You have been accepting Bitcoin or Ethereum for your online store. The business is growing. Then, one day, the website goes dark. The dashboard returns a 404 error. Support tickets bounce back into the void. Panic sets in immediately because you realize that thousands of dollars worth of cryptocurrency might be sitting in an account you can no longer access.
The fate of those funds depends entirely on one technical detail: who holds the private keys? If you are using a custodial service, your money is likely trapped, frozen, or worse-gone. If you are using a non-custodial system, your money is safe, sitting exactly where it belongs: in your own wallet.
The Custodial Trap: When "Convenience" Means Counterparty Risk
Most merchants start with centralized, custodial gateways because they are easy to set up. You sign up, connect a bank account, and start selling. The provider handles the complex parts: detecting payments on the blockchain, converting volatile crypto into stable fiat (like USD or EUR), and depositing the cash into your bank.
However, this convenience comes with a massive hidden cost: counterparty risk. In a custodial model, the crypto never actually enters your wallet. It lands in the gateway’s hot or cold wallets. The balance you see on your dashboard is just a number in their internal database-a promise that they owe you that value. This is known as an IOU model.
If the company shuts down, that IOU becomes worthless unless there is a legal mechanism to reclaim the underlying assets. And often, there isn't.
Real-World Example: The Coinbase Commerce Shutdown
We saw a textbook example of this recently. In early 2026, Coinbase announced it would permanently shut down its Coinbase Commerce a self-custodial merchant product available outside the US and Singapore service by March 31, 2026. Because Coinbase remained a solvent, legitimate entity, they provided a migration window. Merchants were instructed to stop creating new charges, export their transaction history, and withdraw remaining funds using a specific tool.
For merchants who acted quickly, this was an inconvenience. For those who ignored the emails or forgot they had balances sitting in the platform, access vanished on April 1. While Coinbase eventually offered recovery paths, the lesson was clear: when a custodial platform closes, you are at the mercy of their timeline and solvency.
The Bankruptcy Nightmare: Celsius and Voyager
Things get much darker when the shutdown is caused by insolvency rather than a strategic pivot. Look at the collapse of Celsius Network a digital asset lending platform that filed for Chapter 11 bankruptcy in 2022. Users believed their crypto was safe in their accounts. However, the court ruled that the assets belonged to the bankruptcy estate, not the users, based on the Terms of Service.
This means customers became unsecured creditors. Instead of getting their Bitcoin back, they received claims against the company, which often result in recovering only pennies on the dollar, years later. If your payment gateway operates like a bank or exchange, holding your funds in pooled wallets, you face this exact risk.
The Non-Custodial Solution: You Hold the Keys
There is a way to eliminate this risk entirely: use a non-custodial gateway. In this model, the software does not touch your money. It acts purely as a notification service. It generates an invoice address derived from your public key, watches the blockchain for a payment, and sends you a webhook saying, "Hey, someone paid." The funds go directly from the customer's wallet to yours.
Because the gateway never holds the private keys, it cannot steal your funds, freeze them, or lose them in a hack. Even if the company behind the software goes bankrupt tomorrow, your funds remain safe in your wallet. The software might stop working, but your money doesn't.
BTCPay Server: The Gold Standard for Self-Hosting
BTCPay Server an open-source, self-hosted, non-custodial payment processor first published in 2017 is the most prominent example of this approach. It is free, open-source software that you install on your own server (often a cheap Virtual Private Server). It connects to your hardware wallet or node. When a customer pays, the transaction happens on-chain, directly to your address. There is no middleman.
If the developers behind BTCPay Server decided to quit tomorrow, every merchant using it would simply continue operating. Their invoices would still work because the logic runs on their own servers, and their funds are already in their possession. This is financial sovereignty.
Modern Managed Alternatives: TxNod
Self-hosting requires technical maintenance. Not every solo founder wants to manage a Linux server. This is where modern managed non-custodial gateways like TxNod a non-custodial multi-chain crypto payment gateway designed for solo founders and indie hackers fit in. Unlike traditional custodial providers, TxNod is architected so that funds never enter the platform's custody.
