xPortal card review: where it earns its 6.4 and where the paperwork leaves you guessing

xPortal is the consumer wallet built around MultiversX, and its Mastercard debit card is the payment side of that wallet. In normal use it does exactly what the page suggests: you keep crypto in the app, you load it onto a virtual or physical Mastercard, you tap in a shop and the conversion happens in the background. For a holder of EGLD, BNB or SUI who lives in the European Economic Area, that is a clean experience and the everyday-use score in this review is the highest one the card earns.

The trouble starts when you try to read the fine print. The card page tells you only some of what you need to know. The fee schedule sits in a separate PDF, the country list is never stated officially, the KYC levels are nowhere on the marketing pages, and several numbers differ between the card page and the fee schedule itself. This review goes through the score of 6.4 / 10 piece by piece, explains the gaps as I found them, and tells you which questions to ask xPortal support before you commit.

The conditions are current as of 21 October 2026.

Verdict

The total score is 6.4 out of 10. The card earns its keep on the everyday side and loses ground on cost clarity, country rules and KYC transparency. Here is the breakdown the score is built on.

This is the card you would recommend to an EEA resident who already holds EGLD and wants a Mastercard to spend from that balance without first selling on an exchange. It is not the card for someone whose situation depends on a specific country, a specific level of KYC limit or a specific stablecoin network being supported, because the card page does not list any of those.

Who will they give you the card to

The short answer is: xPortal does not publish a country list on the card page. The “may not be available to you … in certain regions” wording in the terms is the only official signal. Pricing on the card page is split into Romania (“RO”) and “INT” (international), which strongly implies the operator is registered in Romania and ships from there.

Unofficial third-party reporting at the time of writing says the card is available in 29 EEA countries and explicitly restricted in Canada, Iran, North Korea, Switzerland, the United Kingdom and the United States. Russia is not named on either side. Germany appears inconsistently in that report, so do not treat it as a confirmed yes or no.

For Russian speakers considering this card, here is what the available facts mean in practice.

• People living in Russia. The card page never lists Russia as supported or restricted. The EEA frame and the “RO / INT” pricing imply Romania as the issuing base, which in turn implies that the card programme is available to residents of EEA member states. If you live in Russia you should expect the application to be declined at KYC, but the company has not stated this directly on the public card page.
• People living in other CIS countries (Armenia, Belarus, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkmenistan, Uzbekistan, Azerbaijan, Georgia). None of these countries appears in the third-party EEA list. Belarussian and Kazakhstani residency in particular is not addressed, and any answer from support is a per-application decision.
• Russian citizens living elsewhere. Residency drives KYC, not citizenship, in most EEA-licensed programmes; this programme has not spelled that out. If you hold Russian citizenship but live in an EEA country with the right to reside there, ask xPortal support before you upload documents. A Russian-only passport may still block you because sanctions screening usually runs on citizenship and country of birth, not just address.

The plain summary: this card is built for an EEA audience and the public pages assume you already know you are eligible. If your situation depends on the answer, write to support first.

How to get it

The application runs inside the xPortal app. You download it from the App Store, Google Play or Huawei AppGallery, the App Store rating at the time of writing is 4.8 out of 5 from 1.8K ratings (the card page itself shows 4.9, the App Store 4.8, take the App Store figure). The app ships in about 30 languages including Russian.

The card product comes in two forms: a virtual card, branded xPortal, MultiversX or Sui and issued instantly in the app, and a physical Mastercard Debit posted to your address. The card currency implied by every limit and fee on the page is the euro, even though the company has not made that explicit.

Issuance is free on both cards. The fees PDF qualifies that: the first physical card costs EUR 9.99 to produce, plus delivery of EUR 5.99 inside Romania or EUR 12.99 international. The card page shows EUR 5.99 (RO) and EUR 9.99 (INT), so the two official documents disagree about the international delivery price; the higher figure is the safer one to budget for. One older help-center article also says international delivery is “only EEA”, which lines up with the EEA-only availability hints above.

