A developer tool, not a bank account: Sponge reviewed

Updated October 2026

Licensed

Available in US

Fast payouts

18+ Only

If you have been looking for a crypto payment card to solve the everyday problem of not being able to get a normal bank card, Sponge is probably not what you want. Sponge is not a consumer money product. It is a piece of developer infrastructure: a virtual Visa card that your code creates, funds with USDC, and hands to an AI agent so the agent can pay for things itself. There is no mobile app, no card in the post, no published price list, and no list of the countries where you can get one. The score this card earns on the basis of what its public pages actually say is 4.9 out of 10. That number is not a punishment for anything. It is what a card that publishes almost nothing about its own costs and eligibility looks like when you read it closely.

The conditions described here are current as of October 28, 2026.

The verdict: 4.9 out of 10

Sponge suits one reader almost exclusively: a software developer who is building an AI agent that needs to spend money on its own — to call an API, to buy a subscription, to pay for a service the agent calls on your behalf. If that is you, the design is coherent. A card created through a CLI or SDK, funded by moving USDC out of a wallet, is exactly the shape of tool that needs. If you are anyone else — someone who wants a card in their pocket, someone who wants to be paid, someone who wants to load money from a bank account and spend it in a shop — the product as documented does not meet you where you are.

Two things are genuinely solid here. The security model around the card credentials is unusually careful: the number and CVC come back encrypted with a one-time secret key, and the documentation tells you to treat that key as secret and never to log or persist decrypted values. That is better than most products bother with. And the fact that no official incidents are published and no user complaints turned up in a single search is not nothing, though it is thin evidence drawn from a small footprint.

The everyday-use mark of 3 is where I want to be blunt, because that is the number that matters if you are reading this hoping for a bank card replacement. A virtual card you cannot add to Apple Pay or Google Pay, that has no ATM withdrawal story, no cash-back scheme and no dispute process described, is not a card for living on. It is a card for a machine.

Who will they give the card to

The card’s own pages do not answer this, and I want to be plain about that rather than fill the gap with guesses. There is no country list on the card pages. The platform terms set a minimum age of 13 for the service and nothing more. Which countries are served, whether residency or citizenship governs eligibility, whether there are exclusions — none of that is stated. Citizenship rules are not stated either.

If you are in a country where you have trouble getting an ordinary bank card, and that country is the reason you are reading this, the honest position is that Sponge’s documentation will not tell you whether you qualify. You would be applying blind.

The one age rule that does exist — 13 as a minimum for the service — tells you something about the shape of the thing. This is not being marketed as an adult financial product. It is being built as a piece of tooling, and the terms are written for that.

How to get it

Getting a Sponge card is a technical sequence, not an application form. It starts from the command line or the SDK, and it runs through a hosted identity check with a redirect URI before the issuer’s own application step.

The flow works like this:

1. You begin a hosted KYC flow from the CLI or SDK, with a redirect URI it will return you to.
2. You complete that check. Consent flags are collected along the way — E-Sign, the account-opening privacy notice, the Sponge Card terms, a declaration of accuracy, and a non-solicitation agreement.
3. You supply your occupation, or a SOC code for it.
4. After approval, you submit the application to the issuer.
5. To create the card itself you need a billing address (line1, city, region, postal_code, country_code), an email address and a phone number.

What documents are accepted, and what the age threshold is for the card specifically, is not stated. The KYC level — whether this is basic or enhanced — is also not stated. There is a single hosted KYC step and an issuer application; beyond that the documents do not go further.

The card you get is virtual, created by a call to createSpongeCard. The homepage describes it as a credit card issued by Rain, which it calls a Visa Principal Member, accepted wherever Visa is accepted. The card’s currency is not stated. In the documentation it is virtual only; whether a physical card exists and how it would be delivered is not stated.

That last point deserves emphasis for anyone who pictured a card arriving in the post. The documentation describes a virtual card. Nothing describes plastic.

Fees and limits: what it really costs

Here is the uncomfortable part of this review, and it is the part I would want you to read twice before you commit anything. The card’s public pages do not publish its costs. Not the issuance fee, not a monthly or annual servicing charge, not the conversion fee, not what it charges on a foreign-currency purchase, not what an ATM withdrawal would cost, not daily or monthly limits. None of those numbers exist on the pages I can see.

