Non-Custodial Crypto Payment Gateway: How It Works and What It Costs

A shop owner at a workbench full of handmade mugs holds a small, dark hardware wallet in their hand.

A non-custodial crypto payment gateway is software that creates invoices and watches the blockchain for payments, while the customer's coins go straight into a wallet only you control. The gateway never holds your funds or your spending keys. That sets it apart from a custodial processor, which collects payments into its own accounts, takes a percentage, and pays you later. The question that matters is simple: who can move the money once it arrives?

TL;DR:

  • A non-custodial gateway generates payment addresses from your public key, so it can receive money for you but cannot spend it.
  • Custodial processors hold your funds, charge a percentage, and can freeze or delay payouts. Non-custodial gateways remove all three risks.
  • In exchange, you handle volatility, refunds, accounting and key backup yourself. No company does it for you.
  • Regulators such as FinCEN, the FATF and the EU under MiCA treat custody as the key line, and holding customer funds brings licensing duties.
  • Self-hosting gives you the most independence, but a managed host is the sensible choice if you don't want to run a 600 GB+ node yourself.
MYNTLI

Ready to take the next step?

See how Myntli can help with this.

Visit →

Table of Contents

Custodial vs. Non-Custodial: The Only Difference That Really Matters

Every crypto payment tool does roughly the same thing on the surface. It shows the customer an amount and an address, waits for the payment, then tells your shop the order is paid. The real difference sits behind that screen: where the money lands, and who holds the private keys that can spend it.

With a custodial processor, the customer pays an address the processor controls. The processor credits your account balance, takes its cut, and later sends you crypto or local currency. Until that payout, your revenue is an IOU from a company. With a non-custodial gateway, the customer pays an address derived from your wallet. The money is yours the moment the transaction confirms, and no third party can freeze it, delay it, or skim it.

Custodial processor Non-custodial gateway
Who holds the funds The processor You, in your own wallet
Typical fee Commonly 0.5–1% per transaction, plus conversion spreads No percentage; you pay hosting and network fees only
Payout timing On the processor's schedule Immediate, on confirmation
Account freezes Possible, at the processor's discretion Not possible; there is no account to freeze
Automatic fiat conversion Usually built in Not built in; you convert yourself if you want to
Merchant identity checks Usually required by the processor Not required by the software itself
Key backup responsibility The processor You

If you sell online and want bitcoin, the non-custodial model is the one to pick. A middleman's fees and freeze risk only make sense if you need instant conversion to dollars, and even then you can get there more cheaply in other ways.

How a Non-Custodial Crypto Payment Gateway Works, Step by Step

A customer holds up a phone, seen from behind, at a café counter as a barista waits to hand over a coffee.

A non-custodial crypto payment gateway gets by without your private keys because of one feature of modern bitcoin wallets: the extended public key, or xpub. Your wallet derives a whole tree of receiving addresses from a single seed. The xpub lets other software calculate the public half of that tree, meaning every receiving address, without being able to sign a single spend.

An xpub can generate every receiving address you will ever use and cannot spend a single satoshi. That one fact is what makes non-custodial payment processing possible.

Here is what happens during a typical checkout on BTCPay Server, the free, open-source gateway released under the MIT license:

  1. The customer clicks "Pay with Bitcoin." Your shop plugin asks the gateway for an invoice in the order's currency.
  2. The gateway derives a fresh address. It uses your xpub to calculate the next unused address. Each invoice gets its own address, which keeps payments easy to match and protects customer privacy.
  3. The gateway sets the exchange rate. It converts the fiat price into a bitcoin amount and locks that rate for a set window, often 15 minutes.
  4. The customer pays from their wallet. The transaction is broadcast to the bitcoin network.
  5. The gateway's node sees the payment. It marks the invoice as paid, then as confirmed once the transaction reaches the confirmation count you set.
  6. Your shop gets a webhook. The order moves to "processing," and the funds are already in your wallet.

Steps 2 and 5 are why the gateway needs its own bitcoin node. To verify payments without trusting someone else's data, it has to check the blockchain directly. The Bitcoin whitepaper describes this verification model, and running your own node is what puts it into practice.

Lightning payments work a bit differently. A Lightning node issues an invoice under the BOLT specifications and settles payments in seconds. However, a Lightning node holds hot keys to manage its payment channels. That makes it non-custodial in the sense that nobody else holds your money, but your money now sits on an internet-connected server.

What You Give Up When Nobody Holds Your Money for You

Self-custody removes the middleman's fees. It also removes the middleman's services, and you should know exactly which services you are losing before you switch.

  • Price volatility. A custodial processor can convert each sale to dollars on the spot. A non-custodial gateway hands you bitcoin, and its value in your local currency moves after the sale. If your margins are thin, plan when and how you will convert.
  • Refunds are manual. There is no "reverse" button on a blockchain. You refund by sending a new transaction to an address the customer gives you. BTCPay Server has a refund flow that helps with this, but you still sign and send the payment yourself.
  • No chargebacks, in either direction. This works in your favor. A confirmed bitcoin transaction cannot be clawed back by a card network or bank. It also means a customer who overpays, or pays the wrong amount, depends on you to fix it.
  • Key backup is on you. If you lose your seed phrase, the funds are gone. No support ticket can bring them back.
  • Accounting is your job. The gateway records invoices and exchange rates, which helps. Turning that data into tax records is still your responsibility.

