LibPA

Embedding a Crypto Pay Widget Without Sending Funds Off-Site: A Guide

Embedding a Crypto Pay Widget Without Sending Funds Off-Site: A Guide Jun, 15 2026

Most merchants accept cryptocurrency by handing their money over to a middleman. You click "buy," the customer pays, and then you wait-sometimes for days-for the payment processor to release those funds into your bank account or exchange wallet. That model works fine if you trust the processor not to freeze your account, charge hidden fees, or go bankrupt with your cash sitting in their servers. But what if you didn't have to trust anyone?

There is a different way. It involves embedding a crypto pay widget that processes transactions without sending funds off-site. In this setup, the money moves directly from the customer’s digital wallet to yours. No intermediate holding accounts. No custodial risk. Just a direct on-chain transfer monitored by a lightweight script on your website.

How Non-Custodial Widgets Work

To understand why this matters, you need to look at the plumbing. Traditional gateways like Coinbase Commerce or BitPay often use a custodial model. When a customer pays, the funds land in the gateway's hot wallet first. The gateway confirms the transaction, converts it if necessary, and then settles it to you. During that window, the gateway controls your money.

A non-custodial widget flips this script. Here is the flow:

  1. Invoice Generation: Your server talks to the widget provider via an API. The provider generates a unique, one-time-use blockchain address linked to your public key (xpub).
  2. Widget Display: The widget embeds this address into your checkout page as a QR code or copy-paste string.
  3. Direct Payment: The customer sends crypto directly to that address. The funds never touch the widget provider’s infrastructure.
  4. Monitoring & Notification: The widget provider watches the blockchain for incoming transactions to that specific address. Once confirmed, they send a signed webhook to your server saying, "Payment received."

The critical difference is custody. In the non-custodial model, the provider acts only as a messenger and a monitor. They see the transaction happen, but they cannot move the funds because they do not hold the private keys. You do.

Why Merchants Are Switching to Direct Settlement

You might wonder why anyone would bother with this complexity. The answer usually comes down to three things: control, speed, and cost.

Eliminating Counterparty Risk is the biggest driver. If a centralized payment processor gets hacked, faces regulatory shutdown, or simply decides to freeze your account due to a policy dispute, your revenue is trapped. With a non-custodial widget, the funds are already in your wallet. No one can reverse the transaction or hold them hostage. This structural finality is something traditional credit card processors can never offer.

Speed of Settlement also improves significantly. Custodial systems often batch settlements or require manual review periods. Non-custodial widgets trigger webhooks immediately after blockchain confirmations. For Bitcoin, that might mean waiting for one or two blocks (roughly 10-20 minutes). For faster chains like Polygon or Solana, confirmation takes seconds. Your order fulfillment system can start processing instantly.

Lower Fees are another factor. Because the provider isn't managing liquidity or taking on counterparty risk, their fee structure is leaner. Many non-custodial solutions charge a flat monthly subscription rather than a percentage of every transaction. This becomes mathematically superior as your volume grows.

Direct crypto transfer bypassing intermediaries

Key Players in the Non-Custodial Space

The market for these tools has matured rapidly. While early solutions were clunky developer utilities, today’s options are polished, user-friendly interfaces designed for e-commerce platforms.

Comparison of Leading Non-Custodial Crypto Widgets
Provider Supported Chains Fee Model Best For
NOWPayments 15+ networks (BTC, ETH, TRC-20, etc.) ~0.5% per transaction Merchants wanting broad coin support out-of-the-box
Inqud Major chains (BTC, ETH, XRP) Tiered volume pricing (starts ~0.3%) High-volume businesses needing custom UI templates
Coinremitter 60+ cryptocurrencies Flat 0.7% + optional fiat conversion Merchants who want easy fiat off-ramping
TxNod 7 chains (BTC, ETH, TON, Cardano, etc.) $20/month flat, 0% take-rate Solo founders and developers prioritizing SDK control and no-KYC onboarding

NOWPayments remains the market leader in terms of sheer variety, supporting over 100 coins across multiple networks. Their widget is robust, well-documented, and handles the complexity of address generation seamlessly. However, their per-transaction fee adds up for high-frequency microtransactions.

TxNod takes a different approach, appealing heavily to solo founders and indie hackers. Instead of charging a percentage of your sales, TxNod operates on a flat $20/month subscription with zero take-rate on volume. This model is attractive for scaling projects where transaction costs eat into margins. Additionally, TxNod emphasizes developer experience, offering a TypeScript SDK that locally re-verifies payment addresses against your hardware wallet’s extended public keys (xpubs), ensuring the gateway never lies about where funds are going. It requires no KYC and no registered company, making it accessible for individual operators who just want to ship a product.

