BANKING & PAYMENTS

Every payment authorized before it moves

A stolen password, a hijacked session or a convincing email can move money today, because possession of a credential is treated as permission. UniKey asks a different question before the payment executes: was this specific action explicitly authorized?

$28B

Card-not-present fraud projected for 2026

As cited on unikeyid.com

THE PROBLEM TODAY

Credentials stand in for permission

Bank detail fraud

A supplier's account number is changed by email or phone, and the next payout goes to the fraudster. Nothing in the request proves the supplier asked for it.

Account takeover

Credentials and one-time codes are phished or replayed. The bank sees a valid login and an authorized-looking transfer.

Agents that pay

AI agents are starting to initiate payments. Identity checks say which agent is calling, not whether this payment was authorized.

WITH UNIKEY

Actions that carry a Trust Packet

Each one is signed by the party with the authority to take it, and verified before it executes.

  • Enroll a payee

    The payee's own device signs the bank details, so the account on file is the one its owner authorized.

  • Change bank details

    A change is accepted only with a Trust Packet from the supplier's authority anchor, never from an email alone.

  • Submit a payment

    Each payment carries a non-replayable packet naming the payee, amount and account it is bound to.

  • Approve over a limit

    Payments above a threshold need a second packet from an approver, recorded on the Authorization Ledger.

Example Trust Packet submit_payment
{
  "action": "submit_payment",
  "subject": "ap.clerk@acme-corp.com",
  "signer": "acme-corp.com",
  "audience": "payments@bank.example",
  "params": {
    "payee_id": "PAY-20418",
    "amount": "12,480.00",
    "currency": "USD"
  },
  "expires_at": "2026-10-05T14:05:00Z"
}

Illustrative. The verifier looks up the signer's public key in DNS, checks the Ed25519 signature, refuses a packet it has seen before or one past its expiry, and only then lets the action run.

DEMO VIDEOS

Watch it work

UDA Banking pays suppliers for UDA clients. The recordings show a payee enrolled and paid, and the trust log of every packet the bank verified or refused.