Sponge is a card for AI agents to spend from, built through a CLI rather than an app

Updated October 2026

Licensed

Available in US

Fast payouts

18+ Only

Sponge is not a crypto card in the shape most people picture: no shiny app, no cashback ladder, no Apple Pay badge on the homepage. It is a virtual Visa card aimed at developers who want to hand a spending instrument to an AI agent, denominated in USDC collateral held in a Sponge wallet, and issued by Rain, described as a Visa Principal Member. On the evidence published on its own pages, I scored it 4.9 out of 10 — not because anything looks wrong, but because almost nothing about who can have it, what it costs and how it behaves on an ordinary Tuesday is stated in public at all.

The conditions described here are current as of October 28, 2026.

The verdict: 4.9 out of 10, and who that suits

Sponge is a competent piece of infrastructure for one specific job: letting software spend USDC through a Visa number without a person tapping anything. If you are building an agent that pays for API calls, compute or subscriptions, and you are comfortable living in a CLI, this card does that job and does not pretend to be a bank account. If you are looking for something to put in your wallet for the supermarket, Sponge is the wrong shape entirely, and no amount of reading will change that.

The score is built from six criteria. Every mark below comes from the card’s own published material, checked on 2026-10-20, and the reasons are mine.

Two of those lines deserve a word each. Cost and top-up both sit at 5 out of 10 not because the prices are high but because they are absent — a mark of 5 is the middle of the scale being the honest “I could not find out”, not a hedge. And the 3 for everyday use is the one that decides who should read the rest of this page. Sponge’s documentation describes a card created by a function call, not a card arriving in an envelope, and its surfaces are a command-line tool, a software development kit and an MCP server. There is no consumer app: none was found, and store ratings therefore do not apply. That is a deliberate design choice, not an unfinished product — but it means the questions a shopper asks are mostly questions Sponge has not invited.

Will they give you the card?

Short answer: the card pages do not name a single country, and the platform terms only set a minimum age of 13. I checked for a country list on the card’s public pages and there is not one. That is the honest answer, and it is the one you should act on: if you need to know today whether you are eligible where you live, the card’s own pages will not tell you, and you would have to ask the project directly or find out by applying.

The age floor is worth pausing on. Thirteen is the minimum for the service, which is a developer-tool convention rather than a card-issuing convention — cards in the wider prepaid and debit world are generally issued to adults at 18 or over, and some issuers set higher limits or ages. So the number on the Sponge terms should not be read as “a 13-year-old can hold this card”. It tells you the platform itself is not the age gate; the issuer’s rules sit behind it, and those are not published.

If your situation is that you have trouble getting an ordinary bank card — no address, no documents, a thin file, a country where a mainstream card is awkward — then Sponge’s silence on countries is exactly the wrong shape of silence, and I would not treat this as a route in. Eligibility here runs through a hosted identity check and then an issuer application, and the issuer is the one who decides. There is no country list to check yourself against, and no published answer about which identity documents are accepted or what age the issuer requires.

How to get it

There is no “apply” button in the ordinary sense. The route runs through the command line or the SDK, and it has two halves: first the identity check, then the card application.

The identity check is a hosted KYC flow started from the CLI/SDK with a redirect URI. You are sent out to the hosted flow and come back. When that completes, you submit an application to the issuer, and the card is created once approved. What the application asks for is specific: your occupation, or a SOC code, and a set of consent flags covering E-Sign, the account-opening privacy notice, the Sponge Card terms, accuracy of the information, and non-solicitation.

Creating the card itself requires a billing address — line 1, city, region, postal code and country code — plus an email address and a phone number.

What is not stated is as important as what is. The card’s public pages do not say which documents are accepted, what age the issuer requires, or how many KYC tiers exist. There is a single hosted check followed by a single issuer application, and no further detail published.

Fees and what a payment really costs

Here is the blunt part: the card’s public pages do not state the cost. Issuance, monthly fee, conversion fee and FX fee are not stated. Cash machine access is not stated. Daily and monthly limits are not stated. Tiering is not stated — there is one Sponge Card described, no tiers at all.

What the pages do say is a principle rather than a number: collateral determines spending power, and the card’s status call returns the spending power available to you. In plain terms, you do not have a credit limit and a balance; you have a pot of USDC and you can spend what is in it.

