A MoonPay wallet is non-custodial: MoonPay’s own help centre says it has no access to your crypto or your recovery phrase, which you can export at any time. But most people meet MoonPay as a checkout inside another wallet, where it holds nothing and sends coins to whatever address that checkout was given.
Listen to this article, about 11 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.
Recorded 3 November 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.
On this page: MoonPay’s own help pages, dated June to October 2026, quoted on who holds the keys, where coins land after a checkout inside another wallet and what a disabled account can still do, plus eight public accounts of scams and stuck transfers and an address checklist.
Think you already know this? Five questions, one minute.
Every answer is on this page. Answer from what you know now; the page fills in the rest.
-
1. What does MoonPay’s wallet security page say about your recovery phrase?
MoonPay’s Wallet security and recovery page says it has no access to your crypto or your recovery phrase, and that a lost phrase means the crypto is lost. Read the section
-
2. When you buy through MoonPay inside another wallet app, where do the coins go?
MoonPay’s Managing your wallets page says purchases can be delivered to external wallets, which are not provided or controlled by MoonPay. Read the section
-
3. According to MoonPay, what can you still do with a disabled account?
MoonPay’s disabled accounts page of 17 June 2026 says buy and sell actions are blocked but wallet export is still allowed. Read the section
-
4. In the fake support scam MoonPay describes, what are victims told to do?
MoonPay’s article on fake PayPal, Venmo, Revolut and bank support scams says the steps lead to buying crypto and sending it straight to the scammer. Read the section
-
5. What does MoonPay say about a transaction once it is confirmed?
MoonPay’s wrong address page says a confirmed transaction cannot be canceled, redirected or refunded, which is why the address check comes first. Read the section
Checked on 3 November 2026 against MoonPay’s own support pages, each linked where it is quoted. Nothing below comes from a review site, partly on principle and partly because the review sites in this corner mostly want you to click a buy button before the second paragraph.
Is a MoonPay wallet custodial, and who holds the keys?
Inside the MoonPay app, nobody but you, according to MoonPay. Its Managing your wallets page says your assets “are held in non-custodial wallets that are created automatically when you sign up to MoonPay”, and that “MoonPay does not have custody of your crypto”. The Wallet security and recovery page, dated 29 July 2026, goes further: “MoonPay does not have access to your crypto or your recovery phrase.”
That has a hard edge. The same page says your account has “a single recovery phrase”, and that if it is lost or stolen, “your cryptocurrency will be lost forever”. MoonPay’s support team cannot fetch it for you or move coins on your behalf. So this is a real non custodial wallet, with the full responsibility that comes with one.
Two limits are worth knowing. The wallet only stores BTC, ETH, XRP, TRX and SOL, and the same page says wallet features “are currently available in the MoonPay mobile app”, not the website. And not everything with MoonPay’s name on it is a wallet. MoonPay Balance is money, not coins: the Balance page updated on 2 October 2026 says it holds USD, GBP or EUR and that “Funds are stored in a bank account owned by an independent foundation, in line with MiCA safeguarding obligations.” That is a different arrangement from holding keys.
| MoonPay product | What it holds | Who holds the keys or funds | MoonPay’s own page |
|---|---|---|---|
| Wallets in the MoonPay app | BTC, ETH, XRP, TRX, SOL | You, through one recovery phrase | Wallet security, 29 Jul 2026 |
| MoonPay Balance | USD, GBP or EUR, not crypto | A bank account owned by an independent foundation | Balance, 2 Oct 2026 |
| Checkout inside another wallet | Nothing; it sends to the address supplied | Whoever controls that address | Managing wallets |
| MoonPay CLI wallet | Whatever you fund it with | You; MoonPay “cannot recover them if lost” | CLI explainer, 27 Jul 2026 |
Where do coins land when you buy through MoonPay inside another wallet?
