GFPAY card review: the fees, the limits, and the trade-offs I found while reading every public page

Updated October 2026

Licensed

Available in US

Fast payouts

18+ Only

GFPAY is one of those crypto cards that you arrive at after your usual bank has said no. The pitch is simple: a prepaid Mastercard, virtual or physical, paid from a crypto balance, with onboarding that asks for an ID and a proof of address. The reality, once you sit down with the fee table, is more expensive than it first looks. I went through the card’s overview, FAQ, terms and every fact the company publishes in public, and what follows is my honest read of who this card makes sense for and where it falls short.

The conditions below are current as of October 28, 2026.

Verdict

GFPAY gets 5.0 out of 10 in my reckoning, and most of the lost ground is on cost. The card is widely available and the everyday mechanics are familiar: a virtual Mastercard for online and mobile-wallet spending, an optional plastic card for shops and ATMs, USD and EUR balances, 3-D Secure on online payments, and a five-percent load fee every time you top up. None of that is unusual for the category. What is unusual is the size of the stack: fifty dollars to issue the card, ten dollars a month just to keep it, two percent on every foreign-currency transaction, thirty cents on every purchase, four dollars plus one percent at the ATM, and the same five-percent reload on top of any network fee you pay when you send crypto in. A user who loads two hundred dollars, spends it over a month on a mix of online and in-store purchases, and pulls out a hundred from an ATM can easily give back more than ten percent of the value in fees before they have bought anything useful with the card.

I scored it the way I did because the structural pieces are in place but the economics are unfriendly, and the trust signals are thin. The card is best suited to someone who already lives in crypto, wants a Mastercard they can take to a real shop, and is willing to pay for the convenience. It is not the card for someone who needs a cheap everyday spend account, and it is not a card I would hand to a newcomer to the category.

If you need a Mastercard that you can fund from crypto, that part of GFPAY works. If you need a cheap way to spend, look at the alternatives further down before you put fifty dollars into the issuance fee.

Who will they give you the card

GFPAY’s overview says the card is available globally except for a list of prohibited countries. The list is long enough to copy here in full, because the countries named are the ones that cannot get the card no matter what the rest of the application looks like: Afghanistan, Albania, Belarus, Bosnia and Herzegovina, Croatia, Cuba, the Democratic Republic of the Congo, Ethiopia, Iran, Iraq, Lebanon, Libya, Mali, Montenegro, Myanmar, North Korea, Palestine, Russia, Somalia, South Sudan, Sudan, Syria, Ukraine, Venezuela, Yemen, Zimbabwe, and the Central African Republic. That is twenty-seven countries in total. The list is broadly aligned with the kind of country blocks you see in sanctions guidance and high-risk-jurisdiction lists, but GFPAY does not say which of these reasons drove which exclusion, and it does not say what happens if a customer’s nationality differs from where they actually live.

The card’s pages also do not say what the test is. The overview is silent on whether they look at citizenship, residence, the address on your proof of address, the country that issued your ID, or all of the above. In practice, this is the kind of detail the underwriting team decides at the point of application, and the absence of a stated rule means the question gets answered case by case. If you are in a country that is on neither the allowed nor the prohibited list, you are likely to be fine, but the public pages do not promise that.

The minimum age is the standard one for prepaid cards: you need to be an adult in your country, and the terms say that minors need guardian permission. The card’s FAQ does not set a specific number above eighteen for any tier, and there is no separate programme for business or corporate users described in the public material.

How to get it

The application path follows the shape of a typical regulated card programme. You go to the website, you start an account, you provide the documents the operator asks for, and once those are accepted you can order a card.

The documents are the usual identity and address set. For identity, GFPAY accepts a passport, an ID card, a driver’s licence or a residence permit, and the ID has to be valid for at least six months from the day you apply. For address, you need a recent document showing where you live, and the rule differs slightly between pages: the overview says no older than seventy-five days, the physical-card FAQ says no older than ninety days. Accepted documents for address include a bank statement or a card statement, and the difference between the two numbers is the kind of small inconsistency you should expect between marketing and operations material.