There are no tiers to compare. There is one card, described once, and the framework for understanding it is that your collateral determines your spending power. That is a coherent model — it is the pre-loaded balance model, where the card cannot overdraw because it only ever spends what you have loaded — but the specific numbers are the card’s business, and the card does not publish them.

What this means in practice for two or three ordinary payments:

A coffee. You buy a $5 coffee. What you do not know from the public pages: whether there is a conversion fee applied between the USDC collateral and the merchant’s currency, and whether an international transaction fee applies on top. If the coffee is in a currency other than your card’s — and the card’s currency is not stated — you may be paying twice.

A subscription. You buy a $20 monthly service. Same unknown conversion treatment. What is also not stated is whether the merchant will accept a virtual card at all, which touches the general problem I come back to below: some merchants decline prepaid or foreign-issued cards because the issuer details in the card number give them away.

A hotel or a large purchase. Not stated whether such a payment would trigger a hold. Declined authorisations, and authorised payments later reversed, can leave a hold on funds for several days, typically up to 7 — but how Sponge handles a pre-loaded balance in that situation is not described.

I am not going to guess at these numbers, and you should be wary of anyone who does. If the fee schedule matters to your decision — and for a card you intend to use more than experimentally, it should — the only reliable route is to ask the team directly before you load funds.

How to top it up

Topping up is a command, not a payment screen. The collateral is USDC, and it moves from your Sponge wallet to the card with card fund. The example chain shown is base; the SDK mentions base or solana as optional chain choices.

That is the whole funding story, and it has a specific shape worth understanding. It is not a bank transfer into an account. It is a stablecoin transfer between two things you control inside the platform’s own environment, on a blockchain you choose from a short list. The fees and minimum amounts for this operation are not stated.

Getting the money back out works the same way in reverse: card withdraw, or withdrawSpongeCard, returns the USDC collateral to your wallet, with the amount taken up to two decimal places. Fees for the withdrawal are not stated.

Three things to keep in mind here, all of them general to stablecoins rather than specific to Sponge:

• The network matters and cannot be undone. A deposit sent on a network the provider does not support, or to an address belonging to a different network, can be lost or need manual support recovery with no guarantee. Blockchain transfers are irreversible.
• Moving tokens on a given network has its own cost. Network fees — gas on Ethereum, bandwidth and energy on Tron — are charged by the blockchain, not by the card provider.
• USDC is not the same everywhere. Circle listed USDC as natively supported on 38 networks as of 16 September 2026, and it stopped supporting USDC on Tron in February 2024. So if a tutorial somewhere tells you to send USDC over TRC20 as the natural choice, that advice is out of date.

The fact that Sponge names base and solana as its chain options means your deposit is not exposed to the older, more expensive networks. That is a sensible default.

Paying with it every day

There is no consumer app. I looked, and none was found. You use Sponge through a command-line tool (npx spongewallet), an SDK, and MCP. Store ratings are not applicable, because there is nothing in the stores to rate.

Wallet support is not stated. Rewards are not stated. The dispute process — what happens when a charge you did not authorise, or did not receive, needs to be contested — is not stated. Apple Pay and Google Pay support are not addressed. ATM withdrawals are not addressed, and neither is whether the merchant-desk category of spending is possible at all.

So the honest answer to “what does everyday use look like” is: it looks like a program spending money. The card exists to be handed to an agent with an API key, not to be handed to a waiter. If your everyday involves a tap at a terminal, a queue at a coffee shop, or a phone-native payment, this card does not meet you there — not because the technology cannot do it, but because nothing in the documentation says it does.

Where the card does sit well is the case it was built for. An agent that needs to buy something without a human in the loop needs a card number it can store, a way to load value without a bank connection, and a spending ceiling tied to what it holds. Sponge provides all three. The ability to freeze or limit the card at runtime is not stated, which is the first thing you would want to check before giving an agent a live card number.

What can go wrong

Let me separate what is specific to Sponge from what is inherent to this whole category.

