Non-custodial crypto payments mean your funds stay in your own wallet until the exact moment of settlement. Unlike custodial platforms that require you to deposit crypto into their accounts before they can process a payment, TrustLinq’s architecture never takes ownership of your USDT (ERC-20 and TRC-20), USDC, EURC, and RLUSD at rest. Your assets sit in a smart contract vault dedicated to your specific payment, not pooled with other users’ funds, and not accessible to TrustLinq outside the defined payment window.
This distinction matters more than most people realise. The collapse of several major custodial crypto platforms in recent years demonstrated that depositing funds into a platform’s account introduces real counterparty risk. TrustLinq’s non-custodial model eliminates that risk by design.
What Non-Custodial Means in a Payment Context
The term “non-custodial” is used loosely in crypto, so it is worth being precise. In a custodial payment model, you send your stablecoins to the platform’s wallet. The platform holds those funds on its balance sheet, converts them when it chooses, and processes the settlement. If the platform is hacked, becomes insolvent, or restricts withdrawals, your funds are at risk.
In TrustLinq’s non-custodial model, you send your stablecoins directly to a smart contract vault generated specifically for your payment. TrustLinq does not control that vault until AML and KYC compliance checks clear. Once cleared, the smart contract authorises the conversion and immediately releases fiat to the recipient’s bank account. Furthermore, if a payment cannot complete for any reason, the smart contract returns your stablecoins automatically to your wallet. TrustLinq never retains your crypto.
For a broader overview of how this settlement model works end to end, see our guide to crypto-funded fiat settlement.
How TrustLinq’s Smart Contract Vault Works Step by Step
Understanding the vault architecture makes the security model concrete. Here is exactly what happens when you initiate a non-custodial crypto payment through TrustLinq.
Step 1: A Unique Vault Is Generated for Your Payment
When you create a payment in TrustLinq, the system generates a dedicated smart contract vault address for that specific transaction. This is not a shared wallet or an omnibus account. It is a single-purpose vault that exists only for your payment. Consequently, your funds are never commingled with those of other TrustLinq users at any point.
Step 2: You Send Stablecoins from Your Own Wallet
You initiate a transfer from your self-custodial wallet, sending USDT (ERC-20 or TRC-20), USDC, EURC, or RLUSD to your assigned vault address. Your private keys never leave your wallet. TrustLinq has no access to your wallet and cannot initiate transfers on your behalf. The payment only moves when you choose to send it.
Step 3: Compliance Screening Runs Before Conversion
Once your stablecoins arrive in the vault, TrustLinq’s AML and KYC screening runs on both the sending address and the recipient. This is required under Swiss FINMA and SO-FIT regulation. The vault holds your funds in smart contract escrow during this window. TrustLinq cannot release funds to the recipient, nor retain them, until compliance clears.
Step 4: Conversion and Fiat Settlement Execute Automatically
On compliance clearance, the smart contract authorises the conversion of your stablecoins to fiat at real-time market rates. TrustLinq then delivers the fiat directly to the recipient’s bank account in their local currency. The entire process from vault funding to bank settlement typically completes within 2 to 4 hours.
Step 5: Failed Payments Return Automatically
If a payment cannot complete, whether due to compliance flags, recipient bank issues, or any other reason, the smart contract returns your stablecoins to your originating wallet. TrustLinq does not hold failed payment funds. There is no manual intervention required on your part.
What TrustLinq Never Holds
To be explicit about what non-custodial means in practice, TrustLinq never holds the following: your crypto in a pooled or omnibus account; your private keys or wallet credentials; your stablecoins at rest between payments; fiat funds after settlement is confirmed; or any assets outside the defined window of an active payment. Additionally, TrustLinq does not appear as a custodian in your audit trail. Your compliance team and auditors see stablecoins leaving your vault and fiat arriving in recipient bank accounts, with a Swiss-regulated intermediary processing the conversion.
Why Non-Custodial Crypto Payments Matter for Security
The security argument for non-custodial crypto payments became undeniable after 2022. Multiple custodial platforms froze withdrawals, restricted access to customer funds, or collapsed entirely, taking user assets with them. In every case, the root cause was the same: users had deposited funds into platform accounts, surrendering control.