Once your documents are in, the company does not publish a service-level agreement for review time. I did not find a stated processing time for KYC, and I did not find a stated processing time for issuance. The physical card FAQ says the card ships the next business day after payment, or within three days after the invoice is paid, which gives you a rough idea once the financial side is settled. The delivery cost is invoiced separately, and the amount is not stated. GFPAY also says physical cards are shipped only to countries on an “approved countries” list, but that list is not published on the open pages I read, so the safe assumption is that you confirm your shipping address with support before you pay for delivery.

The card itself is a prepaid Mastercard. It comes in two forms: a virtual card that you can add to a mobile wallet right away, and a physical card that arrives by post. The overview says you can hold up to three cards per user; the physical-card FAQ says up to four physical cards. Both are Mastercard-branded, both run in USD or EUR, and both have 3-D Secure turned on for online purchases. The overview mentions tokenization for the physical card as “coming soon”, which I read as meaning it is not available at the time of writing.

GFPAY also offers gift cards in its FAQ, with a ten-dollar creation fee, a five-percent load fee, and a Bitcoin top-up option, although the gift card is prepaid in fiat, not paid out in crypto. The detail matters because it tells you that the operator has more than one card product in the suite, and the gift-card FAQ references Bitcoin in a way the main card FAQ does not.

What it really costs

The cost section is where GFPAY loses the most marks in my review, and I want to lay it out plainly because the fees interact with each other in ways the headline numbers do not show.

Card acquisition is fifty US dollars. The overview says activation is free, but the physical-card FAQ says activation is ten dollars, with the worked example that a one-hundred-dollar initial deposit covers acquisition and activation, leaving a net forty dollars on the card. Treat activation as paid unless you can confirm otherwise. Monthly maintenance is ten dollars, and the card is cancelled if the balance is not enough to cover the fee. The first time you put money on the card, you are hit with a five-percent top-up fee, and that fee applies to subsequent loads as well. Every online or in-store purchase costs thirty US cents per transaction on top of any currency conversion. Foreign-currency transactions cost two percent on top of the wholesale rate, and the rate the company itself uses to convert your crypto to fiat is not stated in the public material.

At the ATM, you pay four dollars plus one percent per withdrawal, plus a one-dollar fee if you only want to check your balance, and the maximum you can pull is one thousand dollars per transaction and per day on the overview, with twenty-five transactions per day. The physical-card FAQ gives different numbers: two thousand dollars per day, twenty thousand dollars per month, and sixty percent of the balance, and the difference between the overview and the FAQ is large enough that I would check the live terms before relying on either set of limits.

The card is “single programme” in the sense that the public material does not describe tiered or premium versions. You get a virtual card and a physical card, and that is it. There are no stated cashback or rewards points in the public pages, and the company does not publish a loyalty programme. If you have seen a “Pro” or “Metal” version mentioned elsewhere, that is not what the card’s own website describes.

To make the fee stack feel real, walk through three everyday situations. The first is a sixty-dollar online subscription paid in US dollars from a US-dollar balance. You load sixty dollars, the five-percent top-up costs you three dollars, and the purchase itself costs you thirty cents, so the subscription effectively costs sixty-three dollars and thirty cents before the subscription fee is added. The second is a forty-euro dinner in Paris paid from a US-dollar balance, which counts as a foreign-currency transaction. You load enough to cover it, you pay the five-percent load, the FX fee is two percent of the converted amount, and the thirty-cent purchase fee is on top, so the dinner ends up costing noticeably more than the menu price. The third is a one-hundred-dollar ATM withdrawal. The four-dollar flat ATM fee plus one percent comes to five dollars, the load that funded the withdrawal already had a five-percent cost, and the balance-inquiry fee applies if you check your balance at the ATM first. The headline number is one hundred dollars. The real number is closer to a hundred and ten.

How to top it up

Topping up GFPAY starts with a transfer to the right network, and the card’s own pages do not list which coins or which networks it accepts. The overview is silent on both, and an earlier check of the company described the card as “stablecoin-focused, multichain”, which I would read as a reasonable working assumption: a card that wants low volatility between load and spend tends to lean on USDT and USDC, and a card that talks about “multichain” usually means it accepts a small menu of common networks rather than every chain. None of that is stated by the company, so treat it as a working hypothesis rather than a fact until you see the deposit address in the dashboard.