What the public pages do not tell you about getting the card:

• KYC. The card page and terms do not list what documents are required, how many levels there are, how long approval takes, or which reasons lead to rejection. The help centre says that if you cannot finish KYC you should contact support by chat or write to [email protected]; an article titled “Source of funds check” and another called “Why do I have to provide my tax identification number?” both exist but were not read. Unofficial third-party reporting, dated August 2026, says the issuer runs full KYC before issuance, including an ID document and proof of address.
• KYC-driven limits. The fees PDF sets daily and monthly top-up limits, but it does not say whether those depend on KYC tier or are flat for everyone. If your limit is lower than you expected, the cause is almost certainly a KYC tier rather than a hidden fee.
• Replacement cost and delivery time. The help centre has articles on both, with titles only; the figures are not on the card page.

The fastest path is a virtual card inside the app with whatever KYC the flow accepts. The physical card is worth ordering only once you have confirmed the account works end to end, because the EUR 9.99 figure on the production cost is non-refundable if you cancel.

Fees: what it really costs

Crypto cards earn or lose their reputation on the fee page, and xPortal’s setup is unusually split. The card page gives you the headline charges; the fees PDF for the Standard Mint Account, effective 2 July 2024, gives you the full schedule. Use the table below to see the headline numbers side by side, then read the cases underneath for how they behave in real payments.

Note the three places where the two official documents disagree. For budgeting, the more restrictive number is the one to plan around: EUR 2,500 daily top-up, EUR 10,000 monthly top-up and EUR 5,000 daily spend. The fees PDF is more generous, so if your actual limit matches the PDF you are within the system; if it matches the card page, ask support which numbers apply to your account.

Now walk through three realistic payments and see how the fees land.

A supermarket shop in euro. Nothing extra is charged if the merchant settles in euro, the same currency as your balance. You pay from a euro balance funded by selling crypto at a quoted rate, so the only line item is the crypto purchase fee of 1.49% on the conversion you do to top up.

A EUR 30 coffee paid abroad in US dollars. The Mastercard scheme rate is applied, then the foreign exchange fee of up to 2.5% sits on top of it. Realising only a “Maximum 2.5%” is published, and not the actual percentage, makes it hard to predict the cost in advance. The fees PDF says the percentage depends on transaction type, merchant type, geography and active campaigns, which is too many variables to model from outside.

A cash withdrawal from an ATM. The first EUR 200 a month are free. Above EUR 200 you pay 2% plus EUR 1 per withdrawal. The hard cap is EUR 500 per month, so even if you stay under the free allowance the card limits how much cash you can pull, regardless of balance.

A recurring trap is hidden in the “unjustified chargeback fee” of EUR 20. If you dispute a transaction you genuinely do not recognise, the issuer process is the right route and the fee does not apply. If you file a chargeback and the evidence goes against you, the EUR 20 charge sticks. Treat the dispute channel as a last resort, not as a free cancellation.

Finally, on the rewards side, the cashback line on the card page is contradictory. A comparison table on the page says “Up to 0.5%”; the same page says “Up to 5% cashback” elsewhere. Unofficial reporting at the time of writing resolves this: 0.5% is the entry tier that is live today, and the higher figure belongs to tiers such as Eco Black or Diamond Touch that are not yet launched. Do not plan your spending volume around the 5% figure.

Top up: how to fund the card

The card spends from a euro balance. You get euro into that balance in two ways: by converting crypto, or by adding fiat directly from a debit or credit card.

Crypto top-up. The supported coins are BTC, ETH, EGLD, POL, BNB, SOL, DOGE, BERA and SUI. The card page does not say which networks xPortal accepts deposits on for each of these tokens, and it does not name any stablecoins. Convert crypto to euro inside the wallet and the crypto purchase fee of 1.49% applies. Stablecoin deposits are not listed on the public card page at all, which is unusual for a euro-denominated card programme and limits the appeal for anyone whose main balance is USDT or USDC.

