Blog/Guides

Crypto Card Spending Limits 2026: The Real Numbers

Kardd Team|October 5, 2026|13 min read
KEY TAKEAWAYSSIX SCHEDULES READ IN FULL5 OCTOBER 2026
  • Your “daily” limit is often your monthly limit. Crypto.com's UK schedule publishes £22,000 daily, £22,000 monthly and a £22,000 balance cap. Its US schedule is $25,000 daily and $25,000 monthly from Ruby up. On both, the daily figure is reachable exactly once a month.
  • An annual limit is never twelve monthly limits. We divided every published pair: Crypto.com UK allows 10 months of its own monthly limit per year, Bybit's EU entry tier 6, and Bybit's top Asia-Pacific tier about 2.6. The ratio gets worse as the tier rises.
  • The same card is worth five times more in Singapore than in Spain. Bybit's entry tier is €5,000 a day and €10,000 a month in the EU, and $10,000 a day and $50,000 a month in Asia-Pacific. Same brand, same tier, different licence.
  • A genuinely unverified EEA card is capped at €150 by law. Directive (EU) 2018/843 allows the anonymous prepaid derogation only up to €150 stored and €150 of monthly transactions, with €50 ceilings on cash and remote payments. Bybit's Virtual Card Lite carries a €150 lifetime limit — the statute, shipped as a product.
  • Two of six programmes publish no daily limit at all. Karta publishes one number, $25,000 per transaction, plus an unquantified velocity rule. XKard publishes an annual recharge cap and nothing else — and that cap is a load limit, not a spending limit.
Affiliate Disclosure: Kardd.co may earn a commission if you sign up for a card mentioned here, including XKard. Nothing below is a paid placement, and no commercial relationship changes a published figure. Every limit, fee and quotation was read from the issuer's or the regulator's own document on 5 October 2026, and every ratio was calculated from those figures. Full disclosure. Nothing here is legal or financial advice.

You can read a card's limits page, load it to the stated ceiling, and still be refused on the second day of the month. The arithmetic that explains it is printed in the schedule nobody multiplies out. Every guide to crypto card spending limits we found reprints the same three-tier range table and no issuer's actual numbers. So we read six published schedules in full across four jurisdictions, plus the two regulations and one 2026 rule change that override all of them, and divided the daily figures into the monthly ones. The daily limit is the one you are quoted and the one that means least.

Your “daily” limit is usually your monthly limit

Start with the single most misleading number in this market. Crypto.com's UK schedule, last updated 31 July 2026 and issued by ForisGFS UK Limited, publishes a point-of-sale purchase limit of £22,000 daily for every tier. It also publishes a monthly POS limit of £22,000 and a card balance maximum of £22,000. Three different ceilings, one number: you can have one £22,000 day a month, and you could never have had two, because the balance cap would not let you hold the money.

The US schedule, updated 1 September 2026, does the same at Ruby and above with $25,000 daily against $25,000 monthly. Only the entry Midnight tier leaves any daily headroom, and only a half-day of it. We divided each monthly limit by its own daily limit:

Programme and tierDaily POSMonthly POSFull daily limits per month
Crypto.com UK — all tiers£22,000£22,0001.0
Crypto.com US — Midnight$10,000$15,0001.5
Crypto.com US — Ruby and above$25,000$25,0001.0
Bybit EU — Tier 1€5,000€10,0002.0
Bybit EU — Tier 2€10,000€25,0002.5
Bybit EU — Tier 3€15,000€50,0003.3
Bybit Asia-Pacific — Tier 1$10,000$50,0005.0
Bybit Asia-Pacific — Tier 2$50,000$150,0003.0
Bybit Asia-Pacific — Tier 3$100,000$350,0003.5

Published daily and monthly POS limits, read 5 October 2026, with the ratio calculated by Kardd. The best case in this table is five days.

Nowhere in nine rows does a daily limit buy you a week. The honest reading of any daily figure is “the largest single day we will permit”, not “what you may spend per day”. That is the first of three places where limits do not compose the way the table implies.