When you make a transfer, you pay a five-percent top-up fee on the amount you load, plus whatever the underlying network charges. On-chain network fees are charged by the blockchain, not by the card provider, and they vary by chain and by congestion. If you send on Ethereum during a busy hour, the network fee can be several dollars; if you send on a cheaper chain, it can be a few cents. The company does not say who pays the network fee, so the safe reading is that you do. The minimum load is fifteen dollars and the maximum is one hundred thousand dollars, and the first deposit if you are funding an online-purchase card is one hundred dollars.

There is a structural limitation worth knowing up front. The card FAQ for the product suite says funds cannot be converted back to crypto, and they cannot be moved between cards. If you load two hundred dollars, you can spend those two hundred dollars at shops or pull them out at an ATM, but you cannot turn the balance back into USDT and send it to your own wallet. Once the money is on the card, it is fiat, and it has to come out as fiat or be spent as fiat.

Account closure is one of the more concerning details in the funding section. The card FAQ reserves the right for GFPAY to terminate accounts without notice, and the terms do not publish a closure balance or a payout timetable. If you keep a balance on the card for a rainy day, that balance is at the operator’s discretion until you spend it. The safer pattern is to load only what you intend to spend in the next few days and to keep the bulk of your funds in a wallet you control.

Paying with it every day

The everyday experience is the strongest part of GFPAY, which is why the everyday-use score is higher than the cost score. The virtual card adds to mobile wallets, the physical card works at point-of-sale terminals and at ATMs, and online checkouts are protected by 3-D Secure. The plastic card is not tokenized, and the overview says it is not compatible with Apple Pay or Google Pay, so the contactless phone experience is a virtual-card feature rather than a physical-card one.

The card runs in US dollars or euros. If you load dollars and spend dollars, you avoid the two-percent FX fee. If you load dollars and spend euros, or load euros and spend dollars, the two-percent FX fee is added on top of whatever wholesale rate the operator uses, and that wholesale rate is not stated publicly. The dashboard is a web dashboard at dashboard.gfpay.net, and the company does not publish a mobile app. If you want to freeze the card, check the balance, or see recent transactions, you do that in a browser, not in a phone app.

There is no published rewards or cashback programme. You will not earn points, miles, or any percentage back on what you spend, and the company does not describe any sign-up bonus. The value of the card is the convenience of spending crypto at a Mastercard-accepting merchant, not any return on the spend.

There are also restrictions you should know about. The card’s overview lists “quasi cash” purchases, which include crypto, travellers’ cheques and gift cards, as a category that may decline. If you try to buy a cryptocurrency exchange top-up, a prepaid gift card, or a travellers’ cheque product with the card, the transaction can be refused by the issuer. The overview also mentions the general expectation that the card is for personal use, and disputes follow a fixed path: you have thirty days to negotiate with the merchant, and if that fails, binding arbitration under the International Chamber of Commerce in Dubai. Prepaid gift cards are explicitly non-refundable. Chargebacks are not mentioned in the public material, and you should not assume you have chargeback rights on a prepaid card.

What can go wrong

I went looking for complaints and incidents, and I did not find any. There is no GFPay page on Trustpilot, no thread of complaints on Reddit, and no public incident I can point to. The absence of a complaint trail is not the same as the presence of a good track record, especially for a card where the issuer is not named, but I will say what I see: nothing in the public record, and nothing in the public record is also what the operator can point to.

The company is GFPAY SOLUTIONS — FZCO, registered in Aspin Commercial Tower on Sheikh Zayed Road in Dubai, in the United Arab Emirates. FZCO is a free-zone company structure, common in Dubai for international service businesses. The card’s pages do not name the issuing bank, do not name the regulator, and do not name the licence under which the card is issued. The terms are governed by UAE law, and disputes go to binding arbitration at the International Chamber of Commerce in Dubai. For a user in Europe or the Americas, that means any unresolved complaint is a Dubai-seated arbitration, with the cost and friction that implies.

The support story is the part I find weakest. The support site at gfpay.biz/support did not resolve on the day I checked. The dashboard at dashboard.gfpay.net is the operational hub, but the company’s main support channel was not reachable, and the company does not publish support hours, languages, or response-time targets. There is a Telegram channel, and the company does not publish its hours or the languages its team handles. The terms of service are dated October 2023 and the overview carries a 2025 copyright, which is a small inconsistency but worth noting if you are looking for the most recent legal text.

