KYC Tiers and Card Limits, Documented

Updated 2026-10-05 · facts checked 2026-10-05 · methodology

table of contents

1. The census: three tiers across the comparison
2. When the check fires
3. What the tiers buy: the limits
4. "No KYC" is a limit, not a loophole
5. The marketing gap, documented
6. Practical order of operations
7. Bottom line

The census: three tiers across the comparison

Of the active programs in our ranking, the identity requirement splits into three documented groups:

• Full verification (29 programs). The default for anything connected to a bank, an exchange, or a regulated issuer - identity documents, address, and often source-of-funds before the first use.
• No documents (3 programs). Goblin sells physical and virtual cards with "no identity documents required for the physical card" at a $350 one-time price [1]. Freedomia "does not require KYC to create and use the card within the standard limits" [2]. 2fiat advertises "total privacy" without a verifiable KYC statement on its static pages - a claim, not a documented policy [3].
• Light/tiered (1 program). AdvCash-style onboarding: basic use without full identity, verification unlocking additional payment methods and higher limits [12].

The interesting group is not the extremes - it is what the tiers buy. That is where the real comparison lives.

When the check fires

Full verification arrives at different points depending on who issues the card, and the trigger point matters for anyone planning a first purchase:

• Exchange cards check you twice, once. Bybit, OKX, KuCoin and Bitget require the exchange account to be verified before the card application even opens - the card inherits the exchange's KYC rather than running its own.
• US bank-partner cards check at account opening. Coinbase's card program applies USA PATRIOT Act identity verification when the card account is created [11] - bank-standard checks because a bank partner issues the product.
• Bank cards check deepest. Xapo runs Gibraltar GFSC-regulated onboarding: identity, address, and source of funds - the same questions a traditional bank asks [7].
• Regulated EMIs sit in between. Wirex onboards under El Salvador's supervised financial-institution regime: standard KYC, no credit check [9].
• Wallets with card features split the difference. Phantom's card requires verification via Stripe for the card itself while the wallet stays self-custodial - "Phantom never has access to your legal name and doesn't store your KYC information" is the advertised boundary [6].

The universal pattern: nobody checks you at the merchant. Network purchases are tokenized; the identity event happened (or never happened) with the issuer. What varies is how early and how deep that issuer event runs.

What the tiers buy: the limits

Limits are where KYC stops being philosophy and becomes arithmetic. The documented numbers span two orders of magnitude:

Three observations from that table:

1. ATM limits are the tight ones. Spending limits reach six figures; cash withdrawals cap in the low thousands per day everywhere. A card is a spending instrument, not a cash machine - the ATM and DCC guide prices the fees on top.
2. The spread is the point. The same identity tier (full KYC) buys a $1,000/day ATM on one product and $5,000 on another. The tier name tells you nothing; the limits table does.
3. Most programs publish nothing. Across the comparison, the majority of active cards document no spend or ATM limits at all - "limits" fields read "not documented". The pre-deposit checklist makes finding the limits table step two for a reason.

"No KYC" is a limit, not a loophole

The no-documents programs are honest about the trade in their own wording - read it closely:

• Freedomia: KYC is not required "within the standard limits" [2] - the sentence concedes that limits above the standard tier would change the answer. No-KYC here means KYC-by-cap: the cap is the identity check.
• Goblin charges $350 up front for a fixed-quantity product [1] - the fee replaces the identity gate economically: the operator's risk is prepaid.
• 2fiat's "total privacy" [3] is the weakest claim of the three - no published policy, no regulator, no documented limit set. An undocumented claim is not a privacy guarantee; it is a claim.

What no-documents tiers uniformly lack is the second side of the regulated bargain: recourse. A GFSC-banked card can be escalated through an ombudsman [7]; an anonymous issuer's card can only be abandoned. The check-before-first-deposit guide turns that into a loop test - load the minimum, spend it, withdraw it - before trusting any issuer, and it matters most for the anonymous ones.

The marketing gap, documented

One finding from the fact-check deserves its own section. RedotPay's tier marketing suggests identity verification is a higher-tier feature; the help center states "Identity checks are required before you can use RedotPay" [4] - mandatory, before any use, for everyone. When a program's advertising and its help center disagree, the help center wins - it is the document the issuer will point to in a dispute.

The reverse gap exists too: programs with scary-looking KYC processes sometimes document more usable limits than privacy-first products. Xapo's bank onboarding buys a documented $2,000/day ATM [8]; a no-KYC card's ATM terms may simply not exist in writing. Identity friction and usage friction are different axes - verify both against documents, not vibes.

