Crypto gives you full control over your money — but that control comes with responsibility. Unlike a bank, there is no reversal mechanism, no fraud department to call, and no recovery option if you make a critical mistake. These habits protect your assets and your business.

Protecting Your Seed Phrase & Private Keys

• Write your seed phrase on paper and keep it in a secure physical location (safe, locked drawer)

• Never store it digitally — not in Notes, Google Drive, email, or any messaging app

• Never share your private key or seed phrase with anyone — not support agents, not colleagues, not anyone claiming to be from KIRAPAY

• For significant holdings, use a hardware wallet (Ledger or Trezor) for cold storage

Securing Your KIRAPAY Merchant Account

• Enable two-factor authentication (2FA) on your dashboard immediately after setup

• Use a strong, unique password — a dedicated password manager is strongly recommended

• Only access the dashboard from trusted, personal devices on secure networks

• Audit and revoke API keys regularly — remove any that are no longer in active use

Verifying Payments and Addresses

• Always verify a wallet address by checking at minimum the first 6 and last 6 characters after pasting

• Use a blockchain explorer (Etherscan for Ethereum, Solscan for Solana) to independently verify any transaction

• Treat unexpected or urgent payment requests with scepticism, even if they appear to come from known contacts

⚠️  Clipboard Hijacking Malware can silently replace a copied wallet address with an attacker's address. Always verify the destination address visually after pasting — never assume the clipboard content is unchanged.

If Something Goes Wrong

• Immediately transfer any remaining funds to a new, secure wallet

• Revoke any active token approvals using a tool such as revoke.cash

• Immediately to update your settlement wallet address in KIRAPAY

• Deactivate all payment links

Contact KIRAPAY Support: support@kira-pay.com

For security incidents, use subject line: URGENT — Account Security Incident Our team can freeze your account, deactivate all payment links, and revoke API keys if your account has been or may have been compromised.