The account-closure clause is the other risk I want to flag. The card’s FAQ reserves the right to terminate accounts without notice, and there is no published balance-refund timetable. Combined with the lack of a named issuer and the lack of a named regulator, that means a user with money on the card is taking the operator’s word that the operator will let them spend it. The reasonable mitigation is to keep the balance small and to top up only when you need to spend.

On the security side, the card has 3-D Secure enabled, which is the standard for online card payments and which shifts liability for fraudulent online transactions from the merchant to the issuer under the network’s rules. The custody model is not stated, which means the company does not say whether the crypto is held in a pooled custodial wallet, in individual customer wallets, or in a self-custody arrangement the customer controls. If you load Bitcoin and the load takes two confirmations, you are trusting the operator to credit your account once the transfer clears, and you are trusting the operator to keep the funds safe in the meantime.

What to take instead

If GFPAY’s fee stack or its missing licensing detail puts you off, three other cards are worth a look. None of them is a perfect substitute, and each of these is presented as the card operator describes it on its own pages, with figures and details as stated, not as I have tested them.

Cardex

Cardex advertises a single crypto card accepted in two hundred or more countries, with virtual and physical cards on the Verve, Visa, Mastercard and UnionPay networks. The card’s own App Store listing describes a Naira-focused experience, with card balances and spend in Naira, and the marketing line is “AI-Powered Conversion Rate”, an automatic scan of global exchanges at the moment of payment that picks the best rate for the user. No fee percentage is stated on the company pages I read. Funding is from USDT, USDC and BTC wallets, with networks not stated. I would treat Cardex as a fit for someone who wants a multi-network card and is comfortable with a conversion model that does not state a flat fee. The score I would give it, based on the public material, is 5.6 out of 10.

CardFlow

CardFlow is a virtual-only US-dollar Mastercard aimed at Nigeria and at Nigerians abroad, with virtual card creation described as free and as taking 3 minutes. There is no physical card, no monthly fee on the company page, and funding is from Bitcoin, USDT, ETH or a Naira bank transfer, with networks not stated. The card’s audience page says “Nigeria’s smartest fintech card platform”, and the marketing is squarely at users who already hold Naira or hold crypto on the major networks. The score I would give it, based on the public material, is 4.9 out of 10. It is a fit for a virtual-card user who wants a fast US-dollar card and does not need a physical card or an ATM.

HyperCard

HyperCard is a prepaid card in US dollars or euros, with the App Store page claiming acceptance in more than a hundred and seventy-six countries. Acceptance is the merchant side, not the eligibility side, and the official pages do not publish an eligibility list. Funding is crypto, with USDT, BTC and ETH mentioned as deposits, converted into the card balance in dollars or euros. Networks are not stated. The score I would give it, based on the public material, is 4.7 out of 10. It is a fit for someone who already holds the major coins and wants a simple prepaid card in fiat.

If you are choosing between these three and GFPAY, the short version is that none of them beats GFPAY on cost, and GFPAY does not beat any of them on fee transparency. Your choice will come down to which network you want, which currency you want to hold, and whether you need a physical card and an ATM. For a low-fee, multi-network card with stated pricing, look outside this list at the bigger European names that publish their fees in a single table. For a Naira-focused virtual card, CardFlow is the clearest of the three. For a multi-coin prepaid card with broad acceptance, HyperCard is the most general. Cardex sits between the two on network coverage and on stated pricing.

Who I would recommend it to

I would recommend GFPAY to a specific kind of reader. You live in a country that is not on the prohibited list, you already hold stablecoins in a wallet you control, you want a Mastercard you can take to a real-world shop, and you are willing to pay ten dollars a month and the other fees in the table to have one. You top up only when you are about to spend, you keep the balance under a few hundred dollars, and you do not park savings on the card. You do not need Apple Pay or Google Pay on the physical card, you do not need a published rewards programme, and you are comfortable with the operator’s terms and the Dubai-seated arbitration if a dispute ever reaches that point.

I would not recommend GFPAY to a reader who is new to crypto and looking for a cheap first card. The fee stack will eat a meaningful share of every load, and the missing detail on the issuer and the regulator is a real cost in trust. I would not recommend it to a reader who needs a cheap everyday spend account: a ten-dollar monthly fee alone is more than many challenger-bank accounts charge for a full current account. I would not recommend it to a reader who needs a card that converts back to crypto, because the FAQ is explicit that the card balance can only be spent or withdrawn as fiat. And I would not recommend it to a reader in any of the twenty-seven prohibited countries, because the operator will not open the account regardless of the rest of the application.