On Sponge specifically. The counterparty question is the first one. Sponge Inc. is the company behind the platform (shown as “Sponge (YC W26)” in its footer data), and the card is issued by Rain, described as a Visa Principal Member. The issuing bank is not named, and the licences are not stated. The terms are governed by US law. You are therefore relying on a company whose regulatory footing is not documented, and on an issuer whose banking arrangements you cannot see. That is not disqualifying — plenty of legitimate programmes look like this from the outside — but it is a risk you are taking on with no information to price it.

The second Sponge-specific point: no official incidents are published, and a single search for user reports or news found nothing. In a category where failed programmes are common, an absence of reports can mean a good record or a small one. Sponge is young. I would weight that finding accordingly rather than treat it as a clean bill of health.

On the category. Custody is the question nobody can answer for you. If the funds backing your card sit with a provider, you are trusting that provider completely — and the record in this category is long: Mt. Gox (roughly US$350 million reported stolen, 2011–2014), Coincheck (roughly US$400 million, 2018), Ronin Network (US$625 million, 2022). A seed phrase, typically 12 to 24 words, is the unencrypted form of your private key; anyone who obtains it can restore the wallet and spend everything in it, and crypto transfers are typically irreversible with no built-in recovery.

Programmes also close. Visa terminated its global agreements with FTX in November 2022 and the FTX US debit card was wound down. WaveCrest, a Visa issuer that supplied several crypto card brands, was suspended by Visa in Europe in 2018, closing all its Visa programmes. When a programme ends, the usual sequence is a notice period, then spending and loading stop, then you are asked to withdraw your remaining balance. That is the risk that sits underneath every card in this category, including this one.

And on the regulatory side, a card is a payment service regulated separately from the crypto side. Under MiCA — the EU’s markets-in-crypto regulation, whose stablecoin and e-money-token rules applied from 30 June 2024 and whose remaining provisions applied from 30 December 2024 — an e-money token may be issued only by a credit institution or an electronic money institution. A crypto card therefore often depends on two licences, and Sponge’s licensing position is not stated.

One more risk that is easy to overlook because it feels technical: sanctions and frozen funds are real. Tether says it disables tokens in wallets on the OFAC sanctions list and has frozen funds tied to illicit activity. Stablecoins are not censorship-proof, and neither is a card that settles in one.

What to take instead

If Sponge’s virtual, agent-only, USDC-funded design is not what you need, the alternatives below publish more: card currency choices, fee schedules, tier structures and cash-back terms. None of them scores well enough to be a recommendation on its own, but each answers questions Sponge leaves blank.

Xplace — 7.7 / 10. A Visa card with both virtual (instant) and physical options; Silver is live, Gold and Platinum are described as coming soon with delivery in 7–14 business days. It runs in two modes: Cash mode spends your stablecoin balance, Credit mode borrows against your holdings, with no origination fee on the borrowing. Fees are clearer than Sponge’s — Basic is free, Silver $99/year, Gold $249/year, Platinum $999/year, and 0% FX on Platinum — though FX for the other tiers and the conversion fee are not stated, and the country list is not given, with only the note that “services are not available in all jurisdictions”. Visa acceptance is stated across 160+ countries. You fund it with BTC (cbBTC), ETH (wETH), SOL, JitoSOL, USDC, USDT or xStocks on Solana. Credit-mode cash-back is by tier: 0.5% Basic, 1% Silver, 1.5% Gold, 2% Platinum, paid in USDC to your wallet at settlement; Cash-mode cash-back is not stated.

ether.fi — 6.7 / 10. The most transparent about who it will accept, which is its real strength. It issues only in listed jurisdictions — Andorra, Argentina, Australia, Austria, Brazil, Canada, Cyprus, Czech Republic, France, Germany, Hong Kong, Hungary, Italy, Japan, Mexico, Poland, Portugal, Singapore, Spain, Switzerland, UAE, UK, plus 31 US states, with Belgium and Ireland eligible without physical delivery — and it states plainly that if your jurisdiction is not listed you cannot apply. Citizenship rules are not stated, and ATM withdrawals are blocked in North Korea, Iran and Myanmar. Visa, virtual and physical. Core members normally get one free virtual card; the first costs $10 in regional-pricing countries. FX fee by tier on top of the base rate: Core 0.5%, Luxe 0.25%, Pinnacle and VIP none, with 0% FX on EUR purchases. Cash-back is paid in ETHFI, locked for 7 days then claimable, with tiered caps. ATM, cash advances, P2P and gambling merchant categories are excluded.

