Ang Self-Custody ay Hindi Ka Nililigtas sa Panganib ng Bangko. Itinatago Lang Nito nang Mas Mahusay

Ang self-custody ay dapat na punto kung saan titigil ka sa pagtitiwala sa ikatlong partido. Ang iyong mga susi, ang iyong mga barya, walang humahadlang sa pagitan mo at ng iyong pera maliban sa iyong sariling wallet. Ang pangakong iyon ay totoo hanggang sa gagamitin mo ang crypto sa isang card, dahil ang isang card ay gumagana lamang kung may isang lisensyadong entidad na sumasang-ayon na ilipat ang pera sa pamamagitan ng mga rail ng Visa o Mastercard na para sa iyo. Karamihan sa mga may hawak ng card ay hindi makakabanggit ng nasabing entidad kung tatanungin, at hanggang Enero ng taong ito karamihan ay walang dahilan para isipin na mahalaga ito.

Pagkatapos, isang regulator ng Poland ay bawiin ang lisensya sa pagbabayad ng isang kumpanya, at tatlong crypto card na walang malinaw na koneksyon sa isa’t isa ang tumigil sa pag-andar sa loob ng dalawang linggo: CEX.IO Card, Trustee Plus, at IN1. Wala sa tatlong tatak na ito ang gumawa ng anumang bagay upang magdulot nito. Nagsimula lamang silang mag-route sa parehong lisensyadong tagapamagitan, isang kumpanya na tinatawag na Quicko sp. z o.o., at nang bawiin ang awtorisasyon nito, wala na sa kanila ang makapagproseso ng transaksyon.

Naglalaan ako ng maraming oras sa pagbabasa ng mga kasunduan ng may hawak ng card. Ang Sweepbase ay nagtatala ng 141 crypto-linked na debit at credit card, at ang paggawa ng paghahambing na iyon ay nangangahulugang pagdaan sa maliliit na detalye sa likod ng bawat isa. Isang pattern ang paulit-ulit na lumilitaw. Halos hindi kailanman ang tatak na iyong pinili ang entidad na responsable sa paggana ng iyong card. May hiwalay na kumpanya sa ilalim, na karamihan sa mga gumagamit ay hindi kailanman nabanggit ang pangalan, na ang lisensya lamang ang nagtataguyod sa buhay ng card.

What keeps a crypto card running

Card networks like Visa and Mastercard don’t let just anyone issue cards. Doing that directly requires becoming a Principal Member, which means holding a bank charter or e-money authorization, meeting capital requirements, staffing a compliance function, and paying the network several million dollars a year. Only a few hundred companies worldwide hold that status on each network. Almost none of them are crypto companies.

So crypto-card brands rent access instead. A licensed Principal Member agrees to sponsor the brand’s BIN, the six-digit code at the front of every card number that tells the network who’s financially responsible for it. The brand builds the app, runs the rewards program, and handles the wallet integration and customer support. Compliance, settlement, and the regulatory relationship sit with the sponsor instead, the part that keeps the lights on but rarely shows up in the marketing. When people talk about a crypto card’s “issuer,” they usually mean the brand. The sponsor is the one whose name is in the contract that matters.

Where the risk concentrates

Look at the whole crypto-card market at once and it doesn’t look risky. Running the standard concentration math (a Herfindahl-Hirschman Index) across all 141 cards in the Sweepbase dataset produces a score in the 400-to-500 range. The US Department of Justice considers anything under 1,500 unconcentrated. By that measure alone, there’s nothing to see here.

That measure is the wrong one, because nobody actually picks between all 141 cards. A dollar-based self-custody card issued through a Puerto Rico entity and a peso-based card issued in Argentina were never competing for the same wallet. Once you group cards by the market a real buyer chooses within, the concentration jumps.

The US self-custody segment is the clearest example. Roughly 22 cards are active here, including recent launches like Ether.fi Cash, Cypher, Solayer, and Tangem Pay. Almost the entire segment funnels through two sponsors. Third National, a Puerto Rico–licensed money transmitter that issues through the Rain program-management rail, is named directly in the agreements for Cypher, Solayer, and Tangem Pay, and is the entity behind roughly a dozen more cards that run on the same rail without naming it outright. Lead Bank, a state-chartered bank based in Missouri and reached through Stripe-owned Bridge, is named directly on four more (Phantom Cash, Wayex, Airtm, Fuse). Counting only the cards that name a sponsor in plain text, this segment’s concentration index already tops 5,000. Include the cards inferred to sit on the same Rain rail and it clears 6,000, more than double the DOJ’s own line for “highly concentrated.”