Fiat top-up. You can add euro from a debit or credit card. Adding fiat is free, the minimum is EUR 10, and the daily and monthly limits are the ones in the costs table above (the more restrictive set). The fees PDF does not state which schemes (Visa, Mastercard, SEPA) or which banks are accepted, so this is worth checking with your own bank before relying on it.

Network fees. On-chain transfers cost gas or bandwidth on the source chain; the card provider does not publish them and does not refund them. If you top up from BTC on Ethereum mainnet during a busy hour, the network fee can easily exceed the value of small transfers. For any coin with multiple networks (USDT on TRON versus Ethereum, for example), send on the cheapest working network, but only if xPortal actually supports deposits on that network — sending USDT to an Ethereum address when xPortal expects Solana can mean the funds are not credited.

A practical tip before the first top-up. Convert a tiny test amount, not the full monthly allowance, and only then scale up. Because the network list is not public and on-chain transfers are irreversible, a small first transfer is the cheapest way to find out whether your wallet is talking to the right address.

Paying with it every day

Everyday usability is the strongest part of the card. You can add both the virtual and the physical card to Apple Wallet and Google Wallet and tap to pay. The card sits on Mastercard, which is accepted almost everywhere a Visa is, including shops that routinely decline lesser-known prepaid products. Mastercard’s tokenisation system replaces the card number with a device-specific account number on your phone and uses a one-time dynamic code for each payment, so the real PAN is never shared with the merchant.

Cashback. Live cashback is paid in $EGLD or $UTK depending on how much EGLD you stake in the wallet, capped at 0.5% on the entry tier. The income is token, not euro, so it is exposed to price moves of the reward token between the moment of the payment and the moment you sell. If you do not already use the MultiversX ecosystem, that is a friction point. Paying a EUR 100 bill at 0.5% would credit roughly EUR 0.50 worth of EGLD; at typical transaction fees on MultiversX the reward can be smaller than the cost of selling it.

Spending rules and blocked merchants. The fees PDF discloses a “high-risk merchant” fee of up to 3% with a EUR 1 minimum on payments to categories such as gambling (MCC 7995 is the typical code covering casinos, betting shops and lotteries). Beyond that, MCCs the issuer blocks are not published. In practice, expect MCC 7995 to be the most common block, but do not assume any other category is open without testing. Travel, entertainment and subscription services usually work; some crypto exchanges reject prepaid cards outright.

Online checkout. For online purchases, expect the merchant’s 3-D Secure step to ask for an extra confirmation, which can be a one-time code, a banking-app approval, or a biometric. If the confirmation does not arrive, the payment will decline rather than go through. Address Verification Service (AVS), which compares the billing address you typed (street number and ZIP) with the issuer’s records, is mainly offered in the US, Canada and the UK and is rarely effective on foreign-BIN prepaid cards. The result is occasional declines at smaller or stricter merchants that are not a fault of your account.

Disputes and chargebacks. The card supports chargebacks with a EUR 20 fee for unjustified disputes. Help-centre articles cover cancellation, unrecognised transactions and duplicate transactions, and warn that a transaction cannot be cancelled once initiated. Time frames for resolution are not published. Address Verification Service checks, which are mainly US/Canada/UK, often do not work for foreign-BIN prepaid cards, so occasional declines at smaller merchants are plausible and are not the card breaking down.

Holds on declined authorisations can stay on the balance for up to seven days, which is a feature of card schemes rather than xPortal specifically; it does not mean the money was taken twice. A restaurant pre-authorisation that never settles is the same kind of artefact you would see on any debit card, and it clears on its own once the merchant releases it or the scheme window closes.

Currency behaviour in practice. Because every limit on the card page is denominated in euro, the cleanest experience comes from buying in euro inside the EEA. The moment you spend in any other currency, three things stack on top of each other: the Mastercard exchange rate, the foreign exchange fee of up to 2.5%, and (if you topped up by converting crypto) the 1.49% you already paid at the conversion stage. A traveller who spends a large portion of their volume abroad is, in effect, paying the conversion twice in fee terms. If that describes you, an FX-light card on the alternatives list is a better fit.