Spending is backed by USDC collateral. The card’s own currency, and whether it handles more than one currency, is not stated. So the two questions that matter most when you actually pay for something — what happens to your USDC on the way through, and what happens when you buy something priced in a currency that is not dollars — both have no published answer. That is not a small gap. A conversion fee is the difference between a card that costs you a few percent and a card that quietly takes a slice of every payment.

Let me run two or three everyday payments through it, using only what is published, and you will see where the friction is. Buying a coffee for about $5 from a wallet holding $400 of USDC: your collateral sets the ceiling, so the payment clears against your balance; the amount that leaves your wallet in USDC depends on a conversion process the pages do not describe. Buying a subscription for $50 that renews monthly: same mechanism, and the same undisclosed fee applied again, every month, silently. Buying something priced in euros while your collateral is in USDC: the card is described as accepted wherever Visa is accepted, but no card currency and no FX rate are published, so I cannot tell you what the cost is — and neither can the pages.

That is why I score cost at 5 and not higher. It is not that the fees look bad. It is that a reader cannot budget.

Top up

Topping up is one operation, and it is not the operation most people expect. You do not send money to a card number. Collateral in USDC moves out of your Sponge wallet to fund the card with a card fund command — the worked example uses the base network, and the SDK mentions base or solana as optional chains.

In practice: from the Sponge wallet, card fund, choosing base or solana, and the USDC collateral moves. That is the whole mechanism. There is no other coin — the collateral is USDC and only USDC. Fees and minimums for the top-up are not stated.

Withdrawing works the same way in reverse. A card withdraw command, or the corresponding SDK call, returns USDC collateral to your wallet, with the amount specified to up to two decimal places. Fees for the withdrawal are not stated.

Two practical points follow, and neither is about the card. First, the network matters: blockchain transfers are irreversible, so sending on a chain the card provider does not support, or to an address belonging to a different network, can lose the funds or need manual support recovery with no guarantee. Choose the chain the SDK names. Second, gas is not Sponge’s charge — on-chain network fees for a deposit are charged by the blockchain, not by the card provider — but you still need the network’s own token to move funds, and a wallet holding a stablecoin with nothing else in it often cannot send at all.

And a habit worth building early, given everything above: get a small amount back off the card and watch it land before you commit anything meaningful. If the withdrawal works cleanly the first time, you have learned the command, the network and the decimal handling with a sum you would not miss.

Paying with it every day

Every day, for this card, is not very much of a category. The card is virtual, created by a create-card call. Physical delivery is not stated, and the documentation describes the virtual card only. Apple Pay, Google Pay and cash machine support are all not stated.

You are not adding Sponge to Apple Wallet. You are not tapping anything. The realistic daily pattern for Sponge is a program issuing a payment through the CLI, the SDK or an MCP server — which is the point, and is why the card exists.

Where you can spend: wherever Visa is accepted, on the homepage’s description of a credit card issued by Rain, a Visa Principal Member. That is a wide acceptance footprint in principle. In practice, the category-wide caveats apply, and they are worth holding in mind before you count on it for subscriptions. Some merchants decline prepaid or foreign cards, because the card’s identification number reveals the card type and the issuing country, and a mismatch against the billing address can trigger extra scrutiny. Address verification is offered mainly in the US, Canada and the UK and is generally unavailable for foreign-issued cards, which can cause declines. A declined authorisation may leave a hold on your funds that can linger for several days.

Rewards are not stated — no cashback, no tier ladder, nothing published. Wallets, beyond the Sponge wallet itself, are not stated. Disputes and chargeback handling are not stated. Support is reachable: there is a contact link on the homepage, an X account at @paysponge, and a Discord.

What can go wrong

Nothing has gone wrong publicly. No official incidents are published, and no user reports or news emerged from a single search on 2026-10-21. There is no Trustpilot page and no reviews were found. Silence is not a clean bill of health — it is usually a sign that a product is too small to have a complaint history yet, which is exactly what you would expect of a YC W26 company.

The company picture is this: Sponge Inc., with Sponge listed as YC W26, and the card issued by Rain, described as a Visa Principal Member. The issuing bank is not named, licences are not stated, and the terms are governed by US law. In this category that combination is worth pausing on. A crypto card normally rests on two licences — one for the crypto side and one for the payment side — because a card itself is a payment service regulated separately from the crypto activity behind it. When the issuing bank is unnamed and the licences are unstated, you are being asked to hold collateral on trust rather than on a published framework. I would want to see the issuing entity named before I funded this with money I cared about.

