How to Tell if a Crypto Payment Service Is Legit: Check, Don't Trust

by PayFi · 5 October 2026 · Trust you can check

Badges, audits and promises are things you are asked to believe. A public record of every payment is something you can check yourself. When a payment service shows you its whole book, you no longer have to trust it. You can count.

The question a friend asked Dani

Let's meet a seller we will call Dani. Dani is not a real person, but the conversation is a common one.

Dani makes sample packs for music producers: short drum loops and sounds that other people use in their tracks. For a few weeks now, Dani has been selling them with a payment link. Buyers pay in USDT or USDC, the files open automatically and the money lands in Dani's wallet.

Then a friend asks a simple question over coffee. "How do you know they're not keeping some of your money? Or that they won't just disappear one day?"

Dani starts to answer and realizes there is no good answer ready. The website looks professional. The payments have arrived so far. But "it has worked so far" is not proof, and "the site looks nice" is not proof either.

It is a fair question, and it is the same one buyers ask when they see a new way to pay. Is this legit? Where does my money actually go? What happens if something goes wrong?

This essay is about how to answer that question. Not with a list of reasons to trust a payment service, but with a way to check it.

How "trust us" usually works

Most payment services, crypto or not, answer the trust question in the same way. They show you signals.

There are security badges near the checkout button. There are words like "bank-grade security" and "your funds are safe". There are logos of well-known companies they work with. There are reviews and testimonials. Sometimes there is an audit report, or a "proof of reserves" statement saying that the company holds enough money to cover what its customers have deposited.

These signals are not useless. Many of them are honest, and many companies that use them are honest. But they all share one weakness. They are things you are asked to believe. You cannot look inside the company and see what it is actually doing with the money. You see the cover of the book, not the pages.

And sometimes the cover tells a very different story from the pages.

When the cover and the pages didn't match

In recent years, several companies that handled other people's money showed exactly how far apart those two can be.

FTX was one of the largest crypto exchanges in the world. It told customers that their deposits were kept safe, held in custody for them, kept separate from the company's own money and not used by the company. According to the United States Department of Justice, that was not true. Its founder, Sam Bankman-Fried, was sentenced in March 2024 to 25 years in prison for, in the words of the prosecutor, "stealing over $8 billion of his customers' money" (U.S. Department of Justice).

Celsius was a crypto lending platform that promised customers it was safer than a bank. According to the US Federal Trade Commission, in May 2022 it told customers it was "stronger than ever" and had "billions of dollars in liquidity". The FTC says Celsius made claims like these just days before it froze customer accounts, and in July 2022 it filed for bankruptcy. The FTC said Celsius had misappropriated more than 4 billion dollars of consumer deposits (FTC).

Audits are not a full shield either. Wirecard was a German payment company, listed on the stock market and checked by one of the largest audit firms in the world. In June 2020, that auditor said it could not confirm the existence of 1.9 billion euros in cash that Wirecard said it held in trust accounts. Wirecard then admitted that there was a "prevailing likelihood" that the money did not exist (Al Jazeera).

After FTX, many crypto exchanges started publishing "proof of reserves" reports from outside accountants. In December 2022, one of the firms preparing such reports, Mazars, paused its work for all of its crypto clients, including Binance, Crypto.com and KuCoin. Its stated reason was "concerns regarding the way these reports are understood by the public" (CNBC). In other words, even the people writing the reports worried that readers were trusting them more than they should.

None of this means every payment company is lying. Most are not. It means that promises, badges and even audits are not the same as being able to see for yourself.

Why the question matters more with crypto

There is another reason to ask the legit question carefully when digital money is involved: scams are real, and they often use the same payment methods.

The US Federal Trade Commission reported that consumers lost more than 12.5 billion dollars to fraud in 2024, a 25 percent increase over the year before. It also reported that people lost more money to scams where they paid by bank transfer or cryptocurrency than with all other payment methods combined (FTC).

So when a buyer hesitates before paying in USDT or USDC through a link they have never seen, that hesitation is healthy. And when a seller like Dani wonders whether the service in the middle is honest, that is healthy too. The question is not whether to be careful. The question is what being careful should look like.

A different question: can I check it?

Here is the shift this essay is about.

The usual question is "Can I trust this company?" It is a hard question to answer from the outside, because trust is built on information you usually cannot see.

A better question is "Can I check what this company does with the money, without asking it?"

That second question has a much clearer answer. Either the company shows you a record you can verify on your own, or it does not. If it does not, you are back to badges and promises. If it does, you do not need to believe anything. You can look.

