Agora Cards

What it is. A prepaid card service issuing Visa cards — virtual and physical — that are loaded with stablecoins and spent anywhere Visa is accepted. Loading happens in USDT (with USDC available inside the embedded wallet via cross-chain swap). Monero is not supported at the top-up step today. The operator has publicly said (2026-07-01, replying to xmr.club on X) that XMR support is *"on the roadmap"* but not shipped. Google Pay + Apple Pay work on the virtual card, the physical card adds ATM withdrawals.

Access — invite-only today. Registration requires a referral code. The signup form itself takes email only (no verify step at that stage). Curator test-onboarding (2026-07-02) walked through the full Virtual Card issue flow end-to-end — six steps: choose card type → choose variant → phone verify → review fees → pay → confirm. No government ID, no selfie, no address proof was requested at any point in that flow. The only PII collected is (a) whatever email you sign up with, (b) a phone number at step 3 (first/last name are marked *"(if provided)"* — optional). Where an ID gate might still hide (higher spending tier, unusual on-chain patterns triggering internal risk review) hasn't been probed. No Terms of Service or FAQ page was presented at any step of the flow either — no click-through agreement, no in-app terms modal. Combined with the fact that the public homepage does not disclose a legal surface at all (see Grade section below), this is a live concern for a card product.

Wallet architecture — two-tier custody. The dashboard embeds a Dynamic (dynamic.xyz) EVM wallet — a mainstream embedded-wallet SDK — that the user actually controls. You see a real EVM address (`0x…`) inside the dashboard; funds sitting in that wallet are self-custody. Cross-chain swaps route through LI.FI (li.fi), the audited cross-chain aggregator — the `/api/lifi/quote` endpoint is called from the frontend on every quote. Once you Top-Up the card itself, custody transfers to Agora's *"licensed and regulated custodian partners"* (unnamed) — that layer is where a card provider has to hold a float against the Visa BIN. So the site's *"Self-Custodial"* homepage bullet is defensible for the Dynamic wallet layer, but the card balance itself is structurally custodial. Readers should understand the boundary: hold what you can in the Dynamic wallet, top up only what you're spending soon.

Pricing (verified at checkout on 2026-07-02). Virtual card issuance: 90 USDT. The Step-5 total was 100 USDT — 90 USDT card fee + a 10 USDT initial funding delta (or a network-side surcharge; the fee sheet at Step 4 did not itemize where the extra 10 lands, worth confirming). Ongoing fees exactly match the homepage table:

• Top Up Fee: 2%
• FX Fee: 1.5%
• Transaction Fee: $0.30 + 1.5% (virtual) / $0.10 + 1.5% (physical, per homepage)
• ATM Withdrawal: 2% (physical only)

Effective total ≈ 5% typical, ≈ 7% with ATM on top. High-side of the VCC market — competitive cards run 2-3% total — but honestly disclosed at every checkout step.

Limits (verified at Step 4). Daily $250,000 · Monthly $1,000,000 · Per-transaction $20,000 · Lifetime cap $1,000,000 per card. Physical ATM: $1,500/day, $15,000/month. Institutional-scale limits — only makes sense in the context of an issuer partner satisfied with the pseudonymous-phone tier.

Deposit rails. USDT can be sent from your own wallet on five networks: TRON (TRC-20), Ethereum (ERC-20), BNB Chain (BEP-20), Solana (SPL), and Polygon. USDC is not a direct top-up but is supported as a swap source inside the embedded Dynamic wallet — so a user with USDC on any of those chains routes it through LI.FI → USDT → card top-up in one continuous UI flow.

Compliance surface. Prohibited-use list is transparent and comprehensive: gambling, sports betting, cryptocurrency purchases, petrol, military supply, gaming credits, non-profits, government agencies. 30+ countries geo-blocked including Cuba, Iran, North Korea, Russia, Ukraine, Belarus, Venezuela. The list is public before signup — a positive signal on operator honesty.

Tenure. X account `@AgoraCards` joined April 2026 (three months on that surface). Blog posts start May 2026. Paid blue check (X Premium subscription — not identity verification). No kycnot.me team-review, no monerica listing. Contact channels present on both the public site and inside the logged-in dashboard: Signal, SimpleX, Telegram (`@agora_cards`), X (`@AgoraCards`). No email address published anywhere on the operator's surfaces.

Grade C — why still C. The test-onboarding materially softens the earlier "unknown KYC posture" caveat: signup and card-issue is email + phone + payment, no government ID. Fees are honestly disclosed and match the homepage. Wallet stack (Dynamic + LI.FI) is mainstream, audited, and transparent. What still holds the grade at C: (a) No legal surface is published anywhere. The public homepage does not link to a Terms of Service, Privacy Policy, FAQ, About, or Contact page — those pages simply do not exist on the public site. No customer agreement text is presented at any step of the 6-step card-issue flow either (test-onboarding 2026-07-02). Readers are being asked to trust a Visa-linked custody product without any terms document to read, anywhere. The words *Terms* / *FAQ* / *About* / *Contact* do not appear in the homepage body copy at all, (b) no legal entity is named on the site itself and jurisdiction is stated only as *"Offshore"* on the operator's own X bio (a paid partnership thread by @cr1337 posted 2026-07-03 says the custodian is *"licensed and Singapore-based"* — operator-published via paid influencer, worth folding at attribution weight but not first-party disclosure), (c) no independent peer-directory listing corroborates the operator, and (d) the site remains invite-only, so casual readers can't verify anything themselves. Path to B: any two of — public Terms + FAQ published (whether or not they duplicate what's visible while logged in), named legal entity, or a peer-directory listing (kycnot, monerica, or comparable) — combined with the XMR top-up path shipping as the operator's roadmap indicates.