Every crypto payment gateway turns a price into a payable amount and tells your store when the money has arrived. Where they differ is where the software runs and who touches the funds. Those two questions decide your fees, your risk and how much work you take on. Here is a practical way to choose.
What is the difference between a hosted and a self-hosted crypto gateway?
A hosted gateway is a service run by a company. You sign up, connect your store with an API key, and the provider handles the payment page. In the classic custodial setup, customers pay to addresses the provider controls, the provider credits your balance and pays you out later, in crypto or converted to fiat. Coinbase Business (which replaced Coinbase Commerce in 2026), BitPay, CoinGate, NOWPayments and CoinPayments are all hosted services, but their custody and settlement terms differ, so read each one's current documentation.
A self-hosted gateway is software you install on your own server. Customers pay straight to addresses from your own wallet, and the software only reads the blockchain to confirm payments. BTCPay Server and Payfim both work this way, although they are built differently: BTCPay is a free, open-source server usually deployed with Docker, while Payfim is a PHP application that runs on ordinary shared hosting with a paid module for each store platform.
How do the two models compare side by side?
| Question | Hosted gateway | Self-hosted gateway (Payfim) |
|---|---|---|
| Who holds the coins after payment? | Usually the provider, until payout | You, from the first confirmation |
| Per-transaction fee | Typically a percentage per payment (check each provider) | None; one-time license |
| Signup and identity checks | Business onboarding, often with KYC/KYB | None with Payfim |
| Can your account be frozen? | Yes, under the provider's terms | There is no account to freeze |
| Payout in local currency | Often available | No; you convert on an exchange yourself |
| Server maintenance | None | You keep PHP, the gateway and a cron job running |
| Checkout branding | Provider's page, sometimes customizable | Your domain, logo and colors; white-label option |
| Where customer and order data lives | With the provider | In your own database |
For provider-specific details, our comparisons cover Coinbase Commerce, BitPay, CoinGate, NOWPayments, CoinPayments and BTCPay Server, each with sources.
When is a hosted crypto gateway the better choice?
Hosted providers are genuinely better in a few situations, and it is worth being honest about them:
- You need fiat in the bank. If your suppliers, payroll and taxes are all in euros or dollars and you never want to hold crypto, automatic conversion and bank settlement save you a step every week.
- You have no one to look after a server. A hosted service needs no updates, no cron job and no database backups on your side.
- You want Lightning or a long tail of tokens. Some hosted providers support the Lightning Network or dozens of coins that a focused self-hosted tool does not.
- Your auditors want a regulated counterparty. Some businesses prefer a licensed provider in the payment chain for their own compliance reasons.
When does self-hosting make more sense?
- Your volume is growing. Percentage fees scale with revenue; a license does not. See the worked example below.
- Your industry gets flagged. Hosting, VPNs, digital goods and high-chargeback niches are often labeled "high risk". With no processor, there is no risk team to satisfy.
- You want the money now. Coins arrive in your wallet with the customer's transaction. There is no balance to withdraw and no minimum payout.
- You care about the checkout experience. The customer stays on your own subdomain, such as
pay.yourstore.com, in one of six languages, with your branding. - You want fewer third parties holding customer data. Invoices, emails and order references stay in your own database.
What does each model cost as you grow?
Hosted fees vary by provider and plan, so treat this as a sketch rather than a quote. Suppose a processor charged 1% per payment (check the provider's current pricing page for the real figure). On $5,000 a month in crypto sales that is $50 a month, or $600 a year. At $30,000 a month it becomes $3,600 a year, and it keeps growing with every sale.
A self-hosted setup has a different shape. Payfim is a one-time license per platform, for example $20 for WooCommerce or $15 for WHMCS, with 12 months of updates included and an optional $9 yearly renewal per module after that. You also pay for hosting you likely already have. Customers pay the blockchain network fee either way. At that hypothetical 1%, a $20 license is covered by the fees on the first $2,000 of sales. For card comparisons, see crypto vs card fees.
One cost self-hosting does not remove: if you want fiat, you pay an exchange to convert, and that exchange may apply its own fees and verification.
Is a self-hosted gateway less secure?
It shifts risk rather than adding it. With a hosted provider, your biggest risks are the provider's solvency, its security and its willingness to keep serving you. With a self-hosted gateway, the question is your own server. Payfim is designed so that a compromised server still cannot move money: it only stores public receiving addresses, never private keys or seed phrases. Invoices are created server to server so prices cannot be edited in the browser, webhooks are signed with HMAC-SHA256, and the store re-checks every invoice with the gateway before marking an order paid. The security overview and our checkout security checklist explain what you still need to do yourself, such as enabling 2FA and keeping PHP updated.
How much technical work does self-hosting really take?
For Payfim, the requirements are modest: PHP 7.4 to 8.4, MySQL or MariaDB, cURL and HTTPS, which most cPanel shared hosting plans provide. Installation means uploading files, running a web installer, adding your wallet addresses and creating one cron job that runs every minute. The install guide walks through it with screenshots, and an installation service is available for $10 if you would rather not do it yourself.
After that, maintenance is the same as for any PHP app: apply updates, keep backups, and glance at the System status page now and then. Payfim's license check is signed and has a 72-hour grace period, and an outage at payfim.com never blocks your checkout.
What should you ask a provider before you commit?
Whichever way you lean, put the same questions to every option on your shortlist, and get the answers from the provider's own documentation rather than a sales call:
- Who controls the receiving addresses, and at what point do the coins become mine?
- What is the full fee per payment, including conversion spreads and payout or withdrawal fees?
- Which business types are restricted, and what triggers an account review?
- What happens to funds in transit if the service is down or my account is suspended?
- Which exact coins and networks are supported (USDT on TRON and USDT on Ethereum are different things)?
- How are underpayments, late payments and overpayments handled, and who decides?
A self-hosted tool should answer the first four questions with "you" and "nothing", and the last two with settings you control. If it cannot, it is not really self-hosted.
Can you use both?
Yes. Nothing stops a store from offering a hosted processor for customers who need a specific coin and a self-hosted gateway for the popular ones. Some merchants start hosted, learn which coins their customers use, then move those to self-hosted to cut fees. If you do run both, give the payment methods clear names at checkout so customers are not confused.
A simple way to decide
Ask three questions. Do you need automatic fiat settlement? If yes, lean hosted. Would a week-long account freeze seriously hurt you? If yes, lean self-hosted. Is there someone who can install a PHP app and keep it updated? If no, lean hosted or buy installation help. Most small and mid-sized stores that answer "no, yes, yes" end up happier self-hosting.
Sources
Third-party facts were checked on the date shown above. Prices and features of other services change - always confirm on their official pages.