most important architectural decision in payment processing.

Custodial: Someone Else Holds Your Money

In a custodial model, the payment processor collects customer payments into their own wallets. Funds sit on the processor's infrastructure until they settle to the merchant — sometimes hours, sometimes days later. The processor controls the private keys.

This creates a massive attack surface. When hackers breach a custodial processor, they drain every merchant's funds at once. It's not a theoretical risk — it's happened repeatedly.

The Cost of Custodial Risk

That's over $1.8 billion in combined losses from custodial processors in just two years. In every case, the processors held merchant funds on their own servers, and hackers exploited that concentration of assets.

Non-Custodial: You Hold Your Money

In a non-custodial model, payments flow directly from the customer's wallet to the merchant's wallet on-chain. The processor facilitates the transaction but never touches the funds. There is no pool of merchant money sitting on anyone's servers.

If a non-custodial processor's infrastructure is compromised, merchant funds are unaffected — because they were never there. The processor has nothing to steal.

Beyond Security: Settlement Speed

Custodial processors batch-settle to merchants, typically next-day or within 48 hours. Non-custodial processors settle instantly — funds arrive in the merchant's wallet the moment the blockchain confirms the transaction, typically in 2-15 seconds.

This difference matters for cash flow. With custodial processing, your revenue sits in someone else's wallet overnight. With non-custodial, it's yours immediately.

The Trade-Off

Custodial processors argue their model offers convenience — fiat off-ramps, consolidated reporting, and familiar banking-like interfaces. Non-custodial processors require merchants to manage their own wallets.

But the security trade-off is increasingly hard to justify. When a single hack can drain $60 million in merchant funds, the convenience of having someone else hold your money becomes a liability.

PYMSTR is non-custodial by design. Customer payments flow directly to your wallet across 5 blockchain networks. We never hold, store, or have access to merchant funds. There's nothing for hackers to steal — because your funds are in your wallet, not ours.