Practical order of operations

1. Decide the tier you need honestly. If the card moves more than a few hundred per month, the no-KYC ceiling will find you - pick a documented full-KYC product and pass the check once.
2. Read the limits table before the KYC process, not after. The two live in different documents (help center vs terms), and only the limits table tells you whether the product fits your spending.
3. Watch the trigger points. Exchange-card users: the exchange account is the KYC - verify it fully before applying, or the card application stalls at the inherited check.
4. Keep the verification artifacts. Which document, which date, which tier - the tax records guide logic applies: future-you may need to prove what was asked and answered.
5. Size balances to the freeze risk. The custody guide documents what freezes look like; the practical takeaway is the same at every tier - load what the next weeks need, not what the limit allows.

Bottom line

KYC on bitcoin cards is a documented ladder: three programs climb it with no documents at all, most sit at the full-verification rung, and the limits tables - not the tier names - decide what each rung is worth. Read the two documents that state the facts (the identity clause and the limits table), treat unverifiable privacy claims as claims, and match the tier to the balance you are actually willing to park on a card.

FAQ

Do all bitcoin cards require KYC?

No. In our comparison, three active programs require no identity documents (Goblin, Freedomia, and 2fiat - though 2fiat's claim is unverified marketing language), one uses a light tiered model (AdvCash), and the large majority require full verification before the card works.

What does "no KYC" cost me in limits?

Documented no-KYC products cap usage by design - Freedomia states "within the standard limits" without advertising what a higher tier would take, and Goblin sells fixed-quantity batches. The trade is explicit: no documents, but also no path to raised limits and thinner recourse if something goes wrong.

When does KYC fire on an exchange card?

Before the card application, not at the checkout. Exchange programs (Coinbase, Crypto.com, Bybit, OKX, KuCoin, Bitget) inherit the exchange's verified account, and US programs apply bank-standard identity checks under the USA PATRIOT Act at card-account opening.

Which card has the highest documented ATM limit?

Among the documented programs, ether.fi allows $5,000 per rolling 24 hours (five $1,000 withdrawals), Xapo caps at $2,000 per day, RedotPay documents 3 withdrawals per day up to $3,750 (USD BIN), and Wirex caps at 750 EUR per day. Limits this specific are the exception - most programs do not publish ATM numbers at all.

Is KYC the same as identification at the merchant?

No. Card-network purchases are not additional identity events - your verification happened with the issuer. The merchant sees a tokenized network transaction. This is different from on-chain payments, where the counterparty learns your address.

Can a no-KYC card be frozen?

The card can be suspended by its operator like any prepaid product - "no KYC" describes the onboarding, not an immunity. What you avoid is identity-linked blocking from regulators you never engaged with; what you accept is that an anonymous operator is also one you cannot compel. The custody guide covers the issuer-side risk in depth.

Sources

1. Goblin Cards pricing - "No identity documents required for the physical card", $350 one-time - accessed 2026-10-05
2. Freedomia FAQ - "does not require KYC to create and use the card within the standard limits" - accessed 2026-10-05
3. 2fiat.com - "Total privacy. Instant access. Worldwide freedom." (no explicit KYC statement on static pages) - accessed 2026-10-05
4. RedotPay help center - "Identity checks are required before you can use RedotPay" - accessed 2026-10-05
5. RedotPay help center - card limits table - per transaction 100,000 USD, daily 1,000,000 USD; ATM 3/day, 30/month - accessed 2026-10-05
6. Phantom Cash - "Phantom ... never has access to your legal name and doesn't store your KYC information" (card verification via Stripe) - accessed 2026-10-05
7. Xapo Bank membership - Gibraltar GFSC-regulated bank onboarding, source-of-funds checks - accessed 2026-10-05
8. Xapo Bank help - ATM withdrawals $2,000 daily limit, 2% fee after $100 free monthly - accessed 2026-10-05
9. Wirex One card limits and fees (help center) - ATM 750 EUR/day, 5,000 EUR/month on physical and metal cards - accessed 2026-10-05
10. ether.fi help center - transaction limits and fees - ATM $1,000 per transaction, max 5 per rolling 24h ($5,000 total) - accessed 2026-10-05
11. Coinbase Card (archive.org snapshot 2026-09-03) - US availability, USA PATRIOT Act verification at account opening - accessed 2026-10-05
12. AdvCash via Volet - tiered verification, identity unlocks additional payment methods and higher transaction limits - accessed 2026-10-05

Keep reading

Tools for this