{"id":124344,"date":"2026-07-30T14:04:12","date_gmt":"2026-07-30T14:04:12","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/124344\/"},"modified":"2026-07-30T14:04:12","modified_gmt":"2026-07-30T14:04:12","slug":"moonpay-paybox-brings-non-custodial-crypto-payments-to-claude-and-chatgpt","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/124344\/","title":{"rendered":"MoonPay PayBox Brings Non-Custodial Crypto Payments to Claude and ChatGPT"},"content":{"rendered":"

Ask Claude to book you a flight, and until yesterday you hit the same wall every AI assistant user has always hit: the moment money needs to move, you leave the conversation and go find a checkout page. MoonPay’s PayBox, launched July 29<\/a>, removed that wall for Claude and ChatGPT users while solving the custody problem that has made every previous attempt at agentic payments a security gamble. Instead of handing your wallet keys to the AI or to MoonPay, PayBox uses multi-party computation (MPC) to split those keys into fragments stored across hardware-isolated secure enclaves \u2014 meaning no single party, not the AI agent, not MoonPay’s servers, and not your device alone, ever holds enough key material to sign a transaction.<\/p>\n

That architectural choice, powered by Sodot \u2014 the Israeli cryptographic infrastructure firm MoonPay acquired for roughly $100 million<\/a> in an all-stock deal on April 29 \u2014 is what separates PayBox from the consumer-facing AI payment attempts that came before it. OpenAI killed its in-chat Instant Checkout in March 2026 after barely a dozen Shopify merchants had gone live<\/a>. MoonPay has taken the opposite route: rather than building a closed payment garden inside one AI assistant, PayBox connects Claude and ChatGPT to open rails \u2014 the x402 machine-to-machine payment standard, Visa’s agentic commerce tokenization protocol, and eight supported blockchains \u2014 while keeping users in full control of their funds.<\/p>\n

PayBox is available today at paybox.sh.<\/p>\n

How MPC Key-Splitting Actually Works<\/p>\n

The core security mechanism in PayBox differs from both of the approaches TechTimes has previously covered in this space. Ledger’s Agent Stack (released July 16) uses a physical Secure Element chip \u2014 the key never leaves the hardware device, and a physical button press is required to sign any transaction. Stripe’s Link agent wallet issues single-use virtual cards scoped to each transaction so the agent never sees the raw card number. PayBox takes a third path: the private key is mathematically divided into encrypted shares (a threshold cryptography approach), each stored inside a hardware-isolated Trusted Execution Environment (TEE) \u2014 the same class of secure enclave (Intel TDX \/ AMD SEV-SNP) used in confidential cloud computing.<\/p>\n

Under this model, signing a transaction requires a minimum threshold of those shares to cooperate, without any share ever being revealed to another party during the computation. The NIST threshold cryptography standard<\/a> (NISTIR 8214C, finalized January 2026) provides the public technical framework underpinning this approach. A compromised server at MoonPay cannot extract a complete key because it only holds one share; a compromised user device cannot either. An AI agent that has been manipulated through prompt injection can want to drain your wallet \u2014 but it cannot produce a valid signature independently, because the signing process requires collaboration across physically isolated enclaves.<\/p>\n

The cryptographic design was audited by Trail of Bits and NCC Group before launch, and the product meets PCI DSS standards, as detailed in Genfinity’s technical breakdown<\/a>. Sodot’s infrastructure currently secures more than $50 billion in assets and more than 10 million wallets for clients including eToro, BitGo, Flow Traders, and Exodus \u2014 confirmed in MoonPay’s Sodot acquisition announcement<\/a>.<\/p>\n

How Card Payments Stay Safe Inside the Vault<\/p>\n

For traditional card payments, PayBox routes transactions through Visa’s agentic commerce protocol, a tokenization layer that allows an AI to spend with a linked card without the card number ever being exposed to or stored by the agent. The agent presents a scoped, time-limited token to the merchant; the raw card data never enters the agent’s execution environment, closing the “leaked card number reused indefinitely” fraud vector that earlier agentic payment experiments left open. The full PayBox launch release<\/a> documents how Visa’s fraud architecture applies to card transactions within the vault.<\/p>\n

Every passkey approval \u2014 whether for a crypto transaction or a card payment \u2014 is scoped to a single, specific action and expires immediately after use. Change the recipient address, the amount, or the destination network, and PayBox demands a fresh passkey. A captured or replayed authorization cannot be extended to any other transaction, as Blockster’s authorization analysis<\/a> confirms.<\/p>\n