Digital dollars make this possible in a way that ordinary bank payments do not. Every USDT or USDC payment on a blockchain like Solana is recorded publicly. Anyone can look up a transaction and see which wallet sent how much to which other wallet, and when. Websites called blockchain explorers, such as Solscan, show this information to anyone, for free.

On its own, that public data is a pile of raw transactions. What turns it into an answer to "is this service honest?" is a book that explains it: this payment belonged to this order, this much went to the seller, this much was the fee, this much was refunded. And a way to prove that the book itself has not been quietly changed.

That is what an open ledger is.

What an open ledger is, in plain words

"Ledger" is just an old word for a book of accounts: a list of every amount of money that came in and went out.

PayFi keeps such a book in public, at payfi.cx/ledger. Every payment it has settled since its launch day, October 1, 2026, is written in it. Each line says how much came in, how much went to the seller, how much PayFi took as its fee, and which Solana transaction did it. Refunds are written down the same way. So is any money that is waiting to be returned to its owner, for example when a buyer has paid too much.

That alone would be useful. But a book on a website could be edited. What stops someone, including the people who run it, from changing an old line later? Two things.

Each line carries a fingerprint of the line before it. A fingerprint here is a short code that a computer calculates from the exact contents of a line. Change even one digit in the line, and its fingerprint changes completely. Because each new line includes the fingerprint of the previous line, all the lines are linked like a chain. If someone changed an old line, its fingerprint would change, and every line after it would stop matching. Anyone checking the book would see the break.

The latest fingerprint is regularly sealed into Bitcoin. PayFi uses a free, open tool called OpenTimestamps, which records a fingerprint in the Bitcoin blockchain. According to its makers, the resulting proof can be checked against Bitcoin directly, without trusting the server that helped create it (OpenTimestamps). The ledger page says that within about an hour of new lines, and at least once a day, the latest fingerprint is stamped into Bitcoin this way. Once it is there, nobody can change it. Not PayFi, not anyone else.

Put those two ideas together, and you get something unusual: a book that the company itself cannot rewrite after the fact. If a line changed, the fingerprints would no longer match what Bitcoin already holds.

The first line of the book

Every chain has to start somewhere, and the first line of a ledger is called the genesis.

When Bitcoin started in January 2009, its first block contained a short message: "The Times 03/Jan/2009 Chancellor on brink of second bailout for banks" (Bitcoin Wiki). Quoting that day's newspaper headline was a simple way to prove that the block could not have been made before that date.

The first line of PayFi's book does something similar. It quotes a newspaper headline from September 30, 2026, only as a date marker, together with a recent Solana block that nobody could have guessed in advance. That proves the book was not prepared earlier and backdated. The first line also says how many payments PayFi had settled since launch, and states the rule from then on: every one is written down. Payments from before the book was opened are written into it too, with their original dates, so nothing from day one is left out.

The statement at the top

A long list of lines is hard to read, so the ledger page also adds them up. At the top is a short statement with a few totals: how much was received in total, how much went to sellers, how much PayFi kept as fees, how much was refunded, and how much is waiting for its owners.

Those totals have to fit together. Everything received must equal what went to sellers, plus fees, plus refunds, plus what is still waiting to be returned. The last line of the statement is called "unaccounted/problem". It shows any amount that does not fit. In an honest book, it should be zero.

Most companies would never put a line like that on their front page. It is there on purpose. If something ever went wrong, the first place anyone would see it is the top of the page, not a footnote in a yearly report.

The page also has separate tabs for things that are usually hidden. One lists every Bitcoin seal. One lists money waiting for its owners, such as overpayments not yet refunded. One lists incidents, with a written explanation if something ever goes wrong. And one lists rule changes: if the fees or other money rules ever change, the change is written into the book with its date, so nobody can quietly change the terms and pretend they were always that way. Even the version of the code that is running is recorded, as a fingerprint.

What is in the book, and what never is

When people hear "every payment is public", they often worry about privacy. That is a reasonable worry, so it helps to be precise.

The book records only what is already public on the Solana blockchain: amounts, wallet addresses, transaction codes and times. That information exists on Solana whether or not anyone writes it into a book. The book just organizes it.

The book never records names, email addresses, product names, product links or IP addresses. PayFi does not ask buyers or sellers for names or emails in the first place, so there is nothing to write.

Each order appears in the book only as a reference code. That code is calculated from the buyer's private order link, the link they receive when they pay. Without that link, nobody can tell which line belongs to which buyer. With it, the buyer can find their own line.

So the book is open about money and closed about people. You can see that the money went where it was supposed to go, without seeing who bought what.

How a seller checks the book

Let's go back to Dani and the friend at the coffee shop.

