Payment processing for crypto-service and exchange merchants in September 2026

Why on-ramps, OTC desks and “buy crypto with a card” shops fail aggregators, and why settlement in USDC does not create a money-transmitter licence.

Independent vertical brief · Updated September 2026 · Reviewed by Phil Lawrence

We review high-risk payment rails across commercial verticals. We recommend one provider and earn an affiliate commission if you create an account through our links. It costs you nothing extra, and we state plainly who should not use it.

AT A GLANCE — Crypto Services Underwriting Profile

Typical MCC Code
6051 (Non-Financial Institutions — Foreign Currency, Money Orders, Travelers Cheques) and 6211 (Security Brokers/Dealers) are commonly discussed for on-ramps and brokerage-like activity; many banks will not board card-to-crypto at all.
Main Decline Reasons
Card-to-crypto on-ramps, unregistered money transmission, mixer-adjacent tools, stolen-card cashout patterns, and dispute ratios above the card network monitoring thresholds, which acquirers watch closely in this category.
Mainstream Approval
Routinely declined or terminated by Stripe, PayPal and Shopify Payments for crypto on-ramps, exchanges and many digital-asset services listed in acceptable-use policies. Terminations commonly follow a compliance review rather than a grace period.
Typical Reserve
Rolling reserves are common on traditional high-risk merchant accounts; typical industry ranges are around 10% held for up to six months, but terms vary by acquirer.
Our Recommendation
RiskPay non-custodial card rails: 0 KYC dossier, instant Polygon USDC payout, 0% rolling reserve, 6%–12% gateway fee.

Industry ranges are compiled from public sources and vary by acquirer, jurisdiction and merchant profile. RiskPay figures are from the provider's published pricing.

01 — Structural Risk

Why this vertical gets declined

Selling crypto for cards is often money transmission or brokerage depending on the activity. FinCEN registration and state money-transmitter licences may apply in the United States. A checkout plugin does not complete that registration.

Four decline vectors:

01. Aggregator crypto AUPs

Consumer aggregators restrict exchanges, on-ramps and many token sales. Category kill.

02. Money transmission

If you take fiat (or cards) and transmit value to another person or wallet as a business, MTL and BSA/AML duties may apply. Confirm with counsel. The rail does not decide this.

03. Stolen-card cashout

Fraudsters buy crypto with stolen PANs. That is why on-ramp discount rates and reserves exist on traditional files.

04. Mixers and anonymity tools

Services that market untraceability are treated as high-risk or prohibited by banks, independent of your checkout.

02 — The Fallout

What actually happens when you get shut down

Crypto-service freezes often arrive with a fraud code. Residual card deposits then sit in custody while customers expect tokens.

  1. 01

    Activity classification

    Copy such as “buy BTC with Visa” recodes the file as an on-ramp.

  2. 02

    Hard freeze

    Custodial balances freeze. Token inventory still needs to be paid for.

  3. 03

    AUP termination

    Notice cites crypto or money services.

  4. 04

    Long residual hold

    Fraud windows on card-to-crypto are used to justify holds. Duration varies.

  5. 05

    MATCH / regulatory residue

    Fraud-coded MSB terms follow the entity.

What Traditional Recovery Looks Like

Merchants seeking emergency replacement accounts for crypto-service merchants through high-risk Independent Sales Organizations typically encounter non-refundable application fees, rolling reserves held for months, elevated discount rates, and delayed international wires. Those terms vary by acquirer and jurisdiction — confirm directly.

