Everything customers ask, answered

Yes, at every spending limit. There is no identity verification at signup or at any later step. No email, no phone number, no document, no selfie. The account is identified by a randomly generated 16-character seed phrase that the customer keeps. Account recovery is impossible by us — if the seed is lost, the account and its balance are unrecoverable. This is by design and is the entire value proposition.

Click "Get Started" on any page. A seed phrase is generated immediately. Save it in a password manager — we cannot recover it for you. That is your only credential.

Yes. POST /api/v1/auth/signup creates an anonymous account and returns the seed + a Bearer API token. See https://cryptotopcard.com/agents for the agent quickstart.

We log IP at signup for abuse-prevention (3 signups/hour/IP rate limit) and on top-up creation for accounting. We do not link IPs to your identity because we never collected one.

You type the NET USD amount you want credited (say $100). We display the GROSS crypto amount you need to send ($102.04 = $100 + 2% rail fee). When the deposit confirms on-chain, your account balance increases by exactly $100. No second deduction.

USDT TRC-20 (~20 seconds), Solana (~5 seconds), USDT on Solana (~5 seconds), TON (~5 seconds). Bitcoin takes 15-45 minutes (3 confirmations).

Yes. Native XMR is fully supported, with ~20-minute settlement (10 confirmations). It is the only chain we accept that provides cryptographic privacy at the chain level.

The funds are lost. We cannot recover cross-chain mis-sends. Always confirm the network on your wallet/exchange withdrawal screen.

$5 USD equivalent. Below that, the network fee starts to dominate.

Up to 20 active cards per account. Each issuance costs $1.50.

$150 USD. The minimum exists to keep the per-card economics sustainable.

Once your balance reflects the deposit, card issuance takes ~5 seconds. The full deposit → issued card path is typically under a minute with USDT TRC-20 or Solana.

Yes. Use BIN 471938 (Visa Business) or BIN 553184 (Mastercard World) — both are tuned for ad-platform underwriting with ~95% acceptance.

Yes. POST /api/v1/cards/:id/topup moves funds from your account balance to the card balance. Or from the dashboard, click the card and use "Refill."

The remaining card balance refunds to your account balance instantly. The card token is destroyed; the card number can no longer authorise charges.

Yes, every BIN provisions to Apple Wallet. Open Wallet → "+" → Debit or Credit Card → Enter Card Details Manually. BIN 485291 (Visa Platinum) has the highest first-attempt provisioning success rate.

Yes, every BIN provisions to Google Wallet. Add Card → Payment card → manual entry. BIN 541263 (Mastercard Standard) is tuned for Google Wallet specifically.

Yes — both accept contactless Visa/Mastercard via Apple Pay/Google Pay, and we have validated CryptoTopCard cards on both.

Bcrypt-hashed (cost factor 12). We never store the raw seed. There is no recovery path — we cannot reset it for you.

Yes. TOTP 2FA is available in the dashboard settings. Compatible with Google Authenticator, Authy, 1Password, etc. Single-use backup codes are also generated.

Stored as SHA-256 hashes. We never log the raw token. Per-token sliding rate limits (60 read/min, 10 write/min). Per-token scopes (read/topups/cards). Soft-revoke by setting revoked_at.

Yes, both are explicitly welcomed. No IP-based blocks beyond the 3-signups-per-hour rate limit.

$1.50 issuance per card (one-time), 2% top-up fee (gross-up on crypto deposit), $0 monthly fee. So a $100 top-up + $150 card costs you: $102.04 in crypto + $1.50 card fee + $150 card load = total $253.54 deposited for $150 of card spending power.

No. The card itself charges Visa/Mastercard's standard interchange/FX rates at the merchant level (these are paid by the merchant, not by you). No monthly fees, no closing fees, no inactivity fees.

Visa or Mastercard's network rate, which is essentially the interbank rate plus a small spread (typically 0.3-1%). We do not add any FX markup of our own.

Privacy.com is US-only and requires full US identity verification plus a linked US bank account. CryptoTopCard works worldwide and requires neither identity nor bank account.

Crypto.com requires full KYC and locks $400+ in CRO staking for the base tier. CryptoTopCard requires neither KYC nor staking — but does not offer cashback rewards.

Wirex and Cryptopay both require KYC and are EU/UK-focused. CryptoTopCard is no-KYC and global. For users who can pass KYC and want rewards, Wirex/Cryptopay are perfectly fine alternatives.

Yes. POST https://cryptotopcard.com/api/v1/mcp (JSON-RPC 2.0). 13 tools: list_bins, list_coins, signup, get_account, create_topup, get_topup, list_cards, issue_card, get_card, freeze_card, unfreeze_card, topup_card, delete_card. Same Bearer tokens as REST.

Yes. Claude Desktop and Code: configure as an MCP server. ChatGPT custom GPT: import the OpenAPI 3.1 spec at /.well-known/openapi.json. Cursor / Continue: HTTP MCP transport. See https://cryptotopcard.com/agents for working snippets.

60 read calls per minute per token, 10 write calls per minute per token. Signup is rate-limited to 3 per hour per source IP.