Your keys. Your wallet on Bantu.
ECOPay is a self-custody digital-asset wallet built for everyone who wants faster payments, lower fees, and real ownership. Private keys are generated and signed on-device. The server is structurally incapable of moving a single user's funds. Built on Bantu; open to seven other networks.
A digital wallet that refuses the usual tradeoff. Self-custody made simple — without making users handle complex addresses or manage raw keys.
Sub-five-second finality on Bantu mainnet. Watch the receipt appear before you put your phone down.
Bantu (home) + Base, Solana, Ethereum, Polygon, BNB Chain, Lisk, AssetChain.
Including Hausa, Swahili, Arabic with right-to-left layout. Every label translated.
Defense-in-depth model. Server is structurally incapable of moving user funds.
Most wallets force a tradeoff. ECOPay refuses.
Private keys are generated and signed on your device. ECOPay's servers physically cannot authorize a transaction. Even if we were compromised, no user would lose a cent.
Payments confirm in under five seconds on Bantu. Send by username, by QR, by payment link, or by tap on a saved contact — whichever is closest to your thumb.
One self-custody architecture across many networks. Your assets on Bantu, Base, Solana, Ethereum, Polygon, BNB Chain, Lisk, AssetChain — visible together, switchable in one tap.
Send before the recipient is ready.
- 01
Sender taps Send
Readiness engine checks recipient state — account exists, trustline open, compliance cleared.
- 02
Queued as Pending
Claimable balance posted on-chain. Sender cannot revoke. Funds are escrowed by the protocol, not by ECOPay.
- 03
Recipient gets ready
Adds trustline, finishes KYC, or funds the wallet — at their pace. Both parties see the same state in real time.
- 04
Claim signed locally
Recipient signs the claim XDR on their device. Funds settle on-chain. Receipt becomes public.
- @fatimaReady to claimcNGN 12,500
- @adunniWaiting for trustlineUSDC 250.00
- @kofiClaimedXBN 480
Funds never disappear. Sender and recipient see the same lifecycle state in real time. The protocol holds the escrow — not ECOPay.
Six categories, each engineered to feel obvious.
Five ways to pay. One review step. Zero accidents.
Type a @username, scan a QR, send a payment link, tap a saved contact, or paste any G…/0x… address. Every send goes through Prepare → Review → Sign → Result. Nothing leaves your device until you confirm — and an irreversibility callout makes sure you read what you're signing.
Multi-wallet by default. Up to ten under one account.
A personal wallet, a merchant wallet, a joint wallet, a savings wallet — each with its own address, its own optional @username, its own balance list, its own merchant flag. Generate or import a BIP-39 24-word phrase (legacy 56-character S-keys are also supported with safe migration).
Send before the recipient is ready.
If they don't have an account, don't have a trustline open, or don't have compliance cleared, ECOPay queues the payment as an on-chain claimable balance. The funds wait there — controlled by the recipient, locked from the sender — until conditions are met. Trust is built into the protocol, not bolted on top.
In-wallet swaps via the Bantu marketplace.
Powered by Bantu's on-chain orderbook. No intermediary, no spread beyond the market rate. Live quotes update with a 400ms debounce as you type. Strict 1% slippage protection on every order — the network refuses the swap if the price moves more than 1% between quote and execution.
Browse the whole network. Trust only what you choose.
Bantu's trustline model means you opt in to holding a non-native asset before you can receive it. ECOPay maintains a curated registry — XBN, cNGN, USDC, USDT get a gold-shield Verified badge. Unverified issuers force a deliberate warning and a PIN before the trustline burns a reserve.
Every transaction becomes a public receipt.
Tap any row for the full story — hash, ledger sequence, fee, memo, status. Every transaction has a public on-chain-verifiable receipt URL anyone can open. CSV and PDF export for any wallet. Multi-currency display in 150+ fiats, refreshed every minute.
Built for Bantu. Open to every other.
Bantu
Sub-5s finality. Native trustlines, claimable balances, on-chain marketplace, memos as first-class data.
Base
cNGN, USDC. Gasless meta-transactions for cNGN.
Solana
SOL, cNGN as Token-2022. Fast finality, low fees.
Ethereum
cNGN, USDC, USDT. The settlement layer of record.
Polygon
Broad stablecoin coverage at fees that don't punish small payments.
BNB Chain
cNGN, USDC, USDT. Major presence in Asia-Africa corridors.
Lisk
Cross-rail support for issuance teams shipping in frontier markets.
AssetChain
Real-world-asset chain with native compliance hooks.
Your private key never leaves your device. Not even once.
Engineered so the secure path is the easy path — and so no single compromise can move funds. Fourteen independent defense layers, each closing a specific class of attack. The server cannot sign for you. Cannot freeze you. Cannot reset your password. Cannot recover your secret.
- Private key generated by Web Crypto
- Vault: PBKDF2 + AES-GCM-256
- Transactions signed on-device
- Public address only
- Cannot sign on your behalf
- Cannot decrypt your vault
- Settles in < 5 seconds
- Permanent, auditable record
- Public receipt URL on every tx
Your password derives the vault key. The vault holds your secret in authenticated symmetric encryption — ciphertext, on your device, nowhere else.
Optional but strong. Verified locally against an encrypted sentinel — never stored, never sent. Five failures → 10-minute lockout, persisted across reloads.
A 2–3 word phrase you choose at registration. Displayed on every authenticated page. A phishing clone cannot reproduce it.
Every sign-in is bound to a device. New device → email with the fingerprint and time. Revoke any device, or sign out everywhere, in one tap.
What ECOPay structurally cannot do.
- Sign a transaction on your behalf. Your private key has never been on our servers.
- Freeze your funds. A court order against ECOPay cannot compel us to move what we don't control.
- Reset your password. The password decrypts a vault on your device. We have no copy of either.
- Recover your secret key. If you lose both the secret and the password, the wallet is unrecoverable.
- Read your anti-phishing phrase. It lives on your device only.
- See your PIN. Verified locally against an encrypted sentinel; never transmitted.
Polished where it matters.
English, French, Spanish, Portuguese, German, Italian, Chinese, Swahili, Hausa, Vietnamese, Ukrainian, Russian, Hindi, Polish, Filipino, Korean, Arabic — every label, button, error, and email translated.
USD, EUR, GBP, CNY, JPY, NGN, ZAR, KES, GHS, XAF, XOF. Localized number formatting via the native Intl API.
First Contentful Paint under 2s on 3G. Time to Interactive under 3s on a mid-range Android. Data-saver mode reduces polling and pauses non-essential work.
48-pixel touch targets, screen-reader labels on every control, visible 2-pixel focus outlines, prefers-reduced-motion honored, end-to-end keyboard navigation, dynamic type that respects OS font scale.
Real ownership. Fast settlement. One wallet across eight chains.
ECOPay is free to open. Installable as a PWA on any modern device. Built on Bantu, open to seven additional networks. Your private key is generated and signed on your device — and stays there.