Risks: what can go wrong

Issuer transparency. xPortal Labs runs the wallet and the website. The terms name xPortal Equity A.G. as operator. The licensed card issuer and BIN sponsor are not named on the official card pages. Unofficial reporting identifies the issuer as Capital Financial Services S.A. (Twispay), a Romanian electronic money institution, and the licence number given is IEME-RO-0001 at the National Bank of Romania. None of this is published on the card page itself, so the same answer is true: an EEA licence is in place, but the company has chosen not to make it easy to verify. Because the card spends euro from a stored balance rather than drawing on a bank account, it is structured as e-money: an EMI in the EU can issue e-money and payment cards but cannot lend, and EU/EEA passporting means a licence granted in one member state can be used to serve customers across the EEA.

Counterparty risk on crypto funds. Custody of your crypto balance is not described in the materials I read. If your euro balance is funded by selling crypto held inside xPortal, that sale happens against xPortal’s liquidity, and your crypto sat in xPortal’s wallet until then. That is the standard counterparty risk of a custodial wallet. Crypto transfers are irreversible, so a stolen private key or a compromised account cannot be rolled back by the network; only the custodian’s own controls can step in. The category has a long history of failures: Mt. Gox (around USD 350 million reported stolen between 2011 and 2014), Coincheck (around USD 400 million in 2018), Ronin Network (USD 625 million in 2022). A self-custody wallet you connect to a card sidesteps that risk but adds the risk of seed-phrase loss, phishing and clipboard-hijacking malware that swaps copied addresses.

Compliance and account closures. KYC rules require ongoing monitoring. EU rules require institutions to verify a customer’s name, address, date of birth, nationality and identity documents, run a sanctions check, establish the purpose of the relationship and check whether the customer is a politically exposed person. Nationality is screened separately from residence because sanctions screening and issuer policy often apply to citizenship and country of birth as well as to address. If due diligence cannot be completed, EU rules require the institution to refrain from opening the relationship or, where necessary, end an existing one. That is why accounts are closed or frozen pending documents, sometimes with little warning. Source-of-funds requests are common with EEA issuers, and xPortal’s help centre keeps a cluster of five articles on “Source of funds check” plus another titled “Why do I have to provide my tax identification number?” — the existence of those articles is a hint that the issuer does ask.

FX fee variability. The foreign exchange fee is published as a maximum of 2.5%, not as the actual percentage. You cannot predict in advance what you will pay on a non-euro transaction. For someone who travels often and spends in mixed currencies, this is the single biggest fee to watch.

Cashback denominator. Cashback is in $EGLD or $UTK and capped at 0.5% on the live tier. Treat any higher figure as marketing for an unlaunched tier. If you evaluate the card on cashback alone, the live figure is the only honest one.

Programme-closure risk. The category has a record of card programmes shutting down. WaveCrest, a Visa card issuer that supplied several crypto card brands, was suspended by Visa in Europe in 2018 and every WaveCrest-issued Visa programme was closed. FTX lost its Visa arrangement in November 2022 and the FTX US debit card was wound down by its issuer. Visa and Mastercard themselves do not issue crypto cards to consumers; they license issuers and can suspend a programme. The contractual outcome is usually the same: a notice period, then a stop on new loads, then a stop on spending, then a withdrawal window for any remaining balance. One 2026 closure reported by a secondary source describes new loads ending 8 July 2026 and spending stopping 8 August 2026; that single source has not been confirmed elsewhere. Plan for that possibility from day one by never leaving more on the card than you can leave untouched for a month.

MiCA in the background. MiCA (Regulation (EU) 2023/1114) took legal effect in June 2023, with rules on asset-referenced and e-money tokens applying from 30 June 2024 and the remaining crypto-asset service provider (CASP) rules applying from 30 December 2024. Under MiCA, e-money tokens may be issued only by a credit institution or an electronic money institution, and providers already operating under national law had a transitional period running until 1 July 2026 or until a MiCA authorisation is granted or refused. The card side of xPortal sits under e-money / payment-services law, while the crypto side sits under MiCA, so the programme depends on two licences. If you want to verify the issuer or the platform you can check ESMA’s interim register of authorised CASPs and white papers.

