Skip to content

Skip building your own treasury stack

You already take crypto — the question is what runs the wallets. Settle player deposits and pay winners on managed custody instead of a treasury stack you stand up and secure yourself. One all-in rate on both legs, and a 2-of-3 signing quorum so no single laptop moves the float.

Skip building your own treasury stack

The two choices a crypto-native operator is stuck between

Why does running a crypto cashier get harder, not easier, at volume?

You already take stablecoins, so card pain isn't the story. The friction is custody — a thin gateway skims you, a self-built one exposes you, and both leak a signal your ledger can't trust.

A "0.5%" gateway isn't 0.5% once it settles

The headline rate is the bait. The thin gateway you started on leads with a low number, then layers on a swap markup, a transfer charge and merchant-paid network gas — counted on the deposit and again on the payout. At a few thousand deposits a day, the gap between the advertised rate and the settled rate is a line item finance can measure on both legs.

The alternative is running a treasury stack that isn't your business

Outgrowing the thin gateway usually means standing up custody in-house: key sharding, signing policy, sweep logic, hot-wallet monitoring, on-call. That's a security program with a headcount, and it has nothing to do with shipping games. One key-handling mistake is existential, and you carry that exposure every day the lights are on.

One laptop can drain the float

Most early setups sign payouts from a single hot wallet — manageable while the balance is small, a single point of failure once it isn't. With no signing quorum, a compromised machine or one rogue insider is enough to move the entire treasury. The risk doesn't stay flat; it scales with every dollar you hold.

A confirmation signal you can't build a ledger on

Thin gateways often ship unsigned or replayable webhooks and a sandbox that drifts from production. A retried delivery double-credits a player; an integration that passed in testing breaks at go-live. At volume, where retries are constant, an untrustworthy signal turns into reconciliation incidents your finance team chases after the fact.

Managed custody under your control

What does the cashier look like once the custody problem is off your plate?

The thin-gateway tax and the self-built risk both disappear at once — managed signing you still gate, a quorum no one person overrides, one honest rate on both legs, and a signal your ledger can treat as authoritative.

Custody you direct, infrastructure you don't run

Paymos runs key custody, signing and sweeps; you keep the decisions. Deposits credit your Paymos balance, and a payout leaves only as an operator-initiated transfer once your team approves it — wallets can't be pulled, so nothing moves on its own. You hold the trigger without carrying the on-call rotation, the key shards, or the breach exposure.

No single signer can move the float

Every outbound transfer is signed by a 2-of-3 quorum, so a stolen key or one compromised laptop isn't enough to send. Your team requests the payout with the player's whitelisted address and amount; it broadcasts only after your rules and the quorum both clear. The risk that used to scale with your balance is capped by the signing model itself.

The quoted rate is the rate you settle at

One number, both legs. Paymos is 1.0% all-in and absorbs the inbound network gas, so the player's stablecoin lands in full — no exchange markup, no separate transfer charge, no second cut stacked on the payout the way teaser gateways do. Same-token settlement means a dollar stablecoin in is a dollar stablecoin out. Full breakdown in Pricing.

A ledger that stays correct under load

Webhooks are HMAC-SHA256 signed and idempotent, keyed by your external id, so a retried or replayed delivery credits a player exactly once. Sandbox runs the same code paths as production, so what passes in QA is what ships. Your reconciliation holds through peak traffic instead of generating tickets after it.

How the cashier behaves once custody is managed

Which flows run cleanly when volume and float both climb?

Four patterns crypto-native operators run — the everyday deposit, the cash-out on a win, the high-roller reload, and one consolidated treasury behind all of it.

Everyday deposit — Embedded Checkout

The standard top-up. A player funds their balance in your cashier, the stablecoin deposit clears in seconds, and an idempotent webhook credits them exactly once even when the delivery retries. The funds credit your Paymos balance with no exchange markup skimming the way in and a confirmation your ledger treats as final.

Cash-out on a win — Host-to-Host API

A player withdraws, your AML rules clear it, and your system calls the payout API. A single quorum-signed transfer reaches the player's whitelisted wallet in seconds — no hot-wallet single point of failure to worry about, no review hold, and the same all-in rate as the deposit instead of a second payout cut.

High-roller reload — Payment Link

A large funding from a top player, often arranged off-platform. The host sends a one-off link; the player pays from an exchange withdrawal or their own wallet; your treasury credits in seconds and the cashier reflects it. The big balance lands the same moment, with no address copied by hand and nothing parked in a reserve.

