Custodial Lightning Wallets — Final Scoring & Rankings (Beginner + Decoy)

1) Criteria

Each criterion is scored from 0 to 100 (higher is better under a sovereignty-maximalist lens).

1. Identity / KYC coupling

How tightly the wallet is bound to state-grade identity (ID docs, SIM-KYC, phone, email).

2. Surveillance / logging / retention

IP/device tracking, analytics stack, AML record-keeping, deletion options, and retention horizon.

3. Bitcoin-only purity

Pure BTC/LN vs Liquid, stables, and USDT bridges or similar synthetic rails.

4. FOSS / self-hostability

Open-source client/server, auditable code, ability to fork/run equivalents.

5. Custody & exit path

How easy it is to drain to self-custody (on-chain + LN), and how clear custodial status is.

6. Beginner UX & safety

Onboarding friction, clarity, and low chance of user-error driven loss or confusion.

7. Decoy plausibility

How believable it is as “the only wallet in use” for a normie/regulator-coded profile.

8. Legal / geo attack surface

Jurisdiction, AML posture, history of geo-blocks or explicit regulatory heat.

Important: These are custodial wallets. Every score is about relative risk and utility as a surface layer for Lightning payments, not a claim of safety comparable to self-custody.

2) Weights

Two composite scores are calculated with different priorities: one for onboarding beginners, one for advanced decoy surfaces.

Beginner Onboarding Score (BOS)

Criterion	Weight
Identity / KYC coupling	20%
Surveillance / logging / retention	10%
Bitcoin-only purity	10%
FOSS / self-hostability	10%
Custody & exit path	15%
Beginner UX & safety	25%
Decoy plausibility	5%
Legal / geo attack surface	5%

Advanced Decoy Score (ADS)

Criterion	Weight
Identity / KYC coupling	30%
Surveillance / logging / retention	20%
Bitcoin-only purity	10%
FOSS / self-hostability	10%
Custody & exit path	10%
Beginner UX & safety	5%
Decoy plausibility	10%
Legal / geo attack surface	5%

Composite calculation: Score = Σ(criterion_score × criterion_weight). Weights sum to 100% in each role.

3) Final composite rankings

Beginner Onboarding (BOS)

Rank	Wallet	BOS
1	Coinos	78.8
2	Rizful	75.8
3	Wallet of Satoshi	70.8
4	Blink	69.0
5	Machankura	55.0

Advanced Decoy (ADS)

Rank	Wallet	ADS
1	Rizful	79.0
2	Coinos	78.2
3	Wallet of Satoshi	62.2
4	Blink	56.4
5	Machankura	45.2

Interpretation: Rizful and Coinos form the top tier under a sovereignty-maximalist lens. Wallet of Satoshi and Blink remain high-utility for onboarding and everyday payments, but carry heavier surveillance and/or AML entanglement. Machankura is structurally niche: critical in feature-phone contexts, weaker as a general sovereignty surface.

4) Raw per-criterion scores (0–100)

Higher is better under a sovereignty-maximalist lens.

Wallet	KYC / ID	Surveillance	BTC purity	FOSS	Exit	UX	Decoy	Legal
Rizful	95	80	70	40	85	70	80	70
Coinos	95	60	65	95	75	80	75	55
Wallet of Satoshi	75	25	95	5	85	95	95	40
Blink	40	15	80	95	85	92	90	35
Machankura	30	30	85	20	65	80	70	45

Links in the analysis below point to primary sources (official sites, privacy/terms pages, documentation, and open-source repositories) wherever possible.

5) Wallet-by-wallet analysis

Rizful Best overall sovereignty-aligned custodial surface Site · Privacy · Docs · USDT bridge doc

Core picture

Email-based account with explicit guidance toward privacy-preserving email and VPN usage (privacy policy). Default analytics uses Plausible (privacy-friendly). Strong focus on Nostr integrations and Nostr Wallet Connect (NWC) use-cases (Rizful.com).

Key score drivers

High KYC and high privacy posture by default (analytics + retention details). Purity hit due to explicit Lightning-to-USDT sending (documentation). FOSS hit because the full backend is not presented as a turnkey, self-hostable open stack.

