Custodial vs Self-Custodial Crypto Cards. Who Holds the Keys When You Tap.

TL;DR

Best for: people who want a straight answer to "if this app dies, is my USDC still mine".

Key drawback: self-custody does not skip KYC, and it does not stop the card freezing. It only answers who holds the coins. Custodial cards can freeze the coins and the plastic together.

I get asked this more than I get asked about cashback, which is the right instinct.

A crypto card in your pocket is two products glued together. One is a Visa or Mastercard BIN. The other is a stack of coins that funds it. Custody is about the coins. The BIN is always someone else's.

If you mix those up, you will pick a card for the wrong reason. This is not a ranking. Rank and custody are different columns.

Who holds the keys when the card is in your pocket

Custodial, from cards I have actually used or listed that way: RedotPay, Bybit, Kast. Also Krak on this site: custodial, Kraken, IBAN salary on the UK/EEA product. The spendable balance is on their ledger. You have an account. They have the keys.

Tap. They debit you. They settle fiat. It feels like a neobank because it is one.

Self-custodial / non-custodial: Coca, EtherFi, Gnosis, Oobit. Bitget Wallet's card sat in the non-custodial bucket in my ZA test as well. Wirex called itself self-custodial. The coins are supposed to stay under keys you control until the card needs them.

Oobit is the purest version I spent. Web3 bridge. Funds stay in your wallet until the split second the transaction is authorised. Then they take their cut. In my test that cut was ugly on a small ticket ($1.74, 17.5% effective because of the $0.25 minimum). Fee problem, not a custody problem. Fastest KYC of that group, about 7 minutes.

EtherFi and Coca felt like normal cards. Both non-custodial. Both about 8 minutes to set up. Both produced a Lays receipt. Self-custody did not make the supermarket any wiser. It changed where the USDC sat at 10pm when I was not tapping.

Gnosis: self-custodial, 0% reported FX, 5% cashback, MiCA/PSD2, Europe. I have not live-spent Gnosis in the ZA test. Reported, not receipt. Gnosis review (https://cardifycrypto.com/review/Gnosis-card-review).

If the issuer dies, what happens to the balance

Custodial. The spendable money is with them. If they freeze you, you are waiting on support. If they go insolvent, you are in line with every other customer. I will not invent recovery percentages. [VERIFY] the actual wind-down rules for a specific licence. Practical point: your groceries-money and your "that was supposed to be my USDC" are the same pile, and it is on their books.

RedotPay is the example I keep using because it is the most used card in ZA in my test post, it is custodial, and the card itself cost $10. High limits. 0% cashback. 2.53% spread on the packet of chips. You are paying for a ledger they operate. RedotPay review (https://cardifycrypto.com/review/redotpay).

Bybit: custodial, gated for South Africans, 1.5237 USDC deducted, 2% in points. If they decide the card is not for your country, the custody question is not theoretical. Bybit review (https://cardifycrypto.com/review/bybit).

Kast: custodial, $1.60 on a $1.48 purchase, 1.5% cashback locked 14 days. The lock is a reminder that even the rebate is on their campus. Kast review (https://cardifycrypto.com/review/kast).

Self-custodial. If they die, the plastic dies. The coins, if they were actually in your wallet, should still be in your wallet. You cannot tap. You can still move the USDC. That is the whole argument for putting up with a slightly worse UX.

I have not watched Coca or EtherFi get liquidated, so I am not writing a cinematic insolvency scene. The architecture is the claim: non-custodial means the spendable crypto is not supposed to sit in the issuer's hot wallet as a customer liability. Methodology (https://cardifycrypto.com/methodology) weights custody for a reason. Self-custodial settlement scores higher than pooled custody. Operating history still matters.

KYC still exists on both

This is the bit custody-maxis skip.

Coca: email, ID, national ID number, questionnaire. About 8 minutes. Non-custodial. Coca review (https://cardifycrypto.com/review/coca-crypto-card-review).