On security, the design is better than the silence suggests. The card number and CVC come back encrypted with a one-time secret key, and the documentation is explicit: treat that secret as secret, do not log it, do not persist decrypted values. That is the correct instruction and the correct instinct — a card number in a log file is a card number in a log file. What is not stated: the custody model, two-factor authentication, and whether there is a freeze control.

Now the general risks that apply to anything in this category, since the card does not speak to them. Crypto transfers are typically irreversible and a stolen key has no recovery path — the network cannot freeze or return funds. Custodial platforms have a real history of failure: Mt. Gox, with about US$350 million reported stolen across 2011 to 2014; Coincheck, about US$400 million in 2018; and Ronin Network, US$625 million in 2022. And card programmes themselves can be wound down. Visa terminated its global agreements with FTX on 13 November 2022 and the FTX US debit card was wound down by its issuer; WaveCrest, a Visa issuer that supplied crypto card brands, was suspended by Visa in Europe in 2018, closing all WaveCrest-issued Visa programmes. When a programme closes, the pattern is a notice period, then spending and loading stop, then you are asked to withdraw what is left. Treat any balance here as working capital, not savings.

Two smaller frictions, both general. Sanctions screening is applied to citizenship and country of birth as well as address, and Tether says it disables tokens in wallets on the OFAC sanctions list and has frozen funds tied to illicit activity — so stablecoins are not censorship-proof. And in the US, FinCEN guidance (FIN-2013-G001) treats administrators and exchangers of convertible virtual currency as money transmitters, while people merely buying goods or services are not.

What to take instead

If Sponge is the wrong shape, the alternatives below are consumer products with published prices, published country rules and cashback you can actually read. Each is a card for a person, not for a program. I have set out their scores as I found them.

Walk through the differences that would actually decide it for you.

Nexo is the middle option and the one with the most legible price list. There is no monthly, annual or inactivity fee. A virtual card needs at least $50 in the account to activate. The physical card ships free but needs a balance above $5,000 in digital assets and at least the Gold tier. It spends from the Nexo account across more than 100 digital assets, and Debit Mode uses stablecoins, crypto and FiatX assets. Cashback applies only in Credit Mode with more than $5,000 held, paid in NEXO tokens or Bitcoin, and the tier rates run from Platinum at 2%/0.5% down to Base at 0.5%/0.1%. Eligibility wording covers residents and citizens of selected European countries, including the EEA and the United Kingdom; no full country list is on the page. One thing to weigh that is not official: Cointelegraph reported a 2025-era Bulgarian police raid on Nexo’s Sofia office over alleged Russia-sanctions and AML violations, with no official Nexo statement on Russians found.

Xplace has the highest score here and the sharpest cashback. Visa, virtual instantly and physical (Silver is live; Gold and Platinum are coming soon with delivery in 7 to 14 business days). Cash mode spends a stablecoin balance, Credit mode borrows against your holdings with no origination fee. You deposit BTC (cbBTC), ETH (wETH), SOL, JitoSOL, USDC, USDT or xStocks on Solana. Credit-mode cashback runs 0.5% on Basic, 1% Silver, 1.5% Gold and 2% Platinum, paid in USDC to the wallet at settlement; Cash-mode cashback is not stated. Stablecoin spending carries no hidden spread, and FX is 0% on Platinum — the catch is the $999 annual fee at that tier, against $99 at Silver and $249 at Gold.

ether.fi is the one most tightly tied to a country list. It issues only in listed jurisdictions, and the page is blunt: if your jurisdiction is not listed you will not be able to apply. The list runs to Andorra, Argentina, Australia, Austria, Brazil, Canada, Cyprus, Czech Republic, France, Germany, Hong Kong, Hungary, Italy, Japan, Mexico, Poland, Portugal, Singapore, Spain, Switzerland, the UAE, the UK, plus 31 US states; Belgium and Ireland are eligible without physical delivery. FX is on top of the base rate by tier — Core 0.5%, Luxe 0.25%, none for Pinnacle and VIP — and EUR purchases carry a 0% FX article. Cashback is paid in ETHFI, locked for 7 days before you can claim it: Core 3% up to $2,000 monthly, then 1% to $3,000, then 0.5%; Luxe 3% up to $10,000; Pinnacle 3% up to $50,000; Business 1%. Cash machines, cash advances, peer-to-peer and gambling categories are excluded. ATM withdrawals are blocked in North Korea, Iran and Myanmar.

