Securing the wallet you get paid to, and what happens if you lose it.

What does Fianto hold for a merchant, and what does it not?

Fianto holds the address of your receiving wallet and nothing that can spend from it. A receiving wallet is the Solana wallet your customers' USDC is sent to. When a customer pays, the transaction they sign sends the price straight to that wallet, and any fee to Fianto in the same transaction. There is no Fianto balance, no payout and no account that money waits in.

That design is why the wallet matters so much. Fianto cannot freeze your money, and it cannot hand any of it back either. If the keys to the receiving wallet are gone, the USDC in it is gone for you too, and no support ticket changes that.

What Fianto does control is where future payments go. That part is covered below, along with its one hard limit: subscriptions that already exist.

How do you prove a receiving wallet to Fianto?

You prove a receiving wallet by signing a message with it during setup, under the step "The wallet you get paid to". A signed message is text your wallet signs with its private key; it is not a transaction, so it costs nothing, moves nothing and gives no permission. The message starts "fianto wants you to confirm this wallet receives payments for your account." Each request to sign works once and expires after 5 minutes. The difference between the two kinds of signature is explained in sign message vs sign transaction.

Three rules follow from the proof:

• One wallet per merchant. A wallet that already receives payments for another Fianto account is refused with "That wallet already receives payments for another fianto account. Use a different wallet."
• The wallet must be able to sign a message in the browser. If it cannot, the setup step says "This wallet cannot sign messages. Choose another wallet."
• The wallet needs a USDC token account before your first sale, or creating a checkout fails with merchant_token_account_missing. Sending it any amount of USDC once creates it.

Before you submit your account for review, you can sign with a different wallet as often as you like: the newest proven wallet is the one submitted. After approval, changing it is a reviewed request.

Which wallet should a business use to receive payments?

Use a wallet that does nothing except receive, with its recovery phrase written down offline before the first payment arrives. A recovery phrase (also called a seed phrase or Secret Recovery Phrase) is the list of words that regenerates the wallet's keys on any device. The wallet vendors' own guidance is consistent on how to treat it. As of 15 October 2026, Phantom's security tips say of the phrase: "Anyone who has it has full and permanent access to your funds." Ledger's backup lesson, updated 12 October 2026, puts the rule in one line: "The most important rule of your SRP is that it must stay offline."

For a business wallet, that turns into a short routine:

1. Create a fresh wallet for receiving. Phantom's tips suggest the same split for individuals: "Keep one account for long-term holding and another for interactions with apps." A receiving wallet that never connects to trading sites or airdrops never signs a malicious transaction. It also limits what strangers learn from your address to this business alone, as can anyone see my revenue explains.
2. Write the phrase on paper or metal, store it away from the computer, and decide who else in the business can reach it if you cannot. Fianto has one login per merchant and no team accounts, so this is a decision you make outside Fianto.
3. If your volume justifies it, consider a hardware wallet or a multisig for savings. Phantom's page puts it this way: "For high-value assets, a hardware wallet like Ledger adds an extra layer of protection by keeping your private keys offline." Check that your setup can sign a message in the browser before you rely on it for the proof step.
4. Move savings out on a schedule. The receiving wallet only has to hold what you have not yet moved to colder storage, and a smaller balance means a smaller loss if something goes wrong.
5. Never type the phrase into a website, a form or a chat. Phantom's security tips are blunt about it: "Phantom Support will never ask for your Secret Recovery Phrase. Ever." Fianto never asks for it either: the proof is a signature, not the phrase.

The scams that go after business wallets, from fake payment requests to drainer sites, are covered in wallet drainers and fake payment requests. What the program and the checkout check on your behalf is on the security page.

How do you change the receiving wallet after approval?

You change the receiving wallet from the "Receiving wallet" panel on Account in the dashboard, and an admin approves the request before it takes effect. Click Change wallet, connect the new wallet and sign a message with it, then confirm with your password and a fresh two-factor code. The step-by-step version with every screen is in the docs page on account security.

The third row is the one people miss. A subscription is set up on chain with the wallets its money may go to, and those destinations cannot be edited afterwards. Fianto's approval email says it plainly: existing subscriptions keep paying the wallet their plan names, because "a plan's destinations cannot change on chain." No admin can edit your wallet directly either; every change goes through this request, and only one request can wait at a time.

Two details help in an emergency. The request does not ask the old wallet to sign, so you can file it after losing that wallet. And Fianto promises no review time, so plan for a gap between the request and the switch.

What happens if you lose access to your receiving wallet?

What happens depends on which of three things you lost: the device, the recovery phrase, or control of the keys to someone else.

You lost the device but still have the phrase

Nothing changes at Fianto. Import the phrase into the wallet app on another device and the same address comes back; Phantom's restore guide says "Phantom automatically restores all accounts from this wallet that had activity before." Payments and renewals keep arriving at that address the whole time.

You lost the phrase as well

The USDC already in the wallet cannot be recovered by Fianto or by anyone else. What you can still protect is the money that has not been paid yet:

1. Request a wallet change to a new wallet straight away.
2. While it waits for approval, stop new payments from going to the lost wallet: close your payment links (see how payment links close and reopen), unpublish your shop, and stop creating checkout sessions from your server.
3. Once the change is approved, reopen them. New payments and new subscriptions go to the new wallet.
4. Cancel the subscriptions that still pay the lost wallet, from the dashboard or the API, and ask those customers to subscribe again. Every renewal they pay until then lands in a wallet nobody can spend from.

Someone else has your keys

Treat it as the case above, faster. Anyone holding the phrase can move what is in the wallet, and renewals keep paying that wallet until each subscription ends or you cancel it. Cancelling with "Now" in the cancel dialog of the dashboard, or through the API with POST /v1/subscriptions/{id}/cancel and at: now, ends a subscription at once instead of at the end of the period, though a charge already in flight can still land. Customers who were charged into the stolen wallet may ask for their money back; a refund is a USDC transfer you send yourself, as refunding a USDC payment explains.

What if you lost the wallet and your two-factor device?

If you lost the receiving wallet and your two-factor device together, write to support@fianto.xyz with "Account recovery" in the subject. The self-serve two-factor reset cannot help in that case, because it asks you to sign a message with the wallet you get paid to: you prove your password, an emailed code and that signature, then nothing changes for 72 hours, and the reset takes effect at your next password sign-in after that unless it was cancelled.

The 10 recovery codes you saved at setup are the cheaper insurance. Keep them apart from the recovery phrase, so one lost drawer does not take both.