Sanctions context for readers. After Visa and Mastercard suspended their operations in Russia in March 2022, cards issued by Russian banks stopped working abroad. None of this changes the fact that a card programme registered in the EEA will, on its own logic, run sanctions screening at onboarding and on transactions. Treat the answer to “will this card work for me” as something xPortal itself has to confirm, not something the marketing page implies.

What to take instead

If the country list or the missing KYC information is a dealbreaker, three named alternatives cover the main use cases. None of them is a clone of xPortal; each one shifts the trade-off somewhere else.

MetaMask Card is the right call if you already keep funds in a MetaMask wallet and want to spend from mUSD, USDC or USDT on Linea, Base, Monad or Solana. Sign-up is open in 45 listed countries and territories (Andorra, Argentina, Brazil, Canada, Mexico, Germany, France, Spain and Uruguay among them), with other regions joining a waitlist; the card page notes that ineligible regions limit sign-ups, not spending. US and UK sign-ups were temporarily closed per the FAQ at the time of writing. The virtual card is issued instantly, the Metal tier costs USD 199 a year and offers a 3% mUSD cashback capped at the first USD 10,000 spent (then 1%). The “minimal fee for each transaction” wording is a known gap; the headline promise is no FX fee and Mastercard’s wholesale rate. Solana-only wallets cannot draw on credit, so a Solana-only MetaMask user has fewer options than a multi-chain user.

KAST is the right call if your main balance is USDT or USDC and you want fee-free USD spending with a 0% spread on stablecoin deposits. Sign-up is gated by a country check at KYC: if your country is not listed, KAST tells you directly. The terms also say that if you live in a supported country but only hold an ID from a restricted region, you may still fail KYC; dual citizens with a supported-country ID may pass. VPN does not bypass the check, and only the account holder’s own ID is accepted, so using a relative’s passport does not work. Cards come in three tiers: Standard (USD 0 a year, Visa Platinum), Premium (USD 1,000 a year, Visa Infinite metal) and Private (USD 10,000 a year, Visa Infinite gold plated). Cashback is paid in USD on authorise: 1.5% on the first USD 2,000 of monthly spend for Standard, 2% on the first USD 10,000 for Premium, and 3% on the first USD 40,000 for Private, with extra KAST Points for Premium and Private. Non-USD transactions carry an FX fee of 0.5% to 1.75% depending on the residence country, the transaction country and the card programme, so again a non-USD-heavy spender pays for the privilege.

Zeal fits users with balances in EUR, USD or GBP on Gnosis Pay rails and who want cashback in GNO. Spend is enabled in 150+ countries but card issuance depends on eligibility and regional availability; the live card programme covers the EU, UK, Brazil, Colombia, Mexico, Japan, Singapore, Philippines, Indonesia and Thailand, with Bolivia mentioned in older update notes. Zeal charges no additional FX fee on top, the conversion uses Visa wholesale and Gnosis Pay fees (for example ATM) may still apply. The headline cashback is up to 4% in GNO, paid on the card Safe balance; GNO must be held there to qualify, and the rate can change. The App Store also advertises up to 5% variable APY on EUR and USD balances, which is a yield figure rather than a cashback figure and ties up the balance in the Safe.

xPortal still wins where its supported coins (EGD, BNB, SOL, SUI) are the assets the user already holds. For users whose main balance is a stablecoin, the picture shifts hard toward KAST or MetaMask Card. For users with EUR or GBP fiat-style balances already in self-custody on Gnosis rails, Zeal is the cleanest answer. The end-of-section takeaway is that xPortal’s weaknesses (no published country list, no stablecoin list, an FX fee capped at 2.5%) are exactly the strengths of one or another alternative.

Who I would recommend this to

xPortal earns its 6.4 by doing the everyday job well. You add the card to a phone wallet, you tap in a shop, the conversion runs in the background and you do not think about it. That is what a crypto card should do, and most of the score sits on that experience.