One treasury behind every game

Players deposit the same dollar stablecoin from whatever wallet and network they hold, and you carry one balance per asset instead of a sprawl of hot wallets. Sweeps and signing happen platform-side, so finance reads a single consolidated position and every payout draws from it under the quorum.

Custody, signing and scale, answered

Frequently asked questions

If Paymos holds custody, who actually controls the float?
You do. Paymos runs the signing infrastructure, but every payout is operator-initiated — wallets can't be pulled, and nothing leaves until your team requests it with a whitelisted address and amount. Custody here means a wallet you direct, not a third party that warehouses your balance: Paymos doesn't lend it, doesn't yield on it, and can't send from it on its own.
How does the signing model stop a single person draining the balance?
Outbound transfers use MPC threshold signing with a 2-of-3 quorum, and no single private key is ever assembled in one place. A stolen credential or one compromised laptop can't authorise a send on its own. Your system requests the transfer with the player's whitelisted wallet, amount and asset; Paymos co-signs and broadcasts only once your rules and the quorum both clear.
Do I still hold the same stablecoin the player deposited?
Yes — a dollar stablecoin deposit credits your Paymos balance in the same asset, with no forced swap and no currency conversion. Nothing converts your balance to another token to skim a markup on the way in or out. If you choose to rebalance, that's a treasury decision you make on your own schedule, separate from the payment.
Does Paymos run player KYC, or do I keep that?
You keep it. Paymos adds no identity layer to the cashier — no player onboarding, no wallet vetting, no deposit gated on a verification result. Whatever provider you already run for KYC and AML keeps that job; Paymos moves the money and stays out of player identity. It also runs no category or licence review on you — that obligation is yours.
How close is sandbox to production for this integration?
Sandbox runs the same code as production — same API contract, same HMAC-SHA256 webhook signing, same payout flow and status machines, with testnets the only difference. The latency, retry behaviour and signing flow you measure in sandbox are what ships, so a load test rehearses go-live instead of approximating it.
Will the rail hold up as deposits and the float climb?
That's the case it's built for. The rail scales horizontally with no per-transaction throttle, and deposits across networks confirm in parallel; confirmation depth is the only physical wait, set per network and amount. One consolidated balance per asset and the quorum signing are designed to hold as both deposit volume and the balance you carry grow.

Honest disqualifier

When NOT to move your cashier onto Paymos

Four setups where managed-custody stablecoins are the wrong tool — better to know before you wire anything up.

Your players bet in BTC, ETH and native coins

Paymos is stablecoin-only by design — USDT, USDC and the other supported families, never BTC, ETH or SOL as a payment asset. That keeps the balance you owe players free of price swings, but if "deposit any coin" is the pitch, you'll run a swap layer in front or a second gateway for the volatile assets.

You need a custodian of record holding player funds

Managed custody here means a wallet you direct and sign from under a quorum — not a regulated third party that takes title to the balance, insures it, or yields on it. If your licence, board or insurer requires a custodian of record for player funds, that's a different kind of provider; Paymos is the rail, not the custodian on the paperwork.

Finance has to close the books in fiat each day

Settlement ends at the stablecoin to your Paymos balance. There's no built-in cash-out to a bank, no EUR or USD wire, and a refund is an outbound transfer you send back, never a gateway reversal. If the daily close has to land in a bank account, you'll run the exchange step yourself — budget for it, or keep a provider that converts.

Your deal requires automatic splits to studios

Paymos settles each deposit in full to one balance you control — no sub-merchant accounts, no processor-side split to a game studio or aggregator. If your platform contract needs a revenue share carved off each deposit automatically, that allocation stays in your back office; this rail won't divide it on the way in.

Pricing

1.0% per settled deposit, all-in. Inbound gas on us

The same rate on the deposit and the payout, with same-token settlement — no exchange markup, no separate transfer fee, no second processing cut on the way out. On a cash-out Paymos takes zero commission; you pay only a reduced network fee, less than the chain would charge you direct. High-volume operators move to 0.3% on request. The thin gateway you're comparing against advertises from 0.5% but settles nearer 1.5–2% once swap, transfer and gas land on both legs — and running custody yourself trades that fee for a security program and an on-call team.

See pricing

Keep the decisions, hand off the key management