Products Security Developers About Talk to us Get early access
Security

Built so we can't touch your money.

Most payment companies ask you to trust them with your funds. KestoPay is designed so you don't have to. Here is exactly how it works, what we can do, and what we can't.

Our promises

What KestoPay can and can't do

We can'tWe can
Hold your money. Payments settle in wallets you own, not in a KestoPay account. Route a payment from your customer's Cash App to your wallet.
Move money out of your treasury. Only your passkey can do that. Send payouts from your payout balance, inside the limits you set.
Send a payout above your limits without your approval. Hold a large payout until you approve it with your passkey.
Pay the same payout twice, even if your system sends the request twice. Pause payouts automatically if something looks wrong.
Quietly change your history. Every action is recorded in order. Show you exactly who did what, and when.
How it works

Two wallets. Both yours.

01

Treasury

Where most of your money lives. It's a self-custody wallet you create when you sign up, secured with a passkey on your own device. No seed phrase to lose. Nothing moves from it without you, and KestoPay has no way to move it.

02

Payout balance

A smaller, capped wallet that sends your payouts automatically. You choose the cap, the limits and when it refills. Anything above your cap goes back to your treasury, so only a small amount is ever exposed.

Every payout passes five gates
  1. 01CheckedRecipient and risk checks
  2. 02Within limitsYour caps and rules
  3. 03ApprovedYour passkey on big ones
  4. 04Sent onceNever paid twice
  5. 05RecordedEvery step logged
Security

Built so we can't touch your money.

Your money settles in wallets you own. Big payouts wait for your passkey. And every action is recorded, so nothing happens quietly.

Your keysWallets are yours. We never hold your money.
Passkey approvalsBig payouts wait for you, on your device.
Limits you setDaily caps, second approvers, saved recipients.
Full historyEvery action recorded, so you know who did what.
How we keep you safe →
Approve payout $1,200.00 to jane@cash.app Use your passkey to approve Over your $1,000 limit, so it waits for you. Nobody else can approve it.
Under the hood

Safeguards on every transaction

A few of these are still being built. We mark those, so you always know what's live.

01

Sent exactly once

Every request to create a payment or payout carries a unique key. If the same request arrives twice, you get the original back. Nothing is ever sent twice.

02

Exact accounting

Every dollar is tracked in a double-entry ledger that must balance to the cent. Amounts are stored as whole cents, never rounded floating-point numbers.

03

Price checks

Before money moves, each conversion quote is checked against independent market prices. If a quote looks wrong, we block it rather than guess.

Coming soon
04

Fails safe

If anything is uncertain (a provider is down, a price can't be confirmed, an amount doesn't match), KestoPay stops and flags it for review instead of carrying on.

05

Locked-down API keys

Test keys can never touch real money. Keys are stored only as secure fingerprints, so even we can't read them back, and you can revoke one instantly.

06

Signed webhooks

Every event we send your system is signed, so you can prove it came from KestoPay and wasn't tampered with.

Coming soon
Responsible disclosure

Report a vulnerability

If you think you've found a security issue, please email security@kestopay.com. We'll reply quickly, keep you updated, and credit you if you'd like. Please don't access other people's data or disrupt the service while testing.

Get paid.
Keep control.

We're onboarding our first merchants. Tell us about your business and we'll get you set up.

Get early access Talk to us
Pricing that fits your business. Ask us →