Evidence-linked specifics

Privacy posture: default site analytics via Plausible; optional session recording/advanced analytics is opt-in and time-limited (Rizful privacy policy).
Exit tooling: direct guides for Lightning → on-chain and on-chain → Lightning swaps (LN→on-chain, on-chain→LN).
Synthetic bridge: explicit “Send USDT” path from Lightning balance with risk disclaimer (USDT doc).

Net: Strongest composite as a sovereignty-leaning custodial Lightning surface, especially in Nostr-native flows. Scores are reduced for explicit stablecoin bridging and limited end-to-end open-core verifiability.

Coinos Best beginner composite; strongest FOSS stack Site · Server (GitHub) · Classic app (GitHub)

Core picture

Web-first custodial wallet supporting Bitcoin mainchain, Lightning, and Liquid (repo description). Open-source server implementation is published and actively maintained (coinos-server).

Key score drivers

Very high FOSS / self-hostability via open server + code. Purity hit from Liquid support (sidechain + asset layer). Surveillance uncertainty typical of web custodians, mitigable via hardened access patterns (e.g. Tor).

Evidence-linked specifics

Open backend: “Coinos back-end application server” and system components are documented in the repository (GitHub).
Multi-network support: classic app states support for Bitcoin, Liquid, and Lightning (coinos-classic).

Net: Highest beginner composite due to “no-KYC-leaning” posture combined with maximum FOSS resilience and workable UX. Loses points on Bitcoin-only purity because Liquid introduces an additional asset layer.

Wallet of Satoshi UX + decoy king; heavy telemetry Site · Privacy · Disclosure · US market exit (The Block)

Core picture

Widely used custodial Lightning wallet optimized for near-zero friction onboarding (official site). Privacy policy describes collection of personal information, transaction data, and device/network metadata (privacy policy).

Key score drivers

Very high UX and very high social plausibility. Very low FOSS verifiability. Low surveillance posture (rich metadata + large operator footprint). Regulatory heat evidenced by the U.S. app-store removal and market exit in 2023 (report).

Evidence-linked specifics

Data collection and handling described in official policy (privacy policy).
Custodial vs self-custody disclosure and Spark/third-party processing references (disclosure document).
U.S. market exit: removed from U.S. app stores and stopped serving U.S. customers in late 2023 (The Block).

Net: Excellent onboarding and decoy plausibility; penalized heavily for closed infrastructure and telemetry surface.

Blink FOSS community bank; AML-entangled Site · Terms · Privacy · Know Your Custodian · Stablesats · FOSS repo

Core picture

Open-source custodial Lightning wallet built for community onboarding and everyday payments (blinkbtc). Operates as a registered Bitcoin Service Provider in El Salvador (terms & registration details).

Key score drivers

Very high FOSS resilience. Purity hit due to synthetic USD stability product (Stablesats) (overview). Low surveillance/AML posture under a sovereignty lens, driven by formal compliance obligations and retention (privacy policy).

Evidence-linked specifics

Custodial security model and design philosophy (cold storage, multi-sig, operational controls) (Know Your Custodian, Security page).
Legal posture: formal terms and BSP registration context (terms).
Data retention posture and compliance-aligned framing (privacy policy).

Net: Excellent open-source banking stack and beginner UX, but deeply embedded in AML/CTF compliance dynamics.

Machankura USSD feature-phone bridge (niche) Site · Privacy · Terms · Android app · Profile (Bitcoin Magazine)

Core picture

USSD-accessible custodial Lightning wallet for feature phones, enabling sats transfers without mobile data (8333.mobi). Privacy policy covers personal data processing and usage/technical logging (privacy policy).

Key score drivers

High niche UX in low-infrastructure contexts. Moderate Bitcoin purity (wallet is sats; surrounding ecosystem often includes vouchers and telecom rails). Structural identity coupling via phone number and telco infrastructure (SIM registration regimes vary by country).

Evidence-linked specifics

Phone-number receipts and optional username to avoid publicly sharing a phone number (receive section).
Policy coverage: data processing, storage, and disclosures (privacy policy, terms of service).
Context: feature-phone Bitcoin/Lightning adoption discussion and regional impact (Bitcoin Magazine, Decrypt).

Net: Low global sovereignty score, high niche value as a “feature-phone Lightning bridge.”

About links: Sources are embedded inline (official sites, privacy/terms pages, documentation, and open-source repositories). No “all-links appendix” is used; each claim is linked at the point it appears.