Three authorities set your limit, and only one is the issuer

The schedules look arbitrary because they are the bottom layer of three. A regulator sets the authentication and anonymity ceilings, the network sets how certain transaction types must be submitted, and the programme sets the tier table on top. The programme's table is the only one you are shown at sign-up, and the only one that can be raised by asking.

Who sets itWhat it capsExample figureCan you change it?
Regulator (EEA)Contactless without re-authentication€50 per payment, €150 cumulative, or 5 paymentsNo
Regulator (EEA)Balance and monthly spend on an anonymous card€150 stored, €150 monthly, €50 remoteOnly by verifying
Regulator (UK)Contactless thresholdsFirm-set since 19 March 2026No
ProgrammeDaily, monthly, annual, per-transaction, ATM€5,000 to $350,000, by tier and regionYes, by review
Programme (unpublished)Velocity to a single merchantNo figure publishedNo

The three layers, with the clause or schedule each comes from. Two of the five rows carry no number you will ever be quoted.

That bottom row is worth naming. Karta's limits page of 9 April 2026 states that “very frequent transactions to the same merchant may be rejected” — a real constraint with no threshold attached, on the only programme we read that publishes a per-transaction cap. If a payment fails while you are plainly inside every published figure, that sentence is the most likely reason, followed by a blocked merchant category, which we broke down separately in the full list of blocked merchants.

The €150 ceiling on a genuinely unverified card

This is the layer that matters most on a site about no-KYC cards, and no card guide we read mentions it. Directive (EU) 2018/843 amended Article 12 of the 2015 money-laundering directive, and the amended text is specific. The anonymous prepaid derogation applies only where “the payment instrument is not reloadable, or has a maximum monthly payment transactions limit of EUR 150 which can be used only in that Member State” and where “the maximum amount stored electronically does not exceed EUR 150”. It then removes the derogation entirely for cash redemption or withdrawal above €50, and for remote payment transactions above €50 each.

So in the EEA, €150 is not a cautious issuer's choice. It is the ceiling above which a card cannot lawfully stay anonymous, and €50 is the online ceiling. The practical consequence is a test you can apply to any marketing claim: an EEA-licensed card advertising four- or five-figure limits is not an unverified card, whatever the sign-up flow implies about how little it asks.

The confirmation is sitting in a live product. Bybit's EU help centre states that its Virtual Card Lite “will be subjected to a Lifetime Spending Limit of 150 EUR” while its ordinary virtual and physical cards share a tier limit running to €50,000 a month. One product, two legal footings, and the cheaper one is capped at the statutory anonymity figure for its entire life. The deadline that closes the remaining gaps is covered in our breakdown of the 2027 EU verification rules.

The contactless limit that stopped existing in March 2026

Tap-to-pay has its own ceiling, and it is not in any issuer's fee table. Article 11 of Commission Delegated Regulation (EU) 2018/389 lets a provider skip strong customer authentication on a contactless payment only where the individual amount is no more than €50, the cumulative total since the last authentication is no more than €150, or no more than five consecutive contactless payments have been made. Hit any one and the terminal asks for a PIN — which reads as a declined card if you have a virtual card and no PIN to hand.

JurisdictionSingle paymentCumulative before PINConsecutive paymentsStatus
EEA€50€1505In force
UK, to 18 March 2026£100£3005Superseded
UK, from 19 March 2026Firm-setFirm-setFirm-setIn force

Contactless authentication thresholds. The UK figures moved in 2026; the EEA figures did not.

The UK change is the one to know about, because it is recent and widely unreported on card pages. From 19 March 2026 the FCA allowed firms with strong fraud controls to set their own contactless limits, replacing the fixed £100 single and £300 cumulative thresholds. In practice most cardholders have seen nothing yet: the British Retail Consortium notes that terminals and the industry rules governing them also need changing before payments above £100 can be processed contactlessly. The limit is now your issuer's decision and your issuer may not have made it.

