Crypto-Debit Card Development: From Concept to Launch
Developing a crypto-debit card builds a bridge between a DeFi wallet and the traditional Visa/Mastercard payment infrastructure. The user holds USDC or ETH in their crypto balance; when paying with the card, the system automatically converts the required amount into fiat and processes the transaction via banking rails. To the merchant, it looks like a regular card—the user pays with crypto. We have delivered such projects for nine Web3 companies, each with unique requirements for stack, jurisdiction, and cashback. With 9 successful projects and over 5 years of experience in card issuing, we guarantee compliance with all relevant regulations. Contact us to evaluate your idea.
Architectural Components
The product consists of several independent layers, each requiring its own technical solution and regulatory coverage.
BIN Sponsorship and Card Issuing
Visa and Mastercard rarely work with crypto companies directly. You need a bank sponsor or card program manager that holds a BIN (Bank Identification Number) and has direct participation in card networks.
Options:
- Marqeta — API-first card issuing, works with Web3 companies. Requires a banking partnership. Marqeta's API is 3x faster than traditional processors for authorization.
- Stripe Issuing — available in 30+ countries, quick start, but limited customization.
- Moorwand, Railsbank — European issuers, more flexible for cryptocurrencies.
- Binance Card, Crypto.com Visa — ready-made white-label solutions, but no customization.
For launching your own product, the most realistic path: Marqeta API + a banking partner (Metropolitan Commercial Bank, Banking Circle, etc.).
Crypto Custody
User balances are held in cryptocurrency. Two approaches:
On-chain wallets. Each user has an on-chain address (or a virtual account in a segregation system). USDC is stored as-is; conversion happens at the time of transaction.
Off-chain accounting. User funds are kept in a common pool; an internal ledger tracks shares. Cheaper to operate, but more complex from a regulatory perspective.
Conversion at Transaction Time
Key point: Visa authorization occurs within 1–3 seconds. In that time you must:
- Receive an authorization request from Marqeta (amount in USD)
- Check the user's balance in USDC/ETH
- Lock (hold) the required crypto amount
- Respond with approve or decline
The conversion rate is pre-committed: at authorization, the rate is fixed and the amount is held. At settlement (usually T+1), actual conversion occurs. This means you need a buffer for rate fluctuations—or instant settlement.
interface AuthorizationRequest { cardId: string; transactionAmount: number; // in USD merchantCategory: string; merchantName: string; transactionId: string; } async function handleAuthorization(req: AuthorizationRequest): Promise<AuthDecision> { const user = await db.getUserByCardId(req.cardId); // Get current rate with a small slippage buffer (0.5%) const cryptoPrice = await priceService.getPrice(user.preferredCrypto, 'USD'); const requiredCrypto = (req.transactionAmount / cryptoPrice) * 1.005; const balance = await walletService.getBalance(user.id, user.preferredCrypto); if (balance < requiredCrypto) { return { decision: 'DECLINE', reason: 'INSUFFICIENT_FUNDS' }; } // Lock funds await walletService.hold(user.id, user.preferredCrypto, requiredCrypto, req.transactionId); return { decision: 'APPROVE', authorizedAmount: req.transactionAmount }; } What Regulatory Requirements Must Be Met?
A crypto card is one of the most regulatorily complex crypto services. Requirements depend on jurisdiction:
EU (MiCA + EMD2/PSD2): Requires an Electronic Money Institution (EMI) license for issuing e-money, or working through a licensed partner. Typical EMI application costs €25,000–€50,000.
UK (FCA): Electronic Money Institution authorisation or Small Electronic Money Institution.
USA: Money Transmitter License (MTL) in each state, or working through a licensed partner. Obtaining MTL in 50 states takes 1–2 years and significant investment.
Minimum path: Register an EMI license in Lithuania or Estonia (EU), use passporting across the EU. Partner with Marqeta for physical infrastructure.
KYC/AML
Full KYC is mandatory:
- Identity verification (passport + selfie) — Sumsub, Jumio, Onfido
- Sanctions list checks (OFAC, EU, UN) — Chainalysis, Elliptic
- Transaction monitoring (AML scoring) — Chainalysis KYT
- Enhanced Due Diligence for large transactions
KYC Process Details
Our team of 20+ engineers ensures each step is automated and compliant. We hold PCI DSS certification and guarantee data security.Physical vs. Virtual Card
Virtual card — only details (number, CVV, expiry). For online purchases. Cheaper to produce (70% cost reduction), issued instantly.
Physical card — plastic with a chip. Requires a card printer and personalization. Production cost depends on volume. Issue time 1–2 weeks.
Most crypto cards start with virtual (90% of our clients) and add physical on demand.
Technical Architecture
Mobile/Web App (React Native / Next.js) ↓ API Server (Node.js + TypeScript) ├── Card Management Service │ └── Marqeta API (cards, limits, statuses) ├── Authorization Handler (webhook from Marqeta) │ └── < 500ms response time (critical!) ├── Crypto Custody Service │ ├── Internal ledger (PostgreSQL) │ └── On-chain settlement (Alchemy + ethers.js) ├── Price Oracle Service │ └── Chainlink + CoinGecko fallback ├── KYC Service │ └── Sumsub API └── AML/KYT Service └── Chainalysis API Cashback Program in Crypto
A differentiating feature: cashback is paid in crypto (native project token, BTC, or USDC). Typical cashback rates range from 1% to 5% depending on merchant category. Requires:
- A smart contract for accrual (if cashback in own token — ERC-20 with minting rights in the system)
- An accumulation and withdrawal mechanism
- Transparent rules (merchant categories, cashback percentage, limits)
Supported Networks and Assets
Launch typically starts with USDC (stablecoin, no exchange rate risk while holding). Then add ETH, BTC. Each new asset requires a separate price oracle and exchange rate risk management.
Multi-chain support matters: USDC on Polygon is cheaper in transactions than on Ethereum mainnet (fees ~$0.01 vs $5).
Timelines and Estimation
| Phase | Duration |
|---|---|
| Partner selection (BIN sponsor, EMI) | 2–4 months |
| Technical MVP development (cost $200k–$500k) | 4–6 months |
| KYC/AML integration | 1–2 months |
| Testing and compliance review | 2–3 months |
| Soft launch (virtual cards) | T+9–15 months |
Technical development alone (without regulatory path) takes 4–6 months. Full launch including licensing takes 12–18 months.
What's Included in the Work
- Business requirements analysis and optimal BIN sponsor/issuer selection
- Architecture development: card management, authorization handler, custody service
- Integration with Marqeta/Stripe Issuing and card program setup
- KYC/AML service integration (Sumsub, Chainalysis)
- Implementation of on-chain wallets and smart contracts for cashback
- Legal support for obtaining an EMI license (Lithuania, Estonia) or partnering with a licensee
- Load testing and authorization speed optimization (< 500 ms)
- Ongoing post-launch support: transaction monitoring, price oracle updates, regulatory compliance adjustments
With 9 successful crypto card projects delivered and over 5 years of proven experience, we guarantee a smooth launch. Contact us to evaluate your project.