Merchants connect their extended public keys (xpubs) from hardware wallets like Ledger or Trezor. The system derives unique addresses for each invoice, but the private keys stay on the user's device. When a payment arrives, it settles straight to the merchant's wallet on-chain. There is no platform-side balance to freeze or seize. If TxNod were to shut down, merchants would lose the dashboard interface, but they would retain full, immediate access to all their funds because those funds were never held by the company. This structural impossibility of freezing assets makes it a safer choice for independent operators compared to legacy custodial options.
Comparison: Custodial vs. Non-Custodial Shutdown Scenarios
| Scenario | Custodial Gateway (e.g., BitPay, Coinbase Commerce) | Non-Custodial Gateway (e.g., BTCPay, TxNod) |
|---|---|---|
| Orderly Wind-down | Funds accessible during withdrawal window; risk of delays if process is chaotic. | No impact on funds. Software may become unusable, but wallet remains fully functional. |
| Bankruptcy / Insolvency | High risk. Assets often become part of bankruptcy estate. Users become unsecured creditors. | No risk. Funds are never held by the company, so they are not part of the estate. |
| Regulatory Freeze | High risk. Regulators can order the company to freeze all withdrawals. | No risk. Blockchain transactions cannot be reversed or frozen once confirmed. |
| Hack / Security Breach | High risk. If hot wallets are compromised, customer funds may be stolen. | Low risk. Only the dashboard data is exposed; private keys and funds remain secure with the merchant. |
| Technical Downtime | Payments may fail or settle slowly. No direct loss of existing funds. | Invoices may not generate automatically. Existing funds are unaffected. |
How to Protect Yourself Right Now
If you are currently using a custodial gateway, you do not need to panic, but you should take steps to reduce your exposure. Treat the gateway as a transactional conduit, not a savings account.
- Minimize Balances: Do not let significant amounts of crypto sit in your gateway account overnight. Set up automatic settlements to your bank account or daily withdrawals to your personal hardware wallet.
- Read the Terms of Service: Look for language about "ownership" and "bankruptcy." Does the company claim title to your assets? If yes, you are taking on counterparty risk.
- Diversify Providers: Relying on a single payment processor is dangerous. Have a backup method ready, such as direct wallet addresses or a secondary gateway, in case your primary one goes offline.
- Consider Migration: If you are a solo founder or small business owner, evaluate moving to a non-custodial solution. Platforms like TxNod offer the ease of integration without the custody risk, allowing you to keep your keys and your control.
Conclusion: Control Is Currency
The crypto space was built on the principle of trustlessness. Yet, many merchants unknowingly reintroduce trust by using custodial payment gateways. When a gateway shuts down, the difference between losing everything and losing nothing comes down to one question: Did you hold the keys?
By choosing non-custodial infrastructure, whether through self-hosted solutions like BTCPay Server or managed services like TxNod, you ensure that your business continuity is not tied to the survival of a third-party corporation. Your money stays yours, regardless of what happens to the software processing your invoices.
Can a crypto payment gateway steal my funds?
Yes, if you are using a custodial gateway. Since they hold your private keys, they have the ability to move, freeze, or lose your funds due to hacks, insider threats, or operational failures. Non-custodial gateways prevent this by design, as they never have access to your private keys.
What happens to my crypto if a gateway goes bankrupt?
In a custodial model, your crypto likely becomes part of the bankruptcy estate. You may become an unsecured creditor, meaning you might recover only a fraction of your funds after a long legal process. In a non-custodial model, your funds are safe in your own wallet and are not affected by the gateway's bankruptcy.
Is BTCPay Server safe if the project shuts down?
Yes. BTCPay Server is open-source software. If the development team stops updating it, you can still run the existing code on your own server. More importantly, since it is non-custodial, your funds are never held by the project, so a project shutdown does not endanger your assets.
How does TxNod protect funds during a shutdown?
TxNod is a non-custodial gateway. It uses your public keys to generate payment addresses, but your private keys remain on your hardware wallet. Funds settle directly to your wallet on-chain. Therefore, even if TxNod ceases operations, your funds remain accessible in your wallet because they were never stored by TxNod.
Should I keep large balances in my payment gateway?
No. Regardless of the provider, it is best practice to treat payment gateways as pass-through channels. Withdraw funds to your own cold storage or bank account regularly to minimize exposure to platform-specific risks like hacks, freezes, or shutdowns.