The same card, five times the limit

Bybit publishes separate schedules for its EU and Asia-Pacific programmes, which makes it the cleanest natural experiment in this market: one brand, one app, one tier system, two licences. The gap is not marginal.

TierEU dailyAPAC dailyEU monthlyAPAC monthlyMonthly gap
Tier 1€5,000$10,000€10,000$50,0005.0×
Tier 2€10,000$50,000€25,000$150,0006.0×
Tier 3€15,000$100,000€50,000$350,0007.0×

Bybit's two published schedules side by side, read 5 October 2026. Ratios calculated by Kardd and not currency-adjusted; the gap widens with tier.

Two smaller differences in the same documents matter more than they look. In the EU, virtual and physical cards share one spending limit; in Asia-Pacific they each have their own, so the same two cards are worth double in one region. And the EU schedule sets the per-transaction limit equal to the daily limit at every tier — €5,000, €10,000, €15,000 — so one purchase can consume the whole day. Our Bybit card review covers the fee side.

Raising a tier is a review, not a toggle. Bybit takes upgrade requests from the card dashboard, says review may take up to seven business days, and gates the path on account status: a non-VIP applicant can move only from Tier 1 to Tier 2, a VIP applicant from Tier 2 to Tier 3. Tier 3 is therefore closed to an ordinary account — which no range table conveys.

An annual limit is never twelve monthly limits

Three of our six programmes publish an annual figure as well as a monthly one, and in no case is the annual figure twelve times the monthly. We divided one by the other to get the number of full monthly limits a year actually permits:

Programme and tierMonthlyAnnualFull months per year
Crypto.com UK — all tiers£22,000£220,00010.0
Bybit EU — Tier 1€10,000€60,0006.0
Bybit EU — Tier 2€25,000€125,0005.0
Bybit EU — Tier 3€50,000€250,0005.0
Bybit APAC — Tier 1$50,000$150,0003.0
Bybit APAC — Tier 2$150,000$500,0003.3
Bybit APAC — Tier 3$350,000$900,0002.6

Published monthly and annual limits with the ratio calculated by Kardd. Twelve would mean a monthly limit you could use every month; nothing here is above ten.

Read the last column downwards and the pattern inverts the sales pitch: the higher the tier, the fewer months of its own limit you may use. Bybit's top Asia-Pacific tier advertises $350,000 a month and permits $900,000 a year — two and a half such months. So size a card on its annual figure divided by twelve, because that is the number a steady spender meets. Crypto.com's UK card, the most generous here, funds ten months out of twelve.

When the headline number is a load cap, not a spending limit

Some programmes publish no spending limit at all, and the number they publish instead is not interchangeable with one. XKard, read on 5 October 2026, publishes an “Annual Recharge Limit” of up to $25,000, $50,000 and $100,000 on its Essential, Premium and Whale plans, priced at $9, $19 and $49 a month billed annually, with recharge commissions of 4.5%, 3.5% and 2.3%. There is no daily limit, no per-transaction cap and no ATM limit on the page.

Two things follow, and both are easy to get wrong. A recharge limit caps what you can load in a year, so on the Whale plan the $100,000 ceiling is an annual figure — not a monthly one, which would be twelve times larger. And because it is a load cap, the recharge commission comes out of it: at 2.3%, loading the full allowance costs about $2,300 in fees plus $588 in subscription, and you still have the top-up fee arithmetic to do before comparing it to a card that charges nothing to load. XKard's own FAQ also states that “identity verification (KYC) is required to issue the card”, which is worth reading before treating any card as unverified.

A correction on our own pages. Several older Kardd articles describe XKard's Whale tier as a “$100K/month” limit. The figure xkard.io publishes today is an annual recharge limit of up to $100,000, and the site states that KYC is required. We are flagging it here rather than quietly repeating it, and those pages are queued for correction.

Karta is the other end of the same disclosure problem, from the opposite direction. Its page publishes one figure — “the current purchase limit is $25,000 per transaction” — plus a cap of 100 card reissues per account, and no daily, monthly, annual, ATM or load limit at all. A per-transaction cap tells you the largest single thing you can buy and nothing whatsoever about a month.