EtherFi: email, ID, questionnaire, mobile. Tax ID if you want fiat deposits. About 8 minutes. Non-custodial. I keep the review current here (https://cardifycrypto.com/review/etherfi-Crypto-card-review).

Gnosis: ID, liveness, proof of address. 20 minutes. Self-custodial. Europe.

Oobit: ID, national ID, questionnaire, mobile. About 7 minutes. Non-custodial bridge.

RedotPay, Kast, Bybit, Krak: heavier. Proof of address. Tax IDs. The custodial ones are not uniquely guilty of paperwork. Krak is about 20 minutes and sits in the heavy group on my KYC table (https://cardifycrypto.com/kyc-requirements).

The only real KYC exceptions I list are Offgrid (passkey) and KazePay's base tier. Those are a different post. Self-custody did not get you there. A product decision got you there, with freeze risk attached.

Picking EtherFi over RedotPay because you do not want to scan a passport is the wrong fork. You scan either way. You pick EtherFi if you want the coins off their balance sheet.

Convenience vs freeze and insolvency risk

Custodial is easier. Someone else runs the ledger. RedotPay's pitch in ZA is high limits and a card people already have. I paid 2.53% and $10 for that, and I did not have to think about a bridge.

Self-custodial is "not your keys, not your coins" applied to a debit card. You still need the issuer alive to tap. You do not need them alive to keep the USDC. That is a real distinction. It is also not a personality.

Fee and custody are not correlated the way Twitter wants. EtherFi: non-custodial, 0.51% spread, 3% instant, net about $1.45 on a $1.48 packet. Coca: non-custodial, 1.18%, 1% USDC on the 10th. Oobit: non-custodial, 17.5% effective on that small ticket. Kast: custodial, 7.93% on the same ticket. The worst fee in my grocery test was a self-custodial bridge. The best net was also non-custodial. Custody did not save Oobit from a $0.25 minimum. ZA test (https://cardifycrypto.com/blog/10-dollar-crypto-card-test-south-africa).

If you want the live ranking, it is on best crypto card (https://cardifycrypto.com/best-crypto-card). This page exists so you do not treat "non-custodial" as a synonym for "cheapest" or "no KYC".

Do not store more on a custodial card than you are willing to have frozen over a weekend. Do not assume self-custody means the tap always works. Two risks. Two different repairs. And if a homepage says non-custodial but the USDC sits in their hosting wallet for three days, that is custody with extra copy. Watch the balance location, not the adjective.

Who holds my crypto when I use a crypto card?

If the card is custodial (RedotPay, Bybit, Kast, Krak on this site), they do. You have an IOU and a PAN. If it is self-custodial or non-custodial (Coca, EtherFi, Gnosis, Oobit), the coins are supposed to stay in keys you control until authorisation. The merchant still gets fiat either way. The till does not know.

What happens to my balance if a crypto card issuer shuts down?

On a custodial card, the spendable balance is in their estate or their freeze queue. I will not fake a recovery rate. On a self-custodial card, the plastic should die and the coins should still be yours to move. You still cannot tap at OK supermarket with a seed phrase. That is the trade.

Does a self-custodial crypto card skip KYC?

No. Coca, EtherFi, Gnosis and Oobit all asked me for ID, or they sit on my KYC table with ID plus liveness. Self-custody is about keys. KYC is about the BIN. The no-KYC outliers are Offgrid and KazePay's base tier, and those come with freeze risk, not with a magic exemption from Visa's world.

Is a non-custodial crypto card safer?

Safer against issuer insolvency, if the architecture is real. Not safer against a frozen BIN, a bad spread, or a $0.25 minimum. Oobit is non-custodial and was the most expensive tap in my grocery test. EtherFi is non-custodial and beat mid-market after cashback. Read the custody line and the FX line as two different columns.

Custodial vs self-custodial: which should I get?

If you want salary in, high limits, and you accept counterparty risk, custodial is how those products are built. If you want the USDC off their balance sheet, pick a non-custodial card I have actually spent, Coca or EtherFi, and pay whatever spread is on that receipt. I would not pick self-custody just to dodge KYC. It will not.