Dani opens payfi.cx/ledger and types in the wallet address where the sales arrive. The page shows every line in the book that paid that wallet. For each sale, Dani can see the price, the amount that went to the seller, the 1 percent fee and the Solana transaction.

Dani taps one of those transactions. It opens on Solscan, a blockchain explorer that PayFi does not run. There, Dani can see the same payment from the outside: the amount leaving the order address, 99 percent arriving in Dani's wallet and 1 percent going to PayFi, in one transaction. The book and the blockchain say the same thing.

Dani turns the phone around. "This is every sale, and this is where each one went. You can check any of them on a site they don't control."

That is a very different answer from "the website looks professional".

Why a screenshot is not proof

There is a related lesson here for sellers, whatever payment method they use.

When money moves by phone and app, people often send a screenshot as proof of payment: a picture of a "payment sent" screen. A picture can be edited in seconds. It can also show a payment that was sent to the wrong address, or one that was never confirmed.

A transaction on a public blockchain is different. It either exists on the chain or it does not. The amount, the sending wallet, the receiving wallet and the time are all there for anyone to see. That is why, for digital dollars, the habit to build is simple: check the transaction, not the picture.

With a payment link, the seller does not even have to do this by hand. The product opens for the buyer only after the payment is confirmed on the blockchain, and the line appears in the public book after the payment is settled. But when a seller or a buyer wants to be sure, the transaction is always one tap away, on an explorer that neither of them controls.

How a buyer checks the book

A buyer can check too, and their own payment is the one they care about most.

After paying, every buyer gets a private order link. On the ledger page, they can paste that link into a box. Their browser calculates the order's reference code on their own device. According to the page, the link itself is never sent anywhere. Then the page shows the matching line in the book: how much the buyer paid, how much went to the seller, and, if there was a refund, how much came back and in which transaction.

For a buyer worried about whether a new payment method is a scam, this is useful in a simple way. They can see that their money went to the seller's wallet, as promised, and they can confirm it on a public blockchain explorer that has nothing to do with PayFi.

How anyone can check everything

Checking your own line is reassuring. But the real test of an open book is whether a stranger can check the whole thing, without help from the company.

The ledger page offers two downloads. The first is the whole book as a single file, with every line and every Bitcoin proof. The second is a small checking program. According to the page, the checker talks to Solana and Bitcoin directly, not to PayFi. Anyone who has Node.js, a common free tool for running JavaScript on a computer, can run it with one short command. It reports, in plain words, whether every line is chained correctly, whether the payments match their Solana transactions, whether the Bitcoin seals match, and whether every cent is accounted for.

Imagine what a problem would look like. If one old line had been changed, even by a single cent, the checker would report that the line's fingerprint no longer matches the one after it, and that the Bitcoin seal covering it no longer fits. If a payment in the book did not match its transaction on Solana, it would say which one. If the totals did not add up, it would say by how much. The problem would not be hidden in a long report. It would be the first thing the checker prints.

You do not have to be a programmer to benefit from this. You only need one person, anywhere in the world, to run the checker and say so if something is wrong. A book that anyone can audit is watched by everyone who cares to look, not only by one hired auditor once a year.

The ledger page itself also runs the same checks in your browser when you open it, so even a visitor who downloads nothing sees whether the book adds up.

What the book promises, and what it doesn't

An honest open book also has to be honest about its limits. The ledger page lists them, and they are worth repeating.

What it promises: every cent sent to PayFi ends in the seller's wallet or back with the buyer, plus the stated fee. Never in a third place. Money waiting for its owner, such as an overpayment that has not been refunded yet, is never counted as PayFi's income.

What it cannot promise:

• What a stablecoin is worth. USDT and USDC are designed to stay close to one dollar, but that depends on the companies that issue them.
• What a token issuer does with an address. The companies behind USDT and USDC can freeze specific addresses. No payment link can prevent that.
• The newest lines, until they are sealed. A line written a few minutes ago is not yet protected by Bitcoin. That protection arrives within about an hour, and at the latest within a day.

There is also something the book does not do at all: it does not tell you whether a seller is honest. It proves that the money moved as the payment service says. Whether the sample pack is good, or whether the seller delivers what they describe, is still a matter between buyer and seller.

Why a payment service would choose to be checked

It is fair to ask why any company would open its books this way. Most do not, and few are required to.

For PayFi, the reason follows from how it works. It does not ask sellers or buyers for an account, a name or an ID. It does not hold a balance for anyone. Each payment goes to its own order address and is split in one blockchain transaction, usually within about 20 seconds: 99 percent to the seller's wallet, 1 percent to PayFi.