ATM cash is a separate and much smaller budget

Cash sits in its own schedule on every programme that publishes one, usually an order of magnitude below the spending limit and with a free allowance before the fee starts. Crypto.com's UK card is capped at £1,800 a day and £9,000 a month against a £22,000 monthly POS limit, with three withdrawals a day and thirty a month, and a free allowance rising by tier from £180 to £900.

Programme and tierDaily ATMMonthly ATMFree monthlyFee above free
Crypto.com UK — Midnight£1,800£9,000£1802%
Crypto.com UK — Obsidian£1,800£9,000£9002%
Crypto.com US — Midnight$500$5,000$2002%
Crypto.com US — Ruby$1,000$10,000$4002%
Crypto.com US — Obsidian$2,000$10,000$1,0002%
Bybit EU — all tiersNot in page sourceNot in page source€1002%

Published ATM limits and allowances. Bybit's tier table renders client-side, so only its fee line is verifiable from the page source.

Note what the tier buys on the UK card: the daily and monthly ATM ceilings are identical from Midnight to Obsidian, and only the free allowance moves. Paying for a metal card buys you cheaper cash, not more of it. We put the cross-issuer cash numbers side by side in our comparison of ATM withdrawal fees.

One structural trap hides in the US schedule. Crypto.com publishes an overall monthly withdrawal cap that combines POS spending, ATM withdrawals and card-to-card transfers — $15,000 on Midnight and $25,000 on the metal tiers. Those are the same figures as the monthly POS limits, which means ATM cash and transfers are not additional to your spending: they come out of it.

Check your own card's limits in five minutes

Every finding above came from a published page, so the same six checks work on any card. The crypto card spending limits that will actually govern your month are rarely the ones in the marketing table.

CheckWhat to divide or readWhat a bad answer looks like
1. Days per monthMonthly limit ÷ daily limit1.0 — the daily figure is a once-a-month event
2. Months per yearAnnual limit ÷ monthly limitUnder 6 — size the card on annual ÷ 12
3. Spend or load?Does the headline say “recharge” or “spending”?“Recharge” — fees eat the ceiling
4. Shared or separate?Do virtual and physical share one limit?Shared — a second card adds nothing
5. Is cash additional?Look for an “overall” monthly capOne combined cap — ATM eats spending
6. Which jurisdiction?Find the schedule for your regionNo regional schedule published

Six divisions and readings, each answerable from a published page in under a minute.

A seventh check has no arithmetic: search the limits page for the words “rolling” and “reset”. Crypto.com's UK schedule states that all aggregated loading limits, and only them, reset on a rolling basis, while the calendar-based limits reset at 00:00 GMT. So an exhausted load limit does not refill on the first of the month and an exhausted spending limit does — and nothing in the app distinguishes the two when a payment fails. If yours fails anyway, the decline diagnosis runs through nine causes, of which limits are only the first.

Final take

The honest summary of crypto card spending limits in 2026: the daily number is marketing, the annual number is the constraint, and the jurisdiction on the licence is worth more than any tier you can buy. Of six programmes, four publish a daily limit, three an annual one, and two neither. Not one presents the arithmetic that turns its own table into a month.

So judge a limits page by what it lets you calculate. A programme that publishes daily, monthly and annual figures for your region has told you what a year on that card looks like; one that publishes an annual recharge cap has told you what it will sell you. And in the EEA, any card that genuinely does not know who you are is capped at €150 by statute — which makes a high limit and real anonymity mutually exclusive, no matter which page you read first.

Compare the published limits, not the promises

Kardd tracks the issuer, the KYC level, the custody model and the published limit and fee stack for every card we cover — so you can run the two divisions above before you load anything.

Kardd may earn a commission on sign-ups, including XKard. Affiliate disclosure.

Related Articles

Frequently Asked Questions

What is a typical crypto card spending limit in 2026?

