When accepting cryptocurrency on a website, the business owner faces three main risks: exchange rate volatility, long transaction confirmation times, and secure key storage. Choosing the wrong integration method leads to losses — either in gateway fees or security. We integrate crypto payments turnkey, using both ready-made gateways (NOWPayments, CoinGate, BitPay) and direct blockchain interaction via HD Wallet. With 10+ years of experience in fintech, we can select the optimal scheme for your project. We will assess the task within one day and propose a solution considering transaction volume and conversion requirements.
Integration via a gateway takes 2–3 business days; direct acceptance on one network takes 5–8 days. For each network, we configure confirmation monitoring and automatic crediting. The result: the client gets a working payment system with minimal setup involvement. Contact us for a consultation: we will help you choose the acceptance method and estimate the budget. We guarantee transparency at all stages.
Problems We Solve
Exchange rate volatility. We fix the rate at the moment of order creation. A tolerance of ±1–2% for network fees is standard practice.
Transaction confirmation. We wait for the required number of blocks (e.g., 6 for Ethereum) before final confirmation. We use ethers.js and web3.js for monitoring.
Secure key storage. Private keys are stored in HSM or HashiCorp Vault. Deposit addresses are derived from the master key (HD Wallet). Access to the master key is only from the monitoring process.
Which Crypto Acceptance Method to Choose?
Choice between a gateway and direct acceptance depends on transaction volume and conversion requirements. Gateways (NOWPayments, CoinGate, BitPay) offer a fee of 0.5–1% and fast integration in 2–3 days. Direct acceptance via blockchain reduces fees to 0.2–0.5% for volumes over 1,000 transactions per month, but requires 5–8 days to set up monitoring and address generation. If you need fiat conversion, a gateway is more convenient; if you want to save on fees and have full control, direct is the way.
Payment Gateway Comparison
| Gateway | Fee | Features |
|---|---|---|
| NOWPayments | 0.5% | Fiat conversion, 100+ coins |
| CoinGate | 1% | PayPal support, fast integration |
| BitPay | 1% | B2B focus, invoices and mass payouts |
How Direct USDT Acceptance Without Intermediaries Works
A unique address is generated for each order via HD Wallet. Example in PHP:
use kornrunner\Ethereum\Ethereum; class WalletService { private string $masterPrivateKey; public function generateDepositAddress(int $orderId): string { $derivedKey = $this->deriveKey($this->masterPrivateKey, $orderId); $eth = new Ethereum(); return $eth->getAddress($derivedKey->getPublicKey()); } } For TRC-20 (Tron) the derivation is different, but the concept is the same. The master key and index allow address recovery and balance checking.
Why It's Important to Fix the Rate at Order Creation
Cryptocurrencies can change by 5–10% within an hour. Fixing the rate from an external source (CoinGecko, Binance API) protects both seller and buyer. The crypto amount is calculated at the start:
$btcRate = $this->priceService->getRate('BTC', 'USD'); $btcAmount = round($order->total_usd / $btcRate, 8); Recommended Confirmation Thresholds
| Network | Confirmations | Average Block Time |
|---|---|---|
| Bitcoin | 20 | 10 min |
| Ethereum | 6 | 15 sec |
| Tron | 19 | 3 sec |
More about address generation
A unique address is generated for each order via HD Wallet using an index. The master key is stored in Vault, accessible only from the monitoring process. This eliminates address reuse and reduces risks.Process of Work
- Analysis. Determine payment volume, required networks, conversion requirements.
- Design. Choose gateway or direct acceptance, design address generation scheme.
- Implementation. API integration, writing monitoring scripts, testing on testnet.
- Testing. Verify the full cycle: order creation → payment → confirmation → crediting.
- Deployment. Deploy to production, configure monitoring and alerts.
What's Included in the Work
- API documentation (including request and response formats).
- Source code for monitoring scripts and address generation.
- Access to server and control panel.
- Training of managers on manual refunds.
- Testnet testing report.
- Support for 2 weeks after deployment.
Checklist of Typical Mistakes
- Insufficient number of confirmations (wait at least 6 for Ethereum).
- Reusing deposit addresses (better to generate new ones).
- Storing private keys in .env or database.
- Lack of payment time limit (expires_at is mandatory).
Security
Private keys are stored in HSM or HashiCorp Vault. Access to the master key is only from the server monitoring process. Deposit addresses are derived from the master key, not standalone keys. This reduces risk if one address is compromised.
Direct acceptance reduces fees by up to 2% compared to gateways, and for large volumes the savings can exceed 3%. Integration without intermediaries pays off through lower transaction costs. Order integration — we will ensure secure crypto acceptance on your site. Get a consultation: write to us, and we will assess your project within one day.