Technical Implementation: What You Need to Know

Embedding a non-custodial widget is simpler than most developers expect, but it does require a bit more initial setup than plugging in a Stripe key. You aren't just adding a button; you are integrating a monitoring service.

Wallet Infrastructure is your responsibility. Since the funds go straight to you, you need a wallet that can handle incoming transactions. For serious operations, this means using a hardware wallet like a Ledger or Trezor. You will connect your device to the widget provider’s dashboard to input your xpubs. Never share your seed phrase or private keys. The provider only needs the public derivation path to generate unique addresses for each invoice.

Webhook Security is critical. The widget provider will send HTTP POST requests to your server when a payment is detected. You must verify these signatures. Most providers use HMAC-SHA256 signing. If you skip this step, malicious actors could fake payment notifications and trick your system into delivering goods for free. Always implement constant-time comparison for signature verification.

Address Expiration needs handling. Generated payment addresses usually expire after 15-60 minutes to prevent confusion if a customer abandons their cart. Your frontend logic should listen for expiration events and request a new address from the API before showing the old one to the user.

Developer securing assets with hardware wallet

Common Pitfalls to Avoid

Even with great technology, implementation errors can cost you money. Here are the most common mistakes merchants make when switching to non-custodial widgets.

  • Ignoring Blockchain Confirmations: Don't mark an order as "paid" the millisecond you see the transaction hash. Wait for the required number of confirmations (usually 1 for altcoins, 3 for Bitcoin) to avoid double-spend attacks or chain reorganizations.
  • Mixing Networks: Sending USDT on the Ethereum network to an address generated for the Tron network will result in lost funds. Ensure your widget clearly labels the supported network for each asset.
  • Poor Error Handling: Blockchain nodes can be slow or congested. If the widget provider’s node fails to detect a payment within the expected window, your system should have a fallback mechanism to manually check the blockchain explorer or retry the webhook.
  • Underestimating Compliance: While the tech is non-custodial, you are still responsible for tax reporting and local regulations. Tools like NOWPayments and TxNod provide transaction logs, but they don't file taxes for you.

Is It Right for Your Business?

Non-custodial crypto widgets are not for everyone. If you run a highly regulated business in a jurisdiction with strict AML/KYC requirements, you might find the administrative burden of self-managing compliance too heavy. In those cases, a custodial processor that handles identity verification for you might be worth the fee.

However, if you value sovereignty over your capital, operate in a high-risk vertical prone to chargebacks, or simply want to avoid the 2-3% fees charged by traditional payment rails, this architecture is a game-changer. It aligns the incentives perfectly: the provider wants you to succeed so you keep paying the subscription, and you get to keep 100% of your revenue minus minimal network fees.

For solo developers and small teams, the barrier to entry has never been lower. With tools like TxNod offering sandbox environments that simulate blockchain confirmations without real coins, you can test your entire checkout flow in under an hour. You can pair this with AI coding agents to write the webhook handlers and frontend integrations, drastically reducing development time.

What happens if the widget provider goes offline?

Since the funds settle directly to your wallet, the provider's status doesn't affect your ability to receive money. Customers can still send crypto to the generated address. The only impact is that you won't receive automatic webhook notifications until the service is back online. You can always manually check the blockchain explorer to confirm payments.

Do I need to know how to code to use these widgets?

Basic HTML knowledge helps, but many providers offer plugins for popular platforms like Shopify, WooCommerce, and Magento. If you're building a custom site, you'll need to integrate their JavaScript library and set up a simple endpoint to receive webhook callbacks. Providers like TxNod offer detailed documentation and SDKs to simplify this process for developers.

Can customers pay with any cryptocurrency?

It depends on the provider. NOWPayments supports over 100 coins, while others like TxNod focus on a curated list of major chains (Bitcoin, Ethereum, TON, etc.) to ensure reliability and low fees. You can configure the widget to accept only specific assets, such as stablecoins (USDT/USDC), to avoid volatility risk.

Are there any hidden fees with non-custodial widgets?

Reputable providers are transparent. Watch out for gas fees, which are paid by the sender (your customer) to the blockchain network, not the widget provider. Some providers charge a small markup on exchange rates if you offer auto-conversion to fiat, but pure non-custodial models typically charge only a flat subscription or a tiny percentage for the monitoring service.

How secure is my private key information?

In a true non-custodial setup, you never share your private keys or seed phrases. You only share your extended public key (xpub) or connect a hardware wallet via WebUSB/WebHID. The provider uses this public data to derive receiving addresses. Even if the provider's database is compromised, attackers cannot spend your funds because they lack the private signing keys.