If you are somewhere in the middle, the move I would make is to read the live terms on the dashboard before you pay the fifty-dollar issuance fee, and to confirm the deposit coins, the deposit networks, the shipping country list, and the support channels in writing before you transfer any crypto. The public material gives you enough to decide whether to keep looking, and the dashboard gives you the rest.

Frequently asked questions

What is GFPAY card?

GFPAY is a prepaid Mastercard issued by GFPAY SOLUTIONS — FZCO, a company registered in Dubai, available in a virtual form for online and mobile-wallet spending and in a physical form for shops and ATMs. The card is funded from crypto and spent as fiat, in US dollars or euros, and the operator does not publish the name of the issuing bank on the public pages.

How does GFPAY card work?

You complete KYC, order a card, load it with crypto, and the operator credits the card in fiat at a rate it does not publish. The virtual card works in mobile wallets and online, the physical card works at point-of-sale and at ATMs, and both have 3-D Secure turned on for online purchases. Funds on the card cannot be converted back to crypto.

Is GFPAY a bank?

No. GFPAY is a free-zone company in Dubai that operates a prepaid card programme. The card’s pages do not name a banking partner, do not name a regulator, and do not name a licence. Cardholder funds are not the same as bank deposits and are not covered by a deposit-guarantee scheme, and the terms reserve the right to terminate accounts without notice.

Who owns GFPAY?

The legal entity is GFPAY SOLUTIONS — FZCO, registered in Aspin Commercial Tower on Sheikh Zayed Road in Dubai, in the United Arab Emirates. The card’s pages do not name a parent company, a beneficial owner, or a regulator, and the terms of service are dated October 2023. Governance is by UAE law with disputes in ICAC arbitration in Dubai.

Is GFPAY card available in my country?

GFPAY says the card is available globally except in twenty-seven prohibited countries, and the company does not state the basis of the test. The excluded list includes Russia, Belarus, Ukraine, Iran, Syria, Croatia, Albania, and twenty others. If your country is on neither the allowed list nor the prohibited list, the application is likely to be considered, but the public pages do not guarantee an outcome in advance.

How do I get a GFPAY card?

You start an account on the website, you provide an ID valid for at least six months and a recent proof of address, and you pass the company’s checks. The overview does not publish a KYC processing time, and the physical-card FAQ says the card ships the next business day after payment, or within three days after the invoice is paid. Delivery is invoiced separately and the amount is not published.

Does GFPAY card require KYC?

Yes. The card’s overview lists a proof of ID and a proof of address as part of the application. Accepted IDs are a passport, an ID card, a driver’s licence or a residence permit, and the address proof is a bank or card statement. The overview says the address proof must be no older than seventy-five days and the physical-card FAQ says no older than ninety days, so it is worth using a recent document.

How do I top up GFPAY card?

You transfer crypto to a deposit address shown in the dashboard at dashboard.gfpay.net, and the operator credits the card in fiat at a rate it does not publish. The top-up fee is five percent of the amount loaded, the minimum is fifteen dollars, the maximum is one hundred thousand dollars, and you also pay the network fee charged by the blockchain for the transfer. The card’s pages do not list which coins or networks it accepts.

How do I add GFPAY card to Apple Wallet?

The virtual card can be added to mobile wallets, and the company describes tokenization for the physical card as “coming soon”. The public material is explicit that the physical card is not compatible with Apple Pay or Google Pay. If you need a physical card that works in a phone wallet, GFPAY is not the right card today, and the company has not published a date for the feature.

Is GFPAY card safe?

The card has 3-D Secure on online payments, the operator reserves the right to terminate accounts without notice, the support domain at gfpay.biz did not resolve on the day I checked, and the issuer and the licence are not named in public. The safer pattern is to keep the balance small, to top up only when you are about to spend, and to keep the bulk of your funds in a wallet you control rather than on the card. The card is not unsafe in the sense of being a known scam, but it is also not the kind of card where the regulator, the issuer, and the support channel are all in public view.

Content created by the «cryptocardcatalog» team