Security and Wallet Boundary
Understand merchant key custody and wallet boundaries.
Stafiel does not ask for merchant wallet private keys or seed phrases, and it does not take custody of merchant wallets. The configured settlement wallet remains under merchant control.
Use this page to understand what Stafiel verifies and where the wallet boundary is.
Merchant Wallet Control
The merchant settlement wallet is the address configured to receive merchant funds after eligible settlement. Stafiel records that address for checkout and settlement, but the wallet itself remains under merchant control.
Do not share private keys, recovery phrases, or signing devices with Stafiel, customers, vendors, or support channels.
For setup steps, see Wallet Settings.
Wallet Verification Signatures
Merchant Dashboard can ask the merchant to connect a browser extension wallet and sign a verification message. The signature verifies that the merchant can sign for the wallet address being configured.
That verification signature:
- Does not transfer funds.
- Does not create an on-chain transaction.
- Does not grant token approval, contract permission, or program authority.
- Does not give Stafiel access to the wallet's private key or seed phrase.
- Does not charge a network transaction fee.
Important: Always read the wallet prompt before signing. A wallet verification message should identify address verification, not token spending approval or fund movement.
What Stafiel Provides
Stafiel provides the checkout, order tracking, payment status, refund availability and records, settlement records, and integration surfaces used by the merchant. Supported blockchain payment rails enforce payment, refund, and settlement behavior for each checkout flow.
These services do not make Stafiel the custodian of the merchant settlement wallet. The merchant remains responsible for wallet access, signer security, and recovery materials.
For how settlement reaches the merchant wallet, see Settlement Basics.
Wallet Boundary Notes
For merchant settlement wallets:
- Use a browser extension wallet or hardware wallet that supports the selected network.
- Keep wallet recovery phrases and backup codes in a secure private location.
- Do not use centralized exchange deposit addresses as merchant settlement wallets.
For account security and MFA settings, see Account and MFA.
Customer Payment Wallets
The merchant settlement wallet is different from the customer's payment wallet. Customers pay from their own wallets, exchange withdrawal flows, or custodial wallets. Those payment sources can affect refund reachability and support handling.
For payment-source risks, see Payment and Refund Risks.