Table 1 — Crypto services operational baseline

Requirements checklist

Money transmitter licensing and registration may apply depending on the activity. A payment rail does not remove that obligation or register you with FinCEN or a state. FinCEN

RequirementStandard / SpecificationWhy Acquirers Demand ItProtocol on Non-Custodial Rails
Licensing analysisDetermine whether you are an MSB / MTL / broker for the actual activityFederal and state financial-services lawCounsel — not a gateway form
AML program if requiredKYC/AML of customers as the licence requiresBSA and state MTL examsOperator systems
Honest productDo not market mixers or guaranteed returnsSecurities and bank crime policyMerchant-governed
DescriptorBrand customers used to buy the assetUnrecognized crypto purchasesConfigurable in dashboard
Refund policyWhat happens if the chain tx already went outCardholder disputes after broadcastTreasury + product

Table 2 — Effective processing cost per $10,000 processed

What it costs

Stated assumption: Based on $10,000 monthly volume. Figures include the plan subscription fee (annual plans allocated monthly as one-twelfth of the annual cost) and exclude the provider fee (typically 1.5%–4.5%), which is billed separately.

Plan / BillingGateway %Gateway $Allocated SubscriptionTotal on $10k
Free ($0/mo)12%$1,200$0$1,200
Scale monthly ($99/mo)10%$1,000$99$1,099
Scale yearly ($1,188/yr)7%$700$99$799
MAX monthly ($199/mo)8%$800$199$999
MAX yearly ($1,899/yr)6%$600$158$758

Footnote: Scale yearly calculates as $10,000 × 7% + ($1,188 ÷ 12) = $799. MAX yearly calculates as $10,000 × 6% + ($1,899 ÷ 12) = $758.25 (rounded to $758). For a detailed cost model including volume break-evens, visit our pricing breakdown.

03 — Practical Architecture

Recommended setup

If your product is an on-ramp, assume consumer aggregators will not keep you. Licensed activity still needs its own compliance stack.

Step 01 — Storefront Stack

Self-hosted WordPress + WooCommerce

Keep the actual asset ledger off a shopping-cart host that can freeze deposits.

Step 02 — Gateway Integration

RiskPay WooCommerce plugin

Install the official RiskPay extension. Customers pay with cards, Apple Pay, or Google Pay. No forced crypto checkout. The provider does not use API keys.

Step 03 — Settlement Destination

Self-custody Polygon wallet

YOUR WALLET ADDRESS is merchant settlement — it is not a substitute for customer KYC if you are a transmitter.

Step 04 — Treasury Off-Ramp

Institutional exchange off-ramp

Hold operating reserves in USDC where useful. Off-ramp to corporate fiat for payroll, ads platforms that require it, and taxes.

Ready to stabilize your checkout?

Collect cards for lawful crypto services without parking deposits on a consumer aggregator.

Open Free RiskPay Account

04 — Margin Threshold

Where this is not the right fit

On-ramp spread after fraud, gas and payment cost often sits under a 25% gross margin threshold. If that is you, 6%–12% gateway fees will not work.

Money transmitter licensing and registration may apply depending on the activity. Choosing this rail does not register you and does not make an unlicensed on-ramp viable.

05 — Storefront Optimization

Integration notes for crypto-service merchants

Broadcast assets only after capture is final enough for your fraud model. Card chargebacks after an irreversible chain tx are the structural cost of this vertical.

Capture then broadcast

Do not send coins on a mere authorization.

Velocity limits

Stolen-card testing is the default attack.

Support receipts

Tx hashes on receipts help when the cardholder claims non-receipt.

06 — Questions

Frequently asked questions

I settle in USDC anyway. Does that make me an exchange?

Merchant settlement in USDC is not the same as selling crypto to consumers. If you sell digital assets for cards, licensing may still apply. Get counsel.

Will RiskPay KYC my users?

The recommended provider’s published merchant model does not collect a merchant KYC dossier. That does not replace customer AML if you are a money transmitter.

Is 6051 the right MCC?

6051 is a published quasi-cash / foreign-currency MCC some on-ramps land in. Many banks refuse the activity entirely.

Can I process ICO token sales?

Token sales can be securities offerings. A card rail does not make an unregistered offering lawful.

Do you claim to have tested exchange deposits?

No. This brief does not claim independent tests.