The recommendation depends on who you are:

• An EEA resident who already holds EGLD or BNB in the xPortal wallet. This card fits that profile cleanly. Get the virtual card first, test the conversion and the merchant acceptance in your home country, then order the physical card. Avoid loading more than you would lose on any custodial product, and keep your fiat top-up modest while you build confidence.
• A user outside the EEA with no confirmed country status. Skip this card for now. The card page does not name your country, the third-party list is unofficial, and the issuer’s own KYC rules might still decline you. Pick a card with a published eligibility list.
• A Russian citizen, whether living in Russia, in another CIS country or elsewhere. The card page does not state sanctions or country rules, and an EEA-licensed programme is unlikely to onboard a Russian-only passport without a residence permit in an EEA member state. Treat this card as a non-starter until xPortal support confirms your specific case.
• A user who depends on stablecoin funding. The card page lists no stablecoins and no specific networks for the nine coins it does support. A stablecoin-first programme such as KAST or MetaMask Card is a better fit.

If you do proceed, walk through three checks before you load the card. First, write to support and ask for a written confirmation that your country and your KYC documents will be accepted. Second, send a small test deposit in the coin you plan to use and confirm it lands before scaling up. Third, treat the EUR 9.99 physical card cost and the EUR 200-per-month free ATM allowance as fixed costs in your budgeting, because they are the easiest numbers to underplan against.

Frequently asked questions

What is xPortal card?

xPortal Card is a Mastercard Debit issued to the xPortal crypto wallet, available as an instant virtual card in the app or as a posted physical card, with spending in euro drawn from a balance you top up by converting crypto or by adding fiat from a debit or credit card.

How does the xPortal card work?

You top up a euro balance from one of nine supported coins (BTC, ETH, EGLD, POL, BNB, SOL, DOGE, BERA, SUI) or from a debit or credit card; every purchase converts the balance through Mastercard at the time of payment, and an ATM withdrawal of up to EUR 500 a month is allowed free for the first EUR 200.

Is xPortal a bank or a regulated card issuer?

It is not a bank; xPortal Labs runs the wallet and the website, xPortal Equity A.G. is named as operator, and unofficial reporting identifies the licensed card issuer as Capital Financial Services S.A. (Twispay), a Romanian e-money institution; the issuer and licence are not stated on the official card pages.

Who can apply for xPortal card?

The card page does not publish a country list; unofficial reporting lists 29 EEA countries as available and explicitly restricts Canada, Iran, North Korea, Switzerland, the United Kingdom and the United States, with Russia and other CIS countries not addressed.

Does xPortal card require KYC?

Yes, full KYC is required before issuance per third-party reporting, although the official card page does not state which documents are needed, how many KYC tiers exist or how long the review takes.

How much does the xPortal card cost?

Issuing is free, the first physical card costs EUR 9.99 plus delivery of EUR 5.99 in Romania or EUR 12.99 internationally, additional virtual cards cost EUR 3 each after the first three free, the crypto purchase fee is 1.49%, and the foreign exchange fee is up to 2.5%.

How do I add xPortal card to Apple Pay or Google Pay?

Inside the xPortal app open the Cards section, pick the card, choose Add to Wallet and follow the prompts for Apple Wallet or Google Wallet; both logos are shown on the card page.

What cashback does xPortal card give?

Up to 0.5% paid in $EGLD or $UTK on the only tier that is live (Fresh Mint), with higher percentages such as the often-quoted 5% reserved for unlaunched paid tiers.

Can I use xPortal card outside the EEA?

Unofficial reporting lists Canada, Iran, North Korea, Switzerland, the United Kingdom and the United States as restricted and does not name Russia, so travelling with an EEA-issued card outside the EEA is generally fine for spending but limited to the EEA for delivery.

How do I freeze or replace an xPortal card?

In the app open Cards, select the card and use the Freeze or Unfreeze button for an instant block, or use Terminate or Replace for a longer-term step; a lost or stolen card has a 24/7 phone line at +40212026944.

Written by the editors at Crypto Card Rating.