How Crypto Payment Gateways Work

Introduction

A crypto payment gateway solves a specific problem: a customer wants to pay in bitcoin or a stablecoin, and a merchant wants a predictable amount of ordinary money in a bank account. The gateway sits between those two wishes, absorbing the volatility, the block confirmation times and the compliance burden.

Mechanically it resembles the card gateway described in what payment gateways are and how they differ, but three things change: there is no issuer to authorise a payment, there are no chargebacks, and the regulatory question of who may operate at all is unsettled in most of the world. That last point, not the technology, is what determines where these gateways are actually available.

For provider availability and regulatory status market by market, see our payment gateway guides by country.

The transaction, step by step

Quote. The merchant prices the order in fiat. The gateway locks an exchange rate and generates a payment address or invoice, usually valid for a short window — often ten to fifteen minutes — because the quote is only as good as the rate behind it.

Payment. The customer sends the asset from their own wallet or exchange account. There is no authorisation request and no issuing bank; the payment either appears on-chain or it does not.

Confirmation. The gateway watches the network and waits for enough confirmations to treat the payment as final. This is the step with no card-world equivalent, and it is why settlement finality in crypto is a probabilistic judgement rather than a message from a bank.

Conversion. If the merchant does not want to hold the asset, the gateway sells it — typically across several liquidity venues rather than one exchange, to avoid moving the price on large orders — and books the fiat proceeds.

Settlement. The merchant receives funds in their chosen currency or in a stablecoin. Bitpace, for example, accepts payment in 70+ cryptocurrencies including bitcoin and ether, and settles in USD, EUR, GBP, AED or USDC.

Custody is the real architecture question

Every crypto gateway must answer one question: who holds the coins between payment and settlement?

Most commercial gateways are custodial — they control the wallet, take the price risk during conversion, and hand the merchant a clean fiat number. That convenience concentrates counterparty risk, which is why serious providers outsource key management to specialist custodians rather than building it in-house. Bitpace names Fireblocks and BitGo as its wallet and custody infrastructure.

Non-custodial gateways instead push funds straight to a merchant-controlled address. The merchant keeps full control and takes the volatility. Neither model is correct in general; they are different allocations of risk.

No chargebacks, and what replaces them

On-chain payments are irreversible, so the card industry’s chargeback mechanism simply does not exist. For merchants in high-dispute categories this is the main attraction, and it is why crypto gateways market heavily to sectors that struggle with card acceptance.

The trade-off is that consumer protection has to come from somewhere else — refunds become a deliberate merchant policy and a second outbound transaction, not a right the network enforces. Irreversibility also raises the stakes on fraud screening before a payment is accepted, which is why sanctions and address screening is a standard feature rather than an add-on.

Stablecoins changed the use case

Bitcoin’s volatility made it a poor unit of account for commerce. Dollar-referenced stablecoins removed that objection, and in practice they now carry most crypto payment volume: a merchant quoting in dollars and settling in USDC has eliminated the exchange-rate problem while keeping instant, borderless transfer.

This matters most where cross-border money movement is expensive or slow. Remittance inflows reached $137.7 billion in India, $67.6 billion in Mexico and $40.3 billion in the Philippines in 2024 — corridors where the cost of sending money is a live policy concern. Our article on how remittances and insurance support developing economies covers the broader flows, and remittance cost data shows what incumbent transfer prices look like.

Licensing now decides availability

The constraint on crypto gateways is legal, not technical, and the map is fragmenting rather than converging.

Kenya illustrates the pattern. Its Virtual Asset Service Providers Act came into force on 21 October 2025, designating the Central Bank of Kenya and the Capital Markets Authority as regulators, with the CBK to license stablecoin issuers, wallet providers and payment processors while the CMA oversees exchanges and tokenisation platforms. Existing providers were given one year to comply; new entrants must be licensed before operating. As of the CBK’s public notice, no VASPs had yet been licensed under the Act — a legal framework in force, with the licensing window not yet open.

The practical lesson: “is this gateway available in my country?” is really three questions — is the activity legal, is a licence required, and does this provider hold one. A provider’s own coverage map often answers only the first. Availability is also commercially uneven for reasons unrelated to law: Coinbase Business, for instance, states it is currently available in the US and Singapore with plans to expand.

Adoption context still sets the ceiling on demand. Crypto acceptance presumes online purchasing, and that ranges from 41.7% of adults in Brazil to 5.8% in Nigeria (2024). Where digital payment adoption is already high through mobile money — 89.3% of Kenyan adults in 2024 — a crypto gateway competes against rails that already work well, not against cash.

Sources & method

FinStatGlobe publishes no statistics on crypto ownership, crypto payment volumes or payment gateways. No verified open cross-country dataset covers them, so both the Cryptocurrency & Blockchain and Payment Gateways & POS categories are editorial-only, and we never estimate a figure to fill the gap.

Provider facts above — supported assets, settlement currencies, custody partners, country availability — are attributed to the providers’ own published pages, cited in the sources list. Regulatory facts are attributed to the primary regulator document, in this case the Central Bank of Kenya’s public notice on the VASP Act 2025. Provider terms and licensing regimes change frequently; each is stated as of the cited source.

Every adoption, online-purchase and remittance figure comes verbatim from the FinStatGlobe derived datasets (World Bank Global Findex and World Development Indicators) and links to the statistic page carrying its full series, source and data year. Data years vary by country and indicator, and we never restate an observed value as a current-year figure. See the methodology page.