Anodos Card — 7.2 / 10. The most explicit about exclusions, which saves you the guesswork. Available in 150+ countries “with a few exceptions”; cards cannot be issued to residents of Belarus, China (Mainland), Cuba, India, Iran, Iraq, Israel, Myanmar, Nepal, Nicaragua, North Korea, Russia, Syria, Turkey, Ukraine, Venezuela or Vietnam; Chinese and Hong Kong passports are not eligible; Nigeria, Sri Lanka and South Africa only with “enhanced review + explicit approval”. Spending is blocked in Cuba, Iran, North Korea, Russia, Syria, Ukraine and Venezuela. The terms require you to attest you are not a US citizen — a separate US programme exists in 30 states. Physical or virtual, issued under licence from Visa. Tiers: Financial Freedom $0, Empower Pro $9.99/month or $99.90/year, Sovereign Elite $29.99/month or $299.90/year. Card FX fee 1.50% / 1.25% / 1.00% by tier, currency exchange 1.00% / 0.75% / 0.50%. Interest is currently 0% APR on purchases; late payment “up to $40”, returned payment $29.00. Collateral is held in your own wallet on Ethereum, Polygon, Optimism, Arbitrum or others the issuer adds.

My read across the three: if you need to know whether you qualify, ether.fi and Anodos will tell you plainly and Sponge will not. If you need to know what you pay, Anodos publishes a full schedule and Sponge publishes nothing. If you need a card that works in both a wallet and a terminal, Xplace is the only one of the four describing physical cards as available now.

Who I would recommend it to

I would recommend Sponge to exactly one person, and I would want them to read this whole page first.

You should get this card if you are a developer who has built an AI agent that needs to spend money without you approving each transaction, you already hold USDC and think in stablecoin terms, you are comfortable driving a CLI or an SDK rather than filling in a form, and you have verified for yourself that the card works in your country and your agent’s typical merchant.

You should not get this card if you are looking for a replacement for a bank card you cannot open. In that case the two things you need most — an answer to “will they issue to me?” and a number for “what will this cost?” — are the two things Sponge does not publish. Reading a review can fill a gap; it cannot invent a fee schedule.

Before you load funds, three checks are worth your time. Ask, directly, what the conversion and foreign-exchange fees are, and what the daily and monthly limits are. Confirm the issuing bank and what regulatory licence sits behind the card. And test the failure path: withdraw a small amount back to your wallet before you commit real balance, so you know the round trip works while the stakes are small.

There is a general background worth holding in mind as you decide anything in this category. A card number starts with a 6- or 8-digit issuer identification number that merchants can look up, which is why a card issued in one country can look “foreign” to a shop in another and draw extra scrutiny — and why some merchants decline prepaid or foreign-issued cards outright. Address Verification Service, which compares the numeric parts of the billing address you type against issuer records, is mainly offered in the US, Canada and the UK and is generally unavailable for foreign-issued cards, which can cause declines. Whether the merchant category is blocked is a policy choice as much as a legal one: many issuers block the gambling category, MCC 7995, without any law requiring it, and the blocked list varies by issuer. And online payments often run through 3-D Secure, Visa’s version being Visa Secure, where a challenge or frictionless approval is decided by the issuer’s risk assessment.

On taxes, one point to note rather than act on: the IRS treats digital assets as property, so exchanging them for goods or services generally produces a taxable gain or loss measured in local fiat currency at the fair market value on the transaction date. Each card payment funded from crypto may therefore be a separate disposal. Whether that applies to you is a question for a qualified adviser, not for a review.

Frequently asked questions

What is the Sponge card?

Sponge is a virtual Visa card issued by Rain, a Visa Principal Member, created and controlled via developer tools rather than a consumer app. It is backed by USDC collateral, and the homepage describes it as a card accepted wherever Visa is accepted. The intended user is a developer giving an AI agent payment capability.