TrustLinq’s non-custodial architecture means a platform-level security incident cannot affect your holdings. Your stablecoins are in a smart contract vault, not on a platform balance sheet. The worst-case scenario at the platform level is that an in-progress payment is delayed or returned, not that your funds disappear. Moreover, because each vault is transaction-specific, even a vault-level compromise would affect only one payment, not your entire balance. See also: how TrustLinq compares to custodial crypto processors.
Non-Custodial vs. Self-Custodial: Understanding Both Terms
These two terms are often confused, and the distinction is important. Self-custodial means you hold your own private keys in a wallet you control, such as a hardware wallet like Ledger or a software wallet like MetaMask. Non-custodial describes how a payment service handles your assets during a transaction.
Both concepts apply simultaneously when using TrustLinq. You hold your stablecoins in your self-custodial wallet. When you initiate a payment, TrustLinq processes it non-custodially, meaning it never takes ownership of your assets. This combination gives you the strongest possible security model: full control before and after the payment, and zero custody risk during it.
Swiss Regulation and the Non-Custodial Classification
TrustLinq operates as a Swiss-regulated financial intermediary under FINMA oversight and SO-FIT licence 1531. Swiss law draws a clear distinction between intermediaries that hold client assets (custodians) and those that process payments without custody (payment processors). TrustLinq’s non-custodial architecture directly determines its regulatory classification.
This matters for your compliance documentation. When your auditors, legal team, or tax advisors ask how your stablecoin payments are processed, you can demonstrate that a Swiss-regulated payment processor handled the conversion without ever holding your assets. There is no custodial relationship to declare, no exchange account on your balance sheet, and no counterparty exposure beyond the duration of an individual transaction. According to FINMA’s regulatory framework for financial intermediaries, this classification carries significantly lighter regulatory requirements than custodial arrangements. For further reading on Swiss crypto regulation, see our detailed guide to Swiss crypto regulations and compliance.
Which Stablecoins Work with TrustLinq’s Non-Custodial Model?
TrustLinq currently supports USDT (ERC-20 and TRC-20), USDC, EURC, and RLUSD for non-custodial payments. USDT is available on both the Ethereum (ERC-20) and Tron (TRC-20) networks. USDC and EURC run on ERC-20. RLUSD is Ripple’s regulated stablecoin on ERC-20. All four can be sent from your self-custodial wallet to the payment vault. Recipients receive fiat in their local currency regardless of which stablecoin you use. For more on how to use these stablecoins to pay any bank account, see our guide on how to pay any bank account with crypto.
Frequently Asked Questions
TrustLinq processes the conversion and settlement without ever owning your funds. Each payment uses a dedicated smart contract vault. TrustLinq cannot retain your stablecoins, use them for other purposes, or restrict your access. The vault releases funds automatically on compliance clearance and returns them automatically if the payment cannot complete.
TrustLinq supports USDT (ERC-20 and TRC-20), USDC, EURC, and RLUSD. All four can be sent from your self-custodial wallet to the payment vault. The recipient receives fiat in their local currency regardless of which stablecoin you use.
If a payment cannot complete for any reason, the smart contract automatically returns your stablecoins to your originating wallet. TrustLinq does not hold or retain funds from failed or rejected payments.
No. TrustLinq operates as a payment processor, not an asset custodian. It holds SO-FIT licence 1531 as a Swiss financial intermediary in the payment processing category. Your stablecoins are never held on TrustLinq’s balance sheet at rest.
Because your funds are in a smart contract vault rather than on TrustLinq’s balance sheet, a platform-level security incident cannot affect your holdings. In the worst case, an in-progress payment could be delayed or returned. Your overall balance is never at risk from platform failure.
No. TrustLinq has no access to your wallet and cannot initiate transfers on your behalf. The payment only moves when you choose to send stablecoins to the vault address. Your private keys remain entirely under your control throughout.
Use Your Crypto for Real-World Payments
TrustLinq enables crypto-funded fiat settlement for individuals and businesses worldwide. Register once and pay any third party using your self-custodial crypto.