Six confirmations is a convention, not a rule. At roughly 10 minutes per block, that is about an hour of waiting, and most small merchants are safe shipping after one.

Set your confirmation threshold based on order value. For digital goods under a few hundred dollars, one confirmation is a reasonable level of risk. For high-value physical shipments, waiting longer is cheap insurance.

Why Custody Is the Line Regulators Draw

Legally, the custodial question matters as much as it does technically. Around the world, regulators tie the heaviest obligations to the act of holding or transmitting other people's money, not to the act of accepting payment for your own goods.

In the United States, FinCEN's 2019 guidance on convertible virtual currency business models (FIN-2019-G001) separates hosted wallet providers, which hold value on behalf of customers and can be money transmitters, from people who use unhosted wallets for their own purposes. A merchant receiving bitcoin into its own wallet for its own sales is in the second group.

Internationally, the Financial Action Task Force defines "virtual asset service providers" by what they do for or on behalf of others, including safekeeping and administration of virtual assets. Its 2021 updated guidance makes clear that peer-to-peer transactions through unhosted wallets are not, in themselves, VASP activity.

In the European Union, the Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) lists "providing custody and administration of crypto-assets on behalf of clients" as a licensed crypto-asset service. Software that never touches client funds is in a different position from a company that does.

Three limits are worth stating plainly:

  • Self-custody is not a tax exemption. Your bitcoin sales are still income.
  • It does not override consumer law or sanctions rules. You still have to follow them.
  • Rules vary by country. If your situation is unusual, ask a local lawyer.

What self-custody does is keep your store out of the category of businesses that hold other people's money.

Self-Host, Managed Host, or Custodial: Which One You Should Pick

Hands plug network cables into a server in a dim data center lined with racks.

Once you have decided on non-custodial, the remaining question is who runs the server. There are three realistic options.

Run it all yourself

You rent a server or use your own hardware, install BTCPay Server, sync a full bitcoin node, and handle updates, backups and monitoring. The full blockchain is now well over 600 GB, though BTCPay supports pruned nodes that use much less disk space. This is the most independent setup and the cheapest in cash. It is also the most expensive in time, especially when an update breaks a plugin at 11 p.m. on a sale day.

Use a managed host

A host runs the node and gateway, and you connect your xpub. Your keys never leave your wallet, so the host cannot spend your money. You do trust the host to stay online and to serve correct addresses. In practice, this trust is checkable: you can confirm that invoice addresses match the ones your own wallet derives.

Use a custodial processor anyway

This option makes sense only if you truly need automatic conversion to fiat on every sale and accept the percentage fee and freeze risk that come with it.

For most small and mid-sized merchants, a managed host is the right choice. You keep full custody without becoming a part-time sysadmin. Once your bitcoin volume justifies the setup, move to your own server.

Setting It Up Without Leaking Privacy or Losing Funds

Hands set a small hardware wallet into an open steel safe on a shelf.

A few setup decisions made on day one will save you trouble later.

  • Use a dedicated wallet. Create a new wallet just for store revenue. Don't reuse your personal wallet, because anyone who sees one invoice address could link it to your other holdings through on-chain analysis.
  • Prefer native SegWit. Addresses starting with bc1 have lower fees for customers and for you when you later spend the funds.
  • Store the xpub as carefully as the seed's location. An xpub cannot spend, but it reveals every address and balance in that wallet. Treat it as confidential.
  • Test with a small real payment. Send a few dollars' worth through the full checkout before launch, then confirm the funds appear in your wallet.

Pro Tip: Every abandoned checkout still uses up an address. After a few months, your wallet may have more than 20 unused addresses in a row. If you then restore that seed in different wallet software with the common default "gap limit" of 20, payments received after that run of empty addresses can look like they have vanished. They haven't. Raise the gap limit in your wallet's settings (to 100 or more for a busy store) before you panic, and write that setting down next to your backup.

Frequently Asked Questions

Can a non-custodial crypto payment gateway steal my funds?

Not if it only holds your extended public key. An xpub lets the gateway generate receiving addresses but not sign transactions. The exception is a hot wallet or Lightning node stored on the server, which does hold spending keys.

Do I need KYC to accept bitcoin through a non-custodial gateway?

The gateway software itself requires no identity checks, because no third party holds your funds. Your local tax, consumer protection and sanctions obligations still apply. If you later sell bitcoin through an exchange, that exchange will usually verify your identity.

How much does a non-custodial gateway cost compared to a custodial processor?

Non-custodial gateways take no percentage of sales. You pay for hosting or your own server, plus normal network fees. Custodial processors commonly charge around 0.5 to 1 percent per transaction, which adds up quickly as volume grows.

What happens if a customer pays the wrong amount?

The gateway marks the invoice as underpaid or overpaid, and you decide what to do. You can ask for the difference or refund the excess by sending a new transaction. No processor sorts it out for you, and the original payment cannot be reversed.

Can I accept Lightning payments without custody?

Yes, but a Lightning node keeps hot keys on the server to manage channels. Nobody else controls your funds, but the risk moves to that server's security. Many merchants keep only working balances on Lightning and sweep the rest to cold storage.

Sources