
Is This Crypto Payment Processor Legit? A Merchant Due-Diligence Checklist
Ten checks any merchant can run in an afternoon before trusting a crypto payment processor, with BlockBee as the worked example.
How can you tell if a crypto payment processor is legit?
A legitimate crypto payment processor lets you check it. In an afternoon, find the company named in its terms, its published fees, who holds your money, its public docs and code, its status page, its support hours, its policies, whether your business is allowed, what independent reviews say and how it replies, and whether a small real payment arrives. Each check below shows where to find the answer for BlockBee.
BlockBee publishes this blog, so run the same checks on it as on any other provider.
| Check | What to look for | BlockBee's answer (checked on 26 October 2026) |
|---|---|---|
| Company | A named company in the terms | Blockbee Inc., in the Terms and Conditions |
| Fees | Published rates | 1%, down to 0.25% with 30-day volume, plus network fees |
| Custody | Who holds your money | On-chain payments forwarded to your address |
| Docs and code | Public docs, SDKs, plugins | docs.blockbee.io |
| Status page | Uptime per service, with history | status.blockbee.io |
| Support | Channels and hours | Live chat 09:00 to 22:00 UTC, Telegram, email, Discord |
| Policies | Dated terms, privacy and AML policies | All three published |
| Business type | A list of prohibited businesses | In the Terms and Conditions |
| Reviews | Independent reviews and replies | Trustpilot page linked from the homepage |
| Test payment | A way to test before going live | No sandbox; a small real payment |
Who are you signing with?
The terms should name the company you contract with and its registered office. BlockBee's Terms and Conditions, effective 2 October 2026, say the agreement is between you and Blockbee Inc. and give the company's registered office. Its Privacy Policy and AML Policy name the same company. Check that the same name appears on any invoice or receipt, and look the company up in the official business register where it is incorporated.
Are the fees published?
A processor should publish its rates, not give them only on request. BlockBee's fees page, checked on 26 October 2026, says the transaction fee goes "down to 0.25%", plus network fees, based on your volume over the previous 30 days and your industry's risk tier, with no setup, monthly or hidden fees. At the lowest volume, its calculator shows a deposit fee of 1.000% and a payout fee of 0.500%. BlockBee's API lists twelve tiers, from 1% at $0 to 0.25% from $25,000,000 of 30-day volume.
Check your own rate with the fee calculator, and see our guide to crypto payment gateway fees to work out a full month's cost.
Who holds your money?
Find out whether the processor keeps a balance you withdraw or sends payments to a wallet you control. Our guide to custodial vs non-custodial gateways explains the trade-offs.
At BlockBee, each on-chain payment goes to your address once it confirms. With an API Key V1, BlockBee receives each payment and forwards it to the wallet set in your dashboard. If you prepay BlockBee's fees, those credits are a balance held in your BlockBee profile. Bitcoin Lightning payments, available through Checkout and the Point of Sale (PoS) only, settle once a day at 00:00 UTC. The Self-Custodial Wallet, used for payouts, is secured with TSS, so BlockBee cannot move funds without your API key. Losing both the API Key V2 and the Recovery Key makes the wallet's funds permanently inaccessible.
Also read when a processor can hold a payment. BlockBee's Terms and AML Policy say it may suspend or delay the processing or forwarding of a transaction that raises concerns.
Are the docs, SDKs and plugins public?
Public docs and code show how the product works before you sign. BlockBee's documentation at docs.blockbee.io has a quickstart, an API reference and a webhooks guide. The docs list official SDKs for NodeJS, Python, Django, PHP and Ruby, each linked to a GitHub repository, and plugins for WooCommerce, PrestaShop, OpenCart, Magento, Odoo and WHMCS. Look at when the code was last updated.
Is there a status page with history?
A processor that publishes its uptime lets you judge it on evidence. BlockBee's status page, status.blockbee.io, showed 90-day uptime for its Service API and seven network APIs on 26 October 2026, from 99.963% to 100.000%, and links to a status update history. Our guide to judging gateway reliability and uptime explains what to look for.
Can you reach support, and when?
Check the channels and hours before you need them. BlockBee's contacts page, checked on 26 October 2026, lists live chat from 09:00 to 22:00 UTC, its official Telegram channel, [email protected], a contact form and a Discord community. Our guide to support and onboarding lists what to ask, including whether a person answers and how fast.
Are the policies published?
BlockBee publishes Terms and Conditions (effective 2 October 2026), a Privacy Policy (effective 10 September 2025) and an AML Policy (effective 7 September 2026). Read them, note the dates and save a copy of the version you sign up under: BlockBee's Terms say they may be updated "whenever necessary without prior notice".
Then check that your business is allowed. BlockBee's Terms include a list of prohibited business activities. Read it before you integrate, not after your first payout.
What do independent reviews say?
Read reviews on independent sites, not only the quotes a provider picks. Sort by newest, read the low ratings too, and look for patterns, such as funds held or tickets unanswered. Check whether and how the company replies. A star rating is an average, so the number and dates of reviews matter.
BlockBee's homepage quotes customer reviews marked as from Trustpilot and links to its Trustpilot page. Read the full page there, not just the quotes.
Can you test it with a small real payment?
Nothing replaces your own payment. BlockBee has no sandbox or test mode; its docs suggest a small real payment above the coin's minimum: about $1 in Litecoin in the quickstart, or about $2 in the e-commerce guide. Payments below the minimum (0.002 LTC for Litecoin on 26 October 2026) are ignored and the funds are lost; our guide to testing a gateway before you commit covers what to check. Check that the webhook arrives and the funds reach your wallet, then work through our security checklist before you go live.
What are the red flags?
Stop and check further if a processor:
- asks for your seed phrase or private keys;
- promises returns on money you hold with it;
- names no company in its terms;
- gives fees only "on request" and pushes you to sign quickly.
Frequently asked questions
How do I check if a crypto payment gateway is legit?
Run the ten checks in the table above. A provider that can't answer one of them in writing gives you a reason to ask more.
Where can I find a crypto payment processor's Trustpilot rating?
Search for the provider on Trustpilot or follow the link on its website; BlockBee's homepage links to its page. Read recent reviews and the company's replies, not just the score.
Should a crypto payment processor ask for my private keys?
No. To forward payments, a processor needs your receiving address; BlockBee's quickstart asks for a receiving address, not your keys. Never share a seed phrase or private key.
Which company runs BlockBee?
Blockbee Inc., according to BlockBee's Terms and Conditions, which also give the company's registered office.
To run the last check yourself, create a BlockBee account and send a small Litecoin payment.