There is no typical figure, because the number tracks the licence rather than the card. Read on 5 October 2026: Bybit's EU programme publishes €5,000 a day and €10,000 a month at its entry tier, while the same brand's Asia-Pacific programme publishes $10,000 a day and $50,000 a month at its entry tier. Crypto.com's UK card publishes £22,000 a day for every tier. Karta publishes a $25,000 per-transaction cap and no daily or monthly limit at all.

Why is my daily limit the same as my monthly limit?

Because on several programmes it genuinely is. Crypto.com's UK schedule of 31 July 2026 publishes £22,000 daily, £22,000 monthly and a £22,000 card balance maximum, so the daily figure can only be reached once in a calendar month. Its US schedule does the same at Ruby and above with $25,000 against $25,000. The daily number tells you the largest day you may have, not a day you may repeat.

Is there a legal maximum on a no-KYC crypto card?

In the EEA, yes. Directive (EU) 2018/843 amended Article 12 of the 2015 money-laundering directive so the anonymous prepaid derogation applies only where the instrument is not reloadable or has a maximum monthly payment transactions limit of €150 usable in one Member State, and where the maximum stored electronically does not exceed €150. It also stops applying to cash withdrawal above €50 and to remote payments above €50 each. Bybit's Virtual Card Lite, with its €150 lifetime limit, is that ceiling shipped as a product.

What is the contactless limit on a crypto card?

In the EEA it is set by Article 11 of Commission Delegated Regulation (EU) 2018/389, not by your issuer: authentication may be skipped only where the individual payment is no more than €50, the cumulative amount since the last authentication is no more than €150, or no more than five consecutive contactless payments have been made. In the UK, the FCA allowed firms with strong fraud controls to set their own limits from 19 March 2026, replacing the fixed £100 and £300 thresholds.

Does a higher card tier always mean a higher limit?

Not proportionally, and sometimes not at all. Crypto.com's UK card publishes the same £22,000 daily and monthly POS limit for every tier from Midnight to Obsidian, and the same ATM ceilings, so a metal card buys cashback and a bigger free cash allowance rather than headroom. On Bybit's annual figures the ratio worsens with tier: the EU entry tier allows six months of its own monthly limit per year, the top Asia-Pacific tier about two and a half.

Are crypto card limits rolling or calendar based?

Both, on the same card. Crypto.com's UK schedule states that all aggregated loading limits, and only them, reset on a rolling basis, while calendar-based limits reset at 00:00 GMT on the stated day. An exhausted load limit therefore does not refill on the first of the month and an exhausted spending limit does. Nothing in the interface tells you which one a failed payment just hit.

Can I get my crypto card limit increased?

Sometimes, and the route is a review rather than a setting. Bybit takes upgrade requests from the card dashboard, says review may take up to seven business days, and gates the path on account status: a non-VIP applicant can move only from Tier 1 to Tier 2, a VIP applicant from Tier 2 to Tier 3. Programmes that publish no limits, including Karta and XKard, publish no upgrade mechanism either.

Why was my payment refused when I was under my limit?

Because limits are not the only filter and some of the others carry no numbers. Karta's page of 9 April 2026 states that very frequent transactions to the same merchant may be rejected, a velocity rule with no threshold published. Separately, a blocked merchant category refuses a payment regardless of amount. Testing a small payment at the same merchant separates them: a category block declines every amount identically, a limit does not.

Sources

Every figure above was read on 5 October 2026 from the primary documents, and every ratio was calculated from them: the Crypto.com UK fees and limits schedule, the Crypto.com US schedule, Bybit EU's fees and spending limits page, Bybit's Asia-Pacific schedule, Karta Personal's card limits page, Commission Delegated Regulation (EU) 2018/389, Article 11, Directive (EU) 2018/843, Article 1(7) and the British Retail Consortium on the 19 March 2026 contactless change.

Related Articles

Better offers. Fewer surprises.

Free updates on crypto card offers, fee changes and new ways to spend. One useful email a week, when there’s something worth sharing.

We may earn commission from affiliate links on this site at no extra cost to you. Read our affiliate disclosure