Wallet and deposits

Every business has one wallet, and its payments land straight in it, apart from those that pay your fees. 402pay never holds your funds, so there's no balance to withdraw and no payout to wait for. Set it up in the dashboard, under Wallet: create a new one, import one, or connect a wallet you already use.

• A business has exactly one wallet. Creating another returns 409 wallet_exists.
• GET /wallet returns its source, balances and main addresses.
• A created or imported wallet is $5 a month, and an external one $15. See pricing.

• A crypto payment lands at its checkout's address, in the coin and network the customer paid in.
• A card payment lands in an enabled coin and network your wallet can receive. Checkout selects a compatible route before reserving the destination.
• Each deposit is an in wallet transaction with the payment_id it came from and the whole amount that arrived, since fees never come out of it. The deposit, in the payment's settlement field, names the address and transaction.
• Balances are per coin and network, adding up every address. Sends draw on whichever of the wallet's addresses hold the coin, largest first.
• While you owe 402pay fees, some payments go to its address instead, to pay them. Their settlement.destination is fees and they add nothing to your wallet. See fees and billing.

A wallet derives its addresses from public keys, so 402pay can hand out new ones without being able to spend from them.

• Index 0 on each network is the main address, the one Receive shows. Every checkout reserves the next unused index, so each transfer matches exactly one payment.
• Polygon and Ethereum share one set of addresses and count indexes together, so an address never serves two payments on any of them.

Every Solana checkout pays to a fresh address as well. Solana's usual key derivation needs the recovery phrase for each new address, so when you create or import a wallet, your browser also shares a Solana checkout key: a public key that derives a new address for every checkout, the way an EVM account's extended public key does. Only the recovery phrase makes the keys that spend from these addresses, so 402pay can't move the funds.

Index 0 is the main address, the one Receive shows and Solana wallet apps find from your phrase. Checkout addresses sit on a branch of their own that wallet apps don't scan, so move their funds with Send in the dashboard, which signs for them in your browser, or with only your recovery phrase on the Solana recovery page. address_counts.solana on GET /wallet counts the Solana indexes handed out. The Solana checkout addresses guide publishes the derivation.

An external wallet shares only what receiving needs. Networks you leave out aren't offered at checkout.

• With an extended public key, every checkout gets its own address. With a single address, every checkout on those networks pays that same address, so two customers paying at once can't be told apart by address. Share an extended public key wherever your wallet exports one.
• Extended private keys are refused.
• To take cards, connect a wallet that can receive a coin and network supported by an available card route.
• Sends happen in your wallet app. Record each one in the dashboard with its transaction hash, so your wallet's history here matches. A real-chain send stays pending with no effect on balances until the network verifies the sender, recipient, coin and amount against that hash. Its USD value remains zero while unverified; its fee stays zero because no fee amount is verified. An unrelated transfer cannot confirm it. Simulated external hash records fail after the pending timer because there is no chain evidence to verify.

Money never moves on an API key. A key can read balances and transactions, and add notes, but sends are made or recorded only in the dashboard.

Once your business has received a payment (one collected as fees, or a referral payout, counts too), deleting its wallet takes effect 24 hours after you ask. The wallet keeps receiving payments until then, so someone who got into your account can't swap in a wallet of their own before you see the email. The email has a link that cancels the deletion without signing in, and the Wallet page shows it with a Cancel deletion button. A business still being set up loses its wallet right away, and changing the encryption password is never held.

• Reporting and reconciliation Which amounts to report, how payments match your wallet, and how to export a period.
• Refunds, returns and disputes Send refunds from your wallet, return funds you don't accept, and keep disputes rare.
• Supported networks Every coin and network checkout accepts, and the confirmations each one needs.
• Security best practices Narrow keys, rotations without downtime, a locked-down webhook endpoint and a secure account.