Three steps, start to settled.
The shop asks for one exact asset. Press pay, scan their code, and your phone signs it. The shop's connection sends it.
The shop asksAn exact amount, an exact asset. By tap or by code.
One press to payThe amount, the asset, the shop. Your phone signs the moment you scan.
no internet needed
The shop settlesThe shop's connection settles it. Both phones show it done.
Choose how the phones meet
Tap to pay
with NFCThe shop's request comes in and your signed payment goes back during the same tap.
Scan to pay
with QRYour phone reads the exact request, shows it to you, and signs when you press pay.
Offline requires one extra scan.
See how
Hide the steps
Your phone shows the signed payment as a QR code. The shop scans and submits it.
PayOne press. Your phone signs it.
Show your codeYour phone shows a code.
Shop scansThe shop scans your screen.
DoneThe shop sends it for you. Paid.
The shop submits online. You stay offline.
Your phone signs it. Everyone else just carries it.
A payment is a slip your phone seals with a key only it holds. Whoever carries that slip — your connection or the shop's — can't open it, can't edit it, and can't write a new one. Flip the switch: the courier changes, the slip doesn't.
Who carries it
Once your phone has sealed the slip, one job is left: get it to the network. Anyone can do that job, which is why it doesn't have to be you.
Same slip either way 3a9f…c210 byte for byte
∂pay's server: not on the path
Try to change it
This is the slip your phone sealed. Edit it the way a dishonest shop or server would want to.
An illustration of a check that really runs, on every payment, on the network. Hard cryptography at work.
The details, if you want them
01Where does my key live?
Your phone makes it when you set up the wallet, out of your 24 recovery words, and keeps it in the app's own storage on that phone. It is never uploaded: we don't see it, shop doesn't see it, network doesn't see it. Only YOU have the copy. That cuts both ways: lose the phone and the words, and the money is gone for us too.
02What exactly does my phone sign?
Who gets paid, how much, which asset, a one-time number for this payment, and a deadline. All of it is crushed into a single short fingerprint, and your key signs that fingerprint. Change a single character of the slip and the fingerprint changes with it, so the signature stops matching. There is no way to edit just one part.
03If the shop carries it, can the shop change it?
No. The shop's phone is holding sealed bytes it cannot rewrite. It has exactly two options: pass the slip on, or don't. If it doesn't, no money moves — you simply haven't paid, and you'll see that. What it can't do is raise the amount, point the payment somewhere else, or charge you again later.
04What can ∂pay's server actually do?
Less than you'd expect. It hands you this website and the app, and it reads public information back to you — your balances, your history, which assets exist. Payments don't go through it at all; your phone, or the shop's, talks to the network directly. And if we ever did stand in the middle, it would change nothing: we'd be holding the same sealed bytes as everyone else.
05Can one payment be charged twice?
No. Every slip carries a one-time number. Send it once or a hundred times and the network settles it exactly once, ignoring the rest. Each slip also carries a deadline a few minutes out — after that it's dead paper, and nothing moves.
Your key never leaves your phone. Every payment is settled by hard cryptography. Provably correct.
Take payments in minutes.
No signups, no hardware, no fees. Open the ∂pay wallet on any phone or in any browser, choose Receive, and show your QR. Anyone with the app can pay you.
Receive, the terminal tab
Fast. Offline. Yours.
Every payment, safely signed on your phone.
Works online or offline.
You press pay on your phone. The shop's internet does the rest. No internet on your side? Still fine. It just works.
Zero fees
Tap, paid. The full amount arrives in seconds.
Only you can move your money
Your money moves only when you say so. Your key never leaves your phone. Nobody else can touch it. Not even us.
What does "non-custodial" mean?
- There is no dpay account. We hold no balances. Your money lives on public networks (Internet Computer, Solana).
- It moves only with a key created on your phone. The key never touches our servers.
- We can't move, freeze, or recover your money. Lose your phone and your backup words, and it's gone for us too. That's what owning it means.
Money you already know. $, ₿, Ξ and ◎ ride as parallel rails in one wallet. The shop asks for one exact asset, you pay that asset, and nothing gets swapped behind your back.
Our manifesto.
Get ∂pay.
Install it, add money, you're set. Android for now. More soon.
No Android? Try the web wallet. The same app, in your browser. Run a shop? Its Receive tab is your terminal.