What You Can Actually Do With It<\/p>\n

Setting up PayBox takes a few minutes. Users install a custom connector inside Claude or ChatGPT, create a PayBox account, register a passkey, then link a crypto wallet or payment card via MoonPay’s standard one-time identity verification. Once connected, natural-language instructions handle the rest<\/a>.<\/p>\n

PayBox launched with support for Solana and seven EVM-compatible blockchains: Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon. On the real-world side, live integrations at launch cover restaurant reservations, travel bookings, and purchases across major online retailers, with more rolling out weekly. On the DeFi side, token swaps, asset bridging, and yield strategies through protocols like Aave are already live, as covered by The Block’s launch reporting<\/a>.<\/p>\n

Two Modes, One Key Trade-Off<\/p>\n

PayBox ships with two authorization modes, and the choice between them is not cosmetic. In Always Ask mode, every transaction requires a fresh passkey approval \u2014 maximum security, maximum friction. In Autonomous mode, the AI can act within spending limits defined by the user, without approving each individual transaction, as detailed in MoonPay’s launch announcement<\/a>.<\/p>\n

The trade-off that MoonPay’s marketing language understates: Autonomous mode relocates custody risk from the platform to the user’s own configuration. MPC ensures MoonPay cannot take your money. It does not ensure the AI makes the choices you would have made. An agent operating autonomously within a $500 monthly limit can spend that $500 badly \u2014 on a poorly timed swap, a DeFi position that moves against you, or a merchant transaction you would have declined \u2014 and every such transaction, executed under a valid permission, is authorized under MoonPay’s terms. Onchain crypto transfers are irreversible, as the BigGo Finance consumer risk analysis<\/a> notes.<\/p>\n

This is not a flaw in PayBox’s security architecture, which is genuinely sound. It is a feature of any autonomous spending delegation system. The existing consumer protection framework has no answer for it: stablecoin payments over x402 fall outside card-network chargeback protections, and the Electronic Fund Transfer Act assumes a human initiated each transaction \u2014 a gap explained in depth by TechTimes’ prior coverage<\/a>. Set spending caps conservatively in Autonomous mode and review transaction histories regularly. Changing permission levels always requires a new human passkey sign-off, and access can be revoked instantly at any time.<\/p>\n

PayBox Versus Its Closest Competitors<\/p>\n

PayBox occupies a distinct position in the agentic payment landscape that has been consolidating rapidly in 2026. Ledger Agent Stack requires physical hardware \u2014 the Secure Element chip and a physical button press \u2014 providing maximum adversarial resistance but requiring users to own and carry a Ledger device. Stripe’s Link agent wallet is enterprise-developer infrastructure: it issues single-use virtual cards for AI agents, but targets companies building AI products rather than individual Claude and ChatGPT users. MoonPay’s own earlier MoonPay Agents product was a command-line tool for developers.<\/p>\n

PayBox is the first product in this space designed for non-developers using existing AI consumer interfaces. “The giants are building agentic payments inside their own walls; we’re the opposite bet: your own money, on open rails, reaching everything the walled versions can’t, from a dinner reservation to a DeFi protocol,” said Neeraj Prasad, MoonPay Labs chief engineer, in an interview with Fortune<\/a>.<\/p>\n

PayBox also plugs into x402, the open payment standard now governed by the Linux Foundation \u2014 the same protocol that Anthropic, AWS, Cloudflare, Stripe, and Shopify have backed as infrastructure for machine-to-machine commerce. By riding existing rails rather than building a proprietary payment network, PayBox can reach any service built to accept x402 payments without requiring merchants to adopt a new checkout system. The Linux Foundation’s x402 Foundation launch<\/a> in July 2026 formalized this governance structure.<\/p>\n

MoonPay’s Regulatory Infrastructure Behind the Product<\/p>\n

PayBox transactions run through MoonPay’s regulated payment infrastructure, including know-your-customer checks and licensing frameworks that include a New York BitLicense, a New York Limited Purpose Trust Charter, money transmitter licenses across the United States, and MiCA authorization in the European Union \u2014 making it one of the most compliance-covered products in the agentic payments space. The PayBox launch announcement<\/a> details the full regulatory footprint. The Sodot acquisition, at roughly $100 million in MoonPay stock, was intended specifically to bring this cryptographic infrastructure inside MoonPay’s regulated perimeter rather than relying on a third-party vendor, as CoinDesk’s acquisition report<\/a> confirms.<\/p>\n

The EU AI Act’s Article 14 deadline for human oversight requirements in high-risk AI systems falls on August 2, 2026 \u2014 three days from now. PayBox’s Always Ask mode, which requires explicit passkey approval for every transaction, satisfies that requirement. Organizations deploying PayBox in Autonomous mode in the European Union should evaluate whether that mode meets their specific Article 14 compliance obligations<\/a> before enabling it.<\/p>\n