Who I would recommend it to

Three kinds of person, and only three.

First, the developer with an AI agent that needs to pay. You have a USDC balance, you have infrastructure, you want a Visa number your agent can spend against without a human in the loop, and you are at home in a command line. Sponge does that, the docs read as though someone who builds things wrote them, and the card-number encryption model is the right one. Start small, withdraw early, and learn the command before you fund it seriously.

Second, anyone evaluating the category who wants to see a card that skips the consumer layer entirely. Sponge is a useful reference point precisely because it is unpolished — it shows what remains when you take away the app, the tiers and the cashback. That makes it a good thing to read once, and a bad thing to rely on.

Third — and this is the short list — nobody else. Not for day-to-day spending, not for a wallet you are adding to Apple Pay, not for someone in a specific country trying to find out whether they qualify, and not as a place to hold money. If the fees are the first thing you need to know and the card will not tell you, that is disqualifying for anything except an experiment you are prepared to lose.

Frequently asked questions

What is Sponge card?

Sponge is a virtual Visa card built for AI agents rather than people, issued by Rain, described on its homepage as a Visa Principal Member, and described there as a credit card accepted wherever Visa is accepted. Spending is backed by USDC collateral held in your Sponge wallet. There is no consumer app: the card is created through the CLI or SDK, and the card’s public pages do not name the countries it is available in.

How does Sponge card work?

Collateral in USDC moves out of your Sponge wallet to fund the card, and the card then spends against that collateral — the card’s status call returns your spending power, which means the balance sets the ceiling rather than a credit limit. Withdrawals run the other way, returning USDC to your wallet, with the amount specified to up to two decimal places. You interact with all of it through a command-line tool, an SDK or an MCP server.

Is Sponge a bank?

No, and it does not present itself as one. The company is Sponge Inc., listed as YC W26, and the card is issued by Rain. The issuing bank is not named, licences are not stated, and the terms are governed by US law. I would treat that as a reason to fund it only with money you can afford to have tied up in a card programme.

Who owns Sponge?

Sponge is operated by Sponge Inc., which appears in the site footer, with Sponge listed as a YC W26 company. The card itself is issued by Rain, which the homepage describes as a Visa Principal Member — so the brand you see and the entity that issues the card are two different companies, with Rain’s own regulatory details not published.

Is Sponge card available in my country?

The card’s public pages do not state a country list, so I cannot tell you either way. The platform terms only set a minimum age of 13 for the service, which is a platform rule rather than an issuing rule, and the issuer applies its own criteria after the hosted identity check. If country eligibility is the deciding factor for you, this is the wrong card to research and the right question to ask the project directly.

Does Sponge card require KYC?

Yes. There is a hosted KYC flow started from the CLI or SDK with a redirect URI, and after that an issuer application. The application asks for your occupation or an SOC code, plus consent flags covering E-Sign, the account-opening privacy notice, the Sponge Card terms, accuracy, and non-solicitation. Which documents are accepted and what age is required are not stated on the card’s public pages.

How do I activate Sponge card?

There is no activation tap, because there is no physical card and no wallet token to add. The card is created by a create-card call in the SDK or CLI, after your identity check and issuer application are approved, and it needs a billing address, an email and a phone number. What you receive is a card number and CVC, returned encrypted with a one-time secret key.

How do I top up Sponge card?

With a card fund command from your Sponge wallet, moving USDC collateral onto the card — the worked example uses the base network, and the SDK mentions base or solana as optional. USDC is the only coin involved. Top-up fees and minimums are not published, and on-chain network fees are charged by the blockchain rather than by the card provider.

Can I add Sponge card to Apple Wallet or use an ATM?

Not on any published basis. Apple Pay, Google Pay and cash machine support are all not stated, and the card is virtual with physical delivery not stated either. Treat it as something your code spends with, not something you hold. If a physical card and contactless payment are requirements rather than preferences, none of this card’s documentation says you will get them.

Is Sponge card free and safe?

Free is not stated — issuance, monthly, conversion and FX fees are all absent from the public pages, so I cannot tell you what it costs to run. On safety, the security design is a genuine plus: the card number and CVC come back encrypted with a one-time secret key, and the docs tell you to treat it as secret and never log or persist it. The custody model, two-factor authentication and freeze controls are not stated, and no complaints have been published — which is also true of a product too young to have any.

Content created by the «cryptocardcheck» team