Skip to main content
Sandbox build · MMXXVIMCC 6051 · Non-custodialUSDC · Base
Card-to-USDC settlement infrastructure

The card genuinely buys USDC. Disclosed, and settled on-chain.

Arcana Payments is a disclosed, non-custodial checkout where a buyer's card purchases USDC through a licensed on-ramp and settles directly to the merchant. No wrapper, no custody, no miscoding. A real flow of funds, coded to MCC 6051.

Sandbox preview · no real money moves until a licensed rail is keyed

Custody
Non-custodial
Coded to
MCC 6051
Settles in
USDC
Network
Base
01 / How the money moves

A real flow of funds, not a wrapper.

Every charge is a genuine purchase of USDC at a licensed on-ramp. The buyer pays face value, the on-ramp does the KYC and card processing under MCC 6051, and the resulting USDC settles to the merchant. Arcana coordinates the session and records the settlement, it never touches the funds.

02 / The compliance model

All four hold at once, or it isn't clean.

01Disclosed

You are told here, in the terms, and on your receipt that your card buys USDC.

02Coded to the real activity

The charge is a crypto purchase at a registered on-ramp under crypto MCC 6051.

03Real flow of funds

Card → licensed on-ramp → genuine USDC → merchant. A true transfer, not a wrapper.

04Licensed operator

The on-ramp holds the money-transmitter / MSB licenses. Arcana orchestrates only.

03 / Custody & licensing

Non-custodial by design.

The license sits with the operator

A licensed on-ramp holds the applicable MSB / money-transmitter licenses and performs the card processing and KYC. Arcana orchestrates the session, it does not transmit money.

Funds never rest with Arcana

USDC settles merchant-direct, or through an immutable on-chain split contract. No custody, no float, no commingling in transit.

Coded to the real activity

Every charge is a genuine USDC purchase under MCC 6051, disclosed to the buyer in copy, terms, and receipt.

04 / Security

Nothing taken on trust.

01

Backend-minted sessions

A server-side signed request mints every session before it reaches the browser. The merchant's secret API key stays server-side; only a scoped, per-session client token is exposed.

02

Scoped CORS

API and token endpoints respond with no wildcard cross-origin header. Only the surfaces that must be embeddable are.

03

Signed webhooks

Every settlement event is HMAC-SHA256 signed with a per-merchant secret, so a merchant can prove it came from Arcana.

04

Append-only ledger

Settlements write to an immutable, trigger-protected ledger. Full reconciliation and CSV export via the operator API.

05

No card data at rest

With a live provider, the card is collected on the provider's PCI-scoped surface. Arcana receives a token or a settlement event, never the card number.

06

Idempotent and risk-screened

Idempotency keys prevent double charges; amount caps, velocity limits, and a blocklist screen every session before it is created.

05 / Capabilities

Infrastructure, not a plugin.

Non-custodial settlement

USDC settles straight to the merchant's wallet. Arcana never takes custody; the fee is billed or split on-chain.

Embedded checkout

The buyer pays without leaving for a third-party gateway dashboard. The licensed provider's PCI-scoped surface embeds inline where framing is allowed, and opens securely otherwise.

Apple Pay & Google Pay

One-tap wallet checkout alongside card entry, so the buyer chooses the fastest path to pay.

Multi-rail resilience

The integration is built to route across multiple licensed operators, so a provider outage doesn't have to take settlement down.

On-chain fee split

An immutable split contract can route the merchant share and the Arcana fee atomically, with no party holding funds.

Operator-grade reconciliation

Refunds, receivables, per-merchant settlement ledgers, and CSV export through a signed operator API.

06 / Reliability

Built to route around failure.

Arcana is built to hold the licensing relationships and put multiple regulated operators behind one integration. You connect once and get paid in USDC. No operator to manage, no money-transmitter license to hold, and settlement designed to route around a provider outage.

Connect once

One integration is designed to cover the whole settlement network.

Built to fail over

If an operator is unavailable, settlement is designed to continue on another.

Licensed operators

Regulated partners run KYC and hold the licenses. You receive USDC.

07 / Integration

Two calls. Server session, drop-in embed.

1 · Create a session (server-side)
curl -X POST https://arcanapayments.com/api/v1/sessions \
  -H "authorization: Bearer sk_live_..." \
  -H "content-type: application/json" \
  -d '{"amountUsd": 42.50, "reference": "ORDER-1123"}'
2 · Drop in the embed
<div id="arcana-checkout"></div>
<script src="https://arcanapayments.com/embed.js"
  data-session="cs_..."
  data-cs="cs_secret_..."></script>
08 / Live ledger

Sandbox settlements, as they clear.

Loading ledger.
09 / Questions

Plainly answered.

What is Arcana Payments?

Arcana Payments is card-to-USDC settlement infrastructure. It is a disclosed, inline checkout where a buyer's card genuinely purchases USDC (a US-dollar stablecoin) through a licensed on-ramp, and that USDC settles to the merchant. The card authorization is coded to the real activity, MCC 6051.

How does a card payment 'buy USDC'?

The merchant's server creates a checkout session. The buyer completes payment on the licensed on-ramp's secure, PCI-scoped surface, embedded in the checkout where the provider allows framing. The on-ramp charges the card as a crypto purchase under MCC 6051, runs KYC, and mints the corresponding USDC, which settles to the merchant's wallet.

Is Arcana Payments custodial? Who holds the funds?

Arcana is non-custodial. The licensed on-ramp delivers USDC directly to the merchant's wallet; Arcana never takes custody of the funds. Arcana's fee is either billed as a receivable or routed on-chain by an immutable split contract, so no party holds the money in transit.

Who holds the money-transmitter license?

The licensed on-ramp operator holds the applicable MSB / money-transmitter licenses and performs the card processing and KYC. Arcana orchestrates the session and records settlement; it does not itself act as the money transmitter.

What is MCC 6051 and why does it matter?

MCC 6051 is the merchant category code for quasi-cash and cryptocurrency purchases. Because the card payment is genuinely a purchase of USDC, the authorization is coded to that real activity rather than being miscoded, and the buyer's statement reflects a crypto purchase.

Is the purchase disclosed to the buyer?

Yes. The buyer is told, in the checkout copy, the terms, and the receipt, that their card is purchasing USDC which settles the order, and that their statement will show a crypto purchase. Disclosure is a required part of the flow, not a footnote.

What stablecoin and network does it settle in?

Settlement is in USDC on the Base network. USDC is a US-dollar stablecoin issued by Circle. Base is a low-fee Ethereum layer-2 for fast, inexpensive on-chain settlement.

How is the integration secured?

Sessions are minted server-side; a backend signs a request before any client session token is issued. Settlement webhooks are HMAC-SHA256 signed with a per-merchant secret so a merchant can verify authenticity, and the settlement ledger is append-only and trigger-protected. API responses carry no wildcard cross-origin header.

How does a merchant integrate it?

Two calls: the merchant's server creates a session with its secret key, then drops a one-line embed script onto the checkout page. The checkout embeds on the merchant's page and the buyer completes payment on the licensed provider's secure surface; settlement arrives by signed webhook.

Does the checkout store card numbers?

No. With a live provider the card is collected by the provider's own PCI-scoped element; Arcana receives a token or a settlement event, never the raw card number.

See a settlement clear, then let's talk.

Request accessRun the live demo