Europe’s picture is smaller but even more lopsided, and better documented because every card in it names its sponsor directly. Gnosis Pay, OKX’s EEA card, Kraken’s Krak card, Ledger’s CL card, and 1inch all route through the same UK e-money institution: Monavate. That institution’s ownership changed hands on 1 Mayo 2026, when Exodus took control of Monavate’s ultimate parent company through a receivership process. An earlier $175 million purchase agreement had fallen apart, and Exodus responded by suing to force the deal closed while separately calling in loans it had already advanced to the seller; the receivership followed from there. Almost nobody covered this as a competition story, probably because the ownership structure sits several layers removed from the cards themselves. But a self-custody wallet company now genuinely controls the sponsor behind several of its own direct competitors, Kraken’s card included, whether or not anyone wrote about it.

A pattern, not an isolated case

Quicko is the newest example, not the first. Wirecard’s insolvency filing in Hunyo 2020 wiped out five early crypto cards almost overnight: Crypto.com’s first Visa, Binance’s first Visa, TenX, Monolith, and Wirex’s original Visa card, plus dozens of unrelated fintech programs that shared the same sponsor. A Mastercard-branded BitPay prepaid card went dark in 2023 after its sponsor, Metropolitan Commercial Bank, stepped back from crypto entirely, and it has stayed dark since. That same year, Moorwand’s exit from crypto sponsorship pushed Bybit’s European card onto a different, French-licensed replacement. Four separate collapses across six years, and in every one of them the customer-facing brand kept its name and its app; only the plumbing underneath changed or broke.

So what happens to the money

The realistic outcome of a sponsor failure is narrower than losing everything. UK and EU e-money rules require customer funds to sit in a segregated account at a separate bank, not commingled with the failed firm’s own assets, which is supposed to keep them out of reach of ordinary creditors. That protection isn’t deposit insurance, and it doesn’t stop access from freezing for weeks while an administrator sorts out who owns what, but the legal default favors the customer.

The US version of this protection is narrower still. Some prepaid card programs qualify for FDIC pass-through coverage, but only when the account is structured correctly to pass through in the first place, and only against the sponsor bank itself failing. It does nothing if the program manager sitting between the bank and the customer collapses instead, which is exactly what happened during the 2024 Synapse failure, where customer money got stuck despite sitting, in theory, at an insured bank.

That asymmetry is also why a Chase or Barclays customer never experiences a Quicko-style event. Insured banks in both countries sit inside a system designed to keep them running without a gap if they fail, whether that means the FDIC handing US deposits to a healthier bank over a single weekend or the UK’s own bail-in and bridge-bank tools doing the equivalent job. A payment institution losing its license has no comparable safety net. Nobody is required to line up a replacement sponsor. The authorization is gone, and every card built on it stops at the same moment.

The part that’s specific to self-custody

This lands hardest on the self-custody segment specifically, because that’s the product marketed on removing exactly this kind of dependency. The coins sit in your own wallet right up until the swipe, and at the swipe, control passes to a sponsor you didn’t select and can’t inspect. Roughly three-quarters of the active US self-custody cards trace back to one issuing entity. Switching cards inside that segment often just means switching the logo on top of the same underlying license.

None of this makes BIN sponsorship a mistake. A small group of sponsors keeps reappearing across so many programs because they built the compliance systems a generalist bank never had a reason to build, and that infrastructure is a real part of why stablecoin-funded cards exist at scale in the first place. Self-custody still does real work here, just narrower work than the marketing implies. It covers what happens to your assets before you spend them. It doesn’t cover what happens to the rail carrying the payment once you do. Reading the cardholder agreement for the sponsor’s name takes about five minutes, and it’s worth doing before you load a balance onto any of these cards. That name is your answer to a simple question: if this stops working overnight, whose regulator do you call?