Security
Payment coordination without custody.
CrypticaPay creates and tracks payment requests while settlement remains between the payer and the receiving wallet configured by the merchant.
What CrypticaPay controls
The platform coordinates payment information and status for supported assets and networks.
- Payment requests, invoice references, and expected amounts
- Detection and matching of supported public blockchain activity
- Confirmation, partial-payment, overpayment, and expiry states
- Integration events used by websites, stores, applications, and community bots
What remains yours
Payments go to the receiving wallet configured for the request. CrypticaPay does not need custody of the merchant balance to report payment status.
- Private keys and recovery phrases
- Wallet access and signing authority
- Refund decisions and outgoing transfers
- Order fulfilment and confirmation thresholds
Build integrations defensively
- Keep API credentials and webhook secrets outside source control.
- Verify webhook signatures before changing an order or granting access.
- Treat detected and confirmed as different states.
- Test replay, retry, partial-payment, expiry, and incorrect-network scenarios.
- Use HTTPS and restrict administrative access.