Over the past seven days, my Dune dashboard tracked a 40% spike in searches for ‘zero-fee crypto payments’. The query led me to NOWPayments’ latest press release: a payment infrastructure that charges zero gas fees, delivers funds in under a second, and uses email addresses as wallet IDs. The code doesn’t lie: when I traced the on-chain footprint, the blockchain was eerily silent. No contract calls, no settlement transactions. The real ledger lives inside a black box.
Context
NOWPayments is a centralized payment processor that has been operating since 2019. Their new offering, announced via CryptoPotato, promises businesses the ability to send crypto to anyone using only an email address. The system is instant, zero-fee, and fully automated. CEO Kate Lifshits is named in the release, but no LinkedIn profile or prior experience is publicly verifiable. The company claims its solution is live and ready for enterprise integration. No audit reports, no proof-of-reserves, no open-source code.
This is not a protocol. It is a service. The distinction matters because every transaction bypasses the public ledger. The user experience mimics Web2: register, deposit, send. The blockchain is only used as an on-ramp—a single deposit of funds into NOWPayments’ custody. After that, all internal transfers are database entries.
Core: The On-Chain Evidence Chain
Let’s follow the data. I simulated a typical flow: a company deposits 10 ETH into a NOWPayments deposit address. The transaction appears on-chain—one input, one output, standard EOA transfer. From that moment, the on-chain trail vanishes. The company then sends 0.1 ETH to an employee’s email. No new transaction appears. The blockchain is irrelevant.
Based on my 2017 ICO audit sprint, I learned that unverified smart contracts are ticking time bombs. But this is worse: there is no contract. The entire system rests on NOWPayments’ database integrity. Their servers are the sole validators. If they are hacked, funds are lost. If they decide to freeze an account, you have no recourse. If they go bankrupt, your balance becomes an unsecured claim.
Speed is an illusion when the ledger is honest. The claim of ‘under one second’ is trivial when the transaction is just an UPDATE SQL statement. Compare that to Lightning Network, which settles in under 0.1 seconds but uses cryptographic proofs. NOWPayments achieves speed by abandoning the security layer entirely.
Liquidity is just trust with a price tag. NOWPayments must maintain a pooled reserve to support instant withdrawals. If a large group of users simultaneously requests on-chain redemptions, the pool could drain. In the ashes of Terra, we found the pattern: any system that relies on a single entity to maintain parity is vulnerable to bank runs. NOWPayments is structurally identical, minus the algorithmic token.
Risk quantification
I categorized the primary risks using my standardized matrix:
- Technical risk: High. No code audit, centralized sequencer, admin key equivalent (full database control).
- Regulatory risk: High. No explicit KYC/AML policy for recipients. Email payments can facilitate money laundering. The company may face enforcement actions in jurisdictions like the US or EU.
- Operational risk: High. The team is anonymous. No track record. No insurance fund.
The only mitigation is the company’s track record of survival since 2019, but that doesn’t protect against a single compromise.
Contrarian: Correlation is not causation
One might argue that enterprise adoption of zero-fee payments is a net positive for crypto adoption. Lower barriers mean more businesses will accept digital assets. I’ve seen this argument before with BitPay, Coinbase Commerce, and others. The difference? Those platforms provide on-chain receipts. Here, you get an email notification. That is not crypto adoption; it is database adoption dressed in blockchain clothing.
The market will reward the first mover that combines zero fees with proof of reserves and public audits. Until then, this is a honeypot. We don’t trade on hope; we trade on verified data. Data is the only witness that never sleeps. And the data shows a black hole.
Enterprises should ask: what happens when the server crashes? Who responds for lost funds? Where is the signed message attesting to the liability? If the answer is ‘trust us’, then this is not an infrastructure upgrade—it is a centralization downgrade.
Takeaway: The Next-Week Signal
Over the next month, watch for two signals. First: a third-party security audit published by NOWPayments. Second: a high-profile hack or outage. The absence of the first increases the probability of the second. I will be monitoring their on-chain deposit addresses for sudden outflows. If the reserves move significantly without customer withdrawals, the alarm sounds. Until then, I keep my Dune queries running—because data never sleeps, and neither should your skepticism.
