Crypto Wallet Types Explained: Custodial, Self-Custody, Hot, Cold
Crypto wallet types explained for merchants: custodial vs non-custodial wallets, hot vs cold storage, and a practical wallet setup for payments.
Crypto wallet types are one of the first things a merchant should understand before accepting crypto payments. "Wallet" sounds like one thing, but it covers very different setups depending on who holds the key and whether that key ever touches the internet. This guide walks through custodial and non-custodial wallets, hot and cold storage, and where a payment gateway fits into the picture.
What does a wallet actually store?
A common misconception is that coins sit "inside" the wallet. In reality your USDT or TRX balance always lives on the blockchain. What the wallet stores is the private key that authorises spending from an address, usually backed up as a 12- or 24-word recovery phrase (seed phrase).
That leads to the basic rule:
Whoever controls the private key effectively controls the funds.
Two questions separate wallet types: Who holds the key? and Is the key kept on an internet-connected device?
Custodial wallets
With a custodial wallet, a service provider holds the private key. You sign in with a username and password and see your balance in the provider's records. Exchange accounts are the best-known example.
Pros:
- No seed phrase to guard; if you forget your password there's an account recovery process.
- Easy and familiar, especially for beginners.
- Often bundled with trading and conversion services.
Cons:
- You don't have full control; you depend on the provider's rules, maintenance windows and policies.
- The provider's security is your security.
- If you lose access, you rely on their support process.
Non-custodial (self-custody) wallets
In a non-custodial wallet the private key is yours alone. Mobile apps, browser extensions and hardware wallets all fall into this group.
Pros:
- Full control over your funds; nobody can stop your transaction.
- No third party can freeze your account.
Cons:
- Lose the recovery phrase and the funds are gone for good. There's no "forgot password" link.
- If someone steals the phrase, they steal the funds.
- Every responsibility is yours: backups, device security, address checks.
Hot wallets vs cold wallets
The second split is whether the key is exposed to the internet.
| Hot wallet | Cold wallet | |
|---|---|---|
| Connectivity | Key on an online device | Key kept offline |
| Examples | Mobile app, browser extension, exchange account | Hardware wallet, offline key storage |
| Convenience | High, transactions in seconds | Slower, needs physical confirmation |
| Remote attack risk | Higher | Much lower |
| Good for | Daily spending, small amounts | Long-term storage, larger amounts |
A hot wallet is like the cash in your till: quick and practical, but not where you keep your savings. A cold wallet is more like a safe-deposit box: a little more effort to reach, far harder to attack.
Why hardware wallets stand out
A hardware wallet keeps the private key on a separate physical device and signs transactions inside it. Even if your computer has malware, the key never leaves the device, and you confirm each transaction by pressing a button on it. Buy only through the manufacturer's official channels and avoid second-hand devices.
Where a payment gateway fits among crypto wallet types
With a crypto payment gateway like MercanPay, customers pay to an address generated for each invoice. Once a payment is final after 20 block confirmations, the amount is credited to your merchant balance. That balance is held on the platform until you withdraw it, so in wallet terms it is a custodial model, and you move funds to your own wallet whenever you choose.
What this model saves you:
- Per-customer address tracking, confirmation counting and order matching are done for you.
- Underpayments, overpayments and late payments are handled automatically. See handling underpayments, overpayments and late payments.
- You don't manage TRX or energy on payment addresses, a topic we explain in TRON energy and bandwidth.
The responsibility that comes with it is clear, too: your account security is your balance's security. That's why the panel has two-step sign-in, an email code plus an authenticator code on every withdrawal, trusted-address rules for API payouts and a 24-hour withdrawal lock after a password reset. We walk through each layer in crypto merchant account security.
A practical wallet setup for merchants
There's no single right answer, but this simple structure works for many businesses:
- Collection layer: customer payments build up in your gateway balance.
- Operating wallet (hot): a self-custody hot wallet for day-to-day spending such as supplier payments and refunds. Keep only what you need in the short term.
- Storage wallet (cold): a hardware wallet or offline setup for amounts you plan to hold longer.
Withdrawing your balance to your own wallet on a regular schedule, say weekly, spreads risk and keeps your records tidy. The steps are covered in the crypto balance withdrawal process.
Save addresses instead of pasting them
Store your payout addresses as saved addresses in the panel. Pasting a long TRON address every time invites address poisoning attacks and clipboard-swapping malware. Before sending a large amount to a new address for the first time, send a small test; the minimum withdrawal is $10 worth.
Ground rules for your recovery phrase
With self-custody the biggest risk is human, not technical:
- Write the phrase on paper or a metal plate; no screenshots, no cloud notes.
- Keep backups in at least two separate physical locations.
- Never share it. No legitimate support team will ask for your recovery phrase; anyone who does is a scammer.
- If several people on your team need access, write down who can access what.
FAQ
Can't I just take payments straight into my own wallet?
You can, but then you have to match every payment to an order by hand, chase underpayments and late payments, and watch confirmations yourself. We compare both approaches in how to accept USDT (TRC20) payments.
When can I withdraw my MercanPay balance?
Any time, as long as no withdrawal lock is active on your account. The minimum withdrawal is $10 worth and the withdrawal fee is $1–3.
Can I send TRC20 USDT to a cold wallet?
Yes, if the wallet supports the TRON network. Before sending, confirm the address is a TRON address starting with T. See TRC20 address format and validation.
Are hot wallets unsafe?
No. Used sensibly they're a practical tool for daily transactions. Keep only what you need in them and look after the device.
Get started with MercanPay
Once your wallet setup is in place, the easiest way to get paid is a ready-made gateway. Apply for a merchant account to accept USDT and TRX on TRC20 and withdraw to your own wallet whenever you like.