What Comes Next<\/p>\n

MoonPay says support for additional AI platforms beyond Claude and ChatGPT is on the roadmap, though no specific partners have been named. The more significant near-term expansion involves deeper DeFi functionality: PayBox will add the ability for AI to route token swaps, trade perpetual futures, manage liquidity positions, and act on open-market opportunities autonomously \u2014 all governed by the same user-defined approval rules, as MoonPay’s launch release<\/a> outlines.<\/p>\n

Those upcoming DeFi features will raise the stakes of Autonomous mode considerably. Leveraged positions and perpetual futures involve more complex risk than booking a restaurant or buying stablecoins. Users enabling Autonomous mode should set spending limits appropriate to today’s use cases, not the DeFi capabilities that will be added in future updates, and revisit those limits when new features arrive.<\/p>\n

“The card hid the cash. The phone hid the card. This is the era where money disappears into conversation,” said Ivan Soto-Wright, MoonPay CEO and founder. “Billions of AI agents are coming online, and every one of them will need to hold, move, and spend money safely. Someone had to build the trust layer for that world. We just did.”<\/p>\n

Frequently Asked QuestionsIs it safe to let Claude or ChatGPT access my wallet through PayBox?<\/p>\n

The MPC key-splitting architecture means that neither Claude, ChatGPT, nor MoonPay ever holds a complete private key. A compromised device or a compromised MoonPay server cannot independently sign transactions \u2014 the cryptography requires collaboration across multiple hardware-isolated enclaves. Trail of Bits and NCC Group audited the implementation before launch, and it meets PCI DSS standards. The security model is genuinely sound. The residual risk is not the cryptography \u2014 it is the spending decisions the AI makes within whatever limits you define in Autonomous mode. Set conservative spending limits and enable Always Ask mode for irreversible or high-value transactions.<\/p>\n

What happens if my AI agent makes a purchase in Autonomous mode that I didn’t intend?<\/p>\n

A transaction executed within your defined spending limits is authorized under PayBox’s terms, even if you didn’t individually approve it. For card transactions routed through Visa’s agentic commerce protocol, standard card dispute processes may apply. For stablecoin payments processed over the x402 protocol, there is no equivalent chargeback mechanism \u2014 onchain transfers are irreversible, and the Electronic Fund Transfer Act does not cover transactions initiated by autonomous AI agents. This is not a PayBox-specific limitation; it is the current state of consumer protection law for agentic commerce. Always Ask mode eliminates this risk; Autonomous mode requires you to trust your own configuration.<\/p>\n

How is MoonPay PayBox different from Stripe’s agent wallet or Ledger Agent Stack?<\/p>\n

Ledger Agent Stack uses a physical Secure Element chip requiring a physical button press \u2014 maximum hardware adversarial resistance, but you need the device. Stripe’s Link agent wallet issues single-use virtual cards and targets developer teams building AI products, not individual AI users. PayBox is a consumer-facing product that any Claude or ChatGPT user can install in minutes, with no hardware requirement and no developer terminal. Its MPC+TEE approach provides non-custodial security through cryptographic key-splitting across hardware-isolated enclaves rather than through a physical device, making it the first option in this class accessible to non-technical AI assistant users.<\/p>\n

What does “non-custodial” mean for PayBox, and why does it matter?<\/p>\n

Non-custodial means MoonPay never holds your funds and cannot access your money even if its systems are compromised. Traditional custodial crypto exchanges \u2014 the kind whose failures made headlines in 2022 \u2014 hold customer funds directly and can lose them in a breach or insolvency. PayBox’s MPC design ensures that even if MoonPay were fully compromised, an attacker would obtain only incomplete key fragments insufficient to sign any transaction. Your money can only move when the cryptographic threshold of key fragments cooperates \u2014 and in Always Ask mode, that threshold cannot be reached without your passkey.<\/p>\n","protected":false},"excerpt":{"rendered":"Ask Claude to book you a flight, and until yesterday you hit the same wall every AI assistant…\n","protected":false},"author":2,"featured_media":124345,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[3683,24,53,3154,580,182,4784,16818,62586,62587],"class_list":["post-124344","post","type-post","status-publish","format-standard","has-post-thumbnail","category-anthropic","tag-agentic-payments","tag-ai","tag-anthropic","tag-anthropic-claude","tag-chatgpt","tag-claude","tag-crypto","tag-moonpay","tag-moonpay-paybox","tag-multi-party-computation-crypto"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/124344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=124344"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/124344\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/124345"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=124344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=124344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=124344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}