A service designed like that asks very little of you. It also asks you not to ask very much of it: no customer support team you can visit, no famous brand, no office. It is run by a small team of developers in Hong Kong that you will probably never meet. In that situation, "trust us" would be a weak answer, and asking you to believe it would be unfair.

So the answer has to come from somewhere else. If a service does not know you, you should not have to know it. You should be able to check it. An open book is how the design asks for nothing on trust, from either side.

There is also a simpler benefit. A company that knows its every line will be public, and permanently sealed, has a strong reason to keep every line right.

What openness costs

An open book is not free for the company that keeps it, and it is worth being clear about the price.

Anyone can see how many payments PayFi settles and how much money moves through it, including competitors. Every mistake, every refund and every rule change is visible and permanent. A quiet bad week cannot be hidden, and an embarrassing incident cannot be deleted later; it can only be explained in a new line.

There is a practical cost too. Writing every line, sealing the book into Bitcoin and keeping the checker working all take effort that most payment companies never spend.

For sellers and buyers, that price is the point. A company willing to pay it is telling you something that no badge can: it expects its record to hold up when anyone looks at it. And if it ever does not, you will know at the same moment as everyone else, not months later when a report is finally published.

Questions you can ask any payment service

Whether or not you ever use PayFi, the same idea gives you a short test for any service that handles your money, crypto or otherwise.

Can I see where my money went, on a record the company does not control? For blockchain payments, can you look up the transaction on a public explorer?

Does the company hold my money for a while, and how much of it? The longer and the more it holds, the more you depend on its honesty and its health.

Is there a public record of all payments, or only of mine? A statement of your own payments is useful. A record of all of them shows how the whole system behaves.

Can I check that record without asking the company? If verifying it requires logging in, or emailing support, it is still a form of "trust us".

Can the record be changed later? Is there anything, like a seal on a public blockchain, that would show an edit?

What does the company record about me? Openness about money should not mean openness about people.

A service does not need to score perfectly on every question to be honest. But the more answers are "yes, and you can check", the less you have to rely on how its website looks.

Questions people ask

Can PayFi change the book if it wants to? It can add new lines. It cannot change old ones without breaking the fingerprints that follow, and once a fingerprint is sealed into Bitcoin, nobody can change that seal. A changed line would be visible to anyone who runs the checker.

Does the open book mean everyone can see what I bought? No. The book records amounts, wallets and transactions, not products, names or emails. Only someone with your private order link can tell which line is yours.

What if PayFi disappeared tomorrow? The book's past lines, the Bitcoin seals and the Solana transactions would still exist and could still be checked by anyone who had downloaded the file. Your money would not be inside PayFi, because it was sent to your wallet when each payment settled.

Is this the same as an audit? It is different. An audit is an expert's opinion about a company's accounts at a point in time, which you read and trust. An open ledger is the record itself, which anyone can check at any time.

Do I need to understand fingerprints and Bitcoin to use this? No. Sellers can check their sales by searching their wallet address. Buyers can check their own order with their private link. The technical parts are there so that people who want to dig deeper can, and so that anyone who finds a problem can prove it.

Back to the coffee shop

Let's go back to Dani and the friend.

The friend scrolls through Dani's lines in the book, then taps through to a transaction on Solscan, then back. "So you don't trust them," the friend says. "You just check."

That is the shift. The old belief says that using any payment service means taking someone's word for it: their logo, their badges, their audits, their reputation. Sometimes that works out. Sometimes, as customers of FTX, Celsius and Wirecard learned, it does not.

The newer and better belief is that, where money moves on a public blockchain, you can ask for more than words. You can ask to see the book. And if the book is open, chained line by line and sealed into Bitcoin, you do not have to trust it. You can check it, today, on your own phone.

Dani finishes the coffee. Next time someone asks, the answer is simple: "Don't take my word for it. Here's the book."

Sources

• U.S. Department of Justice, "Samuel Bankman-Fried Sentenced to 25 Years in Prison" (March 28, 2024): justice.gov
• Federal Trade Commission, Celsius Network settlement (July 13, 2023): ftc.gov
• Al Jazeera, "What $2.1bn? Wirecard says missing funds most likely do not exist" (June 22, 2020): aljazeera.com
• CNBC, "Mazars suspends all work with crypto clients including Binance, Crypto.com" (December 16, 2022): cnbc.com
• Federal Trade Commission, consumer fraud losses in 2024: ftc.gov
• Bitcoin Wiki, "Genesis block": en.bitcoin.it
• OpenTimestamps: opentimestamps.org
• PayFi Ledger: payfi.cx/ledger