This is where the search term gets muddled. MoonPay describes itself in its What is MoonPay page of 28 July 2026 as “payment infrastructure for crypto”, “trusted by 300+ wallets, websites, and apps”. So a lot of people who type “MoonPay wallet” have never opened the MoonPay app. They tapped Buy inside Phantom, Trust Wallet or a similar app, and a MoonPay screen appeared.
In that case MoonPay is the till, not the safe. MoonPay’s help page says any crypto you buy “can be delivered to an external wallet”, and that such wallets are “not provided or controlled by MoonPay”. The coins go to the address the checkout was handed. If the wallet app filled it in, the coins land in that wallet, under that wallet’s recovery phrase. MoonPay never held them for a moment longer than the transaction.
The practical consequence is about who answers when something breaks. A Ledger support agent put it plainly in a reply in r/ledgerwallet on 2 November 2026: the app is “just an interface” for partners such as MoonPay, whose service is “managed independently”, so MoonPay support is the first stop. The wallet maker cannot reverse what MoonPay sent, and MoonPay cannot reach into the wallet.
What happens to a MoonPay wallet if the account is disabled?
Less than you might fear. MoonPay’s page on disabled accounts, dated 17 June 2026, says: “Disabled accounts block buy and sell actions, but wallet export is still allowed.” It adds that “your funds are not taken or frozen”, because MoonPay “does not hold or control your crypto”.
That is exactly what self custody is supposed to buy you, and it only works if you can still reach the phrase. The same page says some disablements cannot be appealed and that opening a new account is not allowed. One person in r/CryptoHelp in December 2025 described seeing the disabled message every time they logged in, then making new accounts with new emails and hitting the same wall. For the coins, the exit is the recovery phrase and a wallet that supports the same network. Our guide on how recovery phrases get lost is the part to read before you ever need that exit.
How do scammers use MoonPay without touching your wallet?
By getting you to send coins to their address, through MoonPay’s perfectly ordinary checkout. MoonPay describes the pattern itself in a support article dated 27 July 2026. Someone calls pretending to be from PayPal, Venmo, Revolut or a bank. They say your account is hacked. They keep you on the phone, ask you to create a MoonPay account and buy crypto to “reverse” the fraud, and the steps “actually lead to you buying cryptocurrency and sending it directly to the scammer.”
MoonPay’s answer is blunt: “legitimate support teams will not ask you to buy or send cryptocurrency.” Its Security and safety FAQs of 24 June 2026 add that MoonPay “will never ask for your password, one-time passcodes (OTPs), or private keys/seed phrase”, that real emails come only from @moonpay.com or @mail.moonpay.com, and that “Cryptocurrency transactions are irreversible, so we cannot refund any transaction once it’s completed.”
One more thing we saw on the day. A search for MoonPay wallet help on 3 November 2026 returned pages dressed up as MoonPay recovery guides, carrying “support” phone numbers, hosted on a book review site and in an upload folder on a US state government domain. None of them is MoonPay. MoonPay’s own help lives at support.moonpay.com, and no genuine helper will ever ask for your recovery phrase.
What do people who ran into trouble with MoonPay report?
We read eight public accounts on 3 November 2026: four Reddit threads and the four reviews on MoonPay’s Trustpilot page that touched wallets or missing funds. The page showed a score of 4.1 from 115,975 reviews, so these are the complaints, not the average day. They are what people report, not findings.
The scam pattern is not limited to phone calls. A new Etsy seller posted in September 2026 that an email posing as a first order walked them into creating a MoonPay account and entering card details before they checked Etsy and found no sale. They locked the card. Commenters noted the tell: a real order shows on the seller dashboard.
Missing transfers usually come down to evidence. In r/CryptoHelp in May 2026 someone said a friend had sent about $21,000 in bitcoin to their MoonPay wallet, with no screenshot and no transaction ID, and nothing visible on a block explorer. Commenters suspected a fake exchange or a swapped address; days later the poster said the money had bounced back to the friend’s account. On r/ledgerwallet in October 2026 a user said an ETH to USDT swap expired after the ETH had left, and was told MoonPay tickets can take from days to a couple of weeks.