How does Sponge card work?

You move USDC from your Sponge wallet to the card with card fund on base or solana. The collateral amount determines your spending power, which getSpongeCardStatus reports. The card draws on this balance. To reverse it, card withdraw returns USDC to your wallet, with amounts up to two decimal places.

Is Sponge a bank?

No, it is not. Sponge Inc. is the platform provider, and Rain, a Visa Principal Member, issues the card. The issuing bank is not named and no licences are stated, although terms are governed by US law. The brand acts as a programme manager, and the licensed issuer holds the actual programme.

Who owns Sponge?

Sponge Inc. appears to own the platform, identified as Sponge (YC W26) in footer data. Rain issues the card. Beyond these, the corporate structure is not detailed, and no licences are stated. If ownership detail is critical for your decision, I recommend asking the Sponge team for clarification on their corporate footing.

Is the Sponge card available in my country?

The card’s pages do not list countries, and the platform terms only set a minimum age of 13 for the service. Whether residency or citizenship governs eligibility is not stated. This is the first thing to check yourself before applying, as the documentation does not offer a list of supported regions.

How do I get a Sponge card?

You start a hosted KYC flow from the CLI or SDK with a redirect URI, provide your occupation or SOC code, and accept consent flags including E-Sign and the Sponge Card terms. After approval, you submit an issuer application. Creating the card needs a billing address, an email, and a phone number.

Does the Sponge card require KYC?

Yes, the flow includes a hosted KYC step and an issuer application. This is two verification stages, which is more than some products request. What is not stated is the level — whether it is basic or enhanced — or what documents are accepted. KYC rules require regulated businesses to monitor customer transactions.

How do I top up the Sponge card?

You move USDC from your Sponge wallet with card fund, choosing base or solana. Fees and minimum amounts are not published. Note that network fees are charged by the blockchain rather than by Sponge, and sending on an unsupported network can lose funds with no guarantee of recovery from the provider.

How do I withdraw from Sponge?

Use card withdraw or withdrawSpongeCard to return USDC collateral to your wallet, with the amount taken up to two decimal places. Withdrawal fees are not stated. I would always test a small round trip before committing meaningful balance so you know the path works while the stakes are low.

Is the Sponge card safe?

The card number and CVC come back encrypted with a one-time secret key, and the documentation tells you to treat it as secret. Custody, two-factor authentication and freeze are not stated. No official incidents or user complaints are published, which is thin evidence, and the issuing bank is not named.

Is Sponge card free?

The card’s public pages do not publish any costs, including issuance, monthly or annual fees. Because these are not stated, there is no way to know if the card is free or what the cost of using it might be. You should ask the Sponge team for a fee schedule before applying.

How do I activate Sponge card?

The card is created through a technical call to createSpongeCard via the CLI or SDK, rather than through a traditional activation process. Once the KYC flow and issuer application are approved, the card credentials are returned to you, and the card is ready for use in your agent’s wallet immediately.

How do I use Sponge virtual card?

The virtual card is designed to be used by an AI agent. It is created through developer tools and funded with USDC. You store the card number and CVC securely as the documentation instructs, and the agent uses them to pay for APIs, subscriptions or services on your behalf automatically.

How do I add Sponge card to Apple Wallet?

The public documentation does not mention Apple Wallet or Google Pay support, and there is no consumer app to manage the card. Given that it is an agent-focused tool, it is unlikely that it can be added to mobile wallets for personal, everyday use in physical retail stores or shops.

Where can I use Sponge card?

The card is a Visa product, and the homepage describes it as accepted wherever Visa is accepted. However, it is a virtual card built for AI agents. Whether it works for any specific merchant or if that merchant accepts virtual prepaid cards depends on the merchant’s own payment and acceptance policy.

How do I delete Sponge account?

There is no information in the public documentation about how to delete your account or close the card. If you need to stop using the service, the best approach is to withdraw any remaining USDC collateral using the card withdraw command and then contact Sponge support through their Discord or X.

Content created by the «cryptocardshortlist» team