The Trustpilot side was thinner on custody: one reviewer from Turkey on 2 November 2026 said funds sent towards an Exodus wallet ended up held in MoonPay’s cash section and frozen, and MoonPay replied that it had opened a ticket. Where the accounts agree with MoonPay’s pages is the hard part: confirmed transfers do not come back. Where they add something is the paperwork: both stuck transfer accounts turned on whether a transaction ID existed, and the one without it had nothing to show anybody.
How do you confirm a receiving address is really yours?
Before a single coin moves, open the receiving wallet yourself and copy its receive address fresh, rather than trusting anything pasted into a chat or an email. Compare the first and last six characters on the checkout screen with the wallet screen. Check the network matches: MoonPay’s wrong address page of 27 July 2026 notes that XRP needs a destination tag and that ERC-20 sends need a small amount of ETH for fees, and that “Once a transaction is confirmed, it can’t be canceled, redirected, or refunded.”
Afterwards, keep the transaction ID and look it up on a block explorer. If you are buying for someone else, or a stranger is telling you which address to use, stop. That is not a wallet question any more. It is the scam in the section above, and the PayPal crypto article shows the same trick wearing a different logo. For anything you hold long term, the difference between exchange custody and your own keys explains why the address you send to matters more than the app you buy in.
| Check | Why it matters | Source |
|---|---|---|
| Copy the address from your own wallet app | A pasted or supplied address can belong to someone else | MoonPay safety FAQs |
| Match the network and any destination tag | XRP without a tag can strand funds | MoonPay wrong address page |
| Refuse anyone who asks you to buy to fix an account | “legitimate support teams will not ask” | MoonPay fake support page |
| Never type a recovery phrase into any page or call | MoonPay “will never ask” for it | MoonPay wallet security page |
| Save the transaction ID | It is the only proof a ticket can work from | MoonPay wrong address page |
Before a MoonPay transfer lands: is the address really yours?
Tick each step before you confirm. Nothing here asks for your recovery phrase, and nothing ever should.
MoonPay says it will never ask for your password, one-time passcodes or seed phrase. Anyone who does is trying to take the coins.
Frequently asked questions
Does MoonPay give me a recovery phrase?
Yes, for wallets inside the MoonPay app. MoonPay says each account has a single recovery phrase that you can export at any time, and that MoonPay itself cannot see it. If you only ever bought through MoonPay inside another app, your phrase is that app’s phrase, not MoonPay’s.
Can MoonPay freeze the coins in my MoonPay wallet?
MoonPay says not. Its disabled accounts page says buying and selling are blocked when an account is disabled but wallet export is still allowed, and that funds are not taken or frozen. MoonPay Balance, which is fiat money, is a separate arrangement.
Which coins can a MoonPay wallet hold?
MoonPay’s help page lists BTC, ETH, XRP, TRX and SOL for its own wallets. Other assets bought through MoonPay have to be delivered to an external wallet that supports them.
Can I use a MoonPay wallet on a computer?
MoonPay says its wallet features are currently available in the mobile app. The separate command line tool creates its own non-custodial wallets, which MoonPay says it cannot recover if the keys are lost.
Someone on the phone says MoonPay support needs my recovery phrase to unlock my funds. Is that real?
No. MoonPay says it will never ask for your password, one-time passcodes, private keys or seed phrase. Hang up, and contact MoonPay only through the help centre at support.moonpay.com, reached by typing the address yourself.
Can MoonPay get back coins I sent to the wrong address?
MoonPay says a confirmed transaction cannot be cancelled, redirected or refunded. It may be able to cancel a buy order that has not yet completed. Anyone offering to recover sent crypto for a fee is worth treating with deep suspicion.
Finished the page? The same five questions from the top, to see what stuck.
This article is general information about wallet security and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything, or to use or avoid any service. Speak to a suitably qualified professional about your own situation, and remember that in self custody the security decisions are yours alone.
Leave a Reply