NexPay uses Bluetooth proximity to verify physical presence before any payment happens. Cryptographically secure. Instant. No QR code required.
NexPay replaces the QR scan with a cryptographic proximity handshake. No visual trust. No screenshots. No spoofing.
The NexPay soundbox broadcasts a signed BLE signal. Your phone detects it automatically. No scanning. No opening a camera. Just walk in.
SWETA performs a challenge-response handshake using X25519 key exchange and Ed25519 signatures. Your physical presence is verified — not assumed.
Transaction payload is encrypted with AES-256-GCM and signed. Amount confirmed. Soundbox announces instantly. Money moves on UPI rails.
There is no QR code to replace, no screenshot to fake, no VPA to mistype. The attack surface of traditional UPI payments is eliminated entirely.
India's UPI payments depend on a piece of paper anyone can replace. The trust layer is visual, not cryptographic. That's the fundamental flaw.
Attackers replace merchant QR stickers with their own. Customers pay the wrong account. Merchants lose money. No one knows until it's too late.
26% of merchants in our study experienced fake payment screenshots. A photo of a "successful" payment shown at the counter. Money never moved.
37% of merchants had customers accidentally pay neighboring shops. QR codes sit next to each other. Humans make mistakes. BLE proximity doesn't.
Fake payment apps that simulate the UPI confirmation screen. The soundbox announces. The merchant hands over goods. No money ever left the customer's account.
Secure Wireless Encrypted Transaction Architecture. Every primitive is audited, open-source, and chosen for a reason.
Ephemeral session key derived fresh for every transaction. Session keys live in memory only and expire the moment the payment completes. No key reuse. Ever.
Every BLE advertisement, handshake message, and payment payload is signed. Merchant identity is verified against a NexPay CA-issued certificate before any transaction begins.
All transaction metadata encrypted with authenticated encryption. Confidentiality and integrity in a single pass. No MITM attack is cryptographically feasible.
Session keys derived with context binding — client ID, merchant ID, timestamp, and nonce. A captured handshake from any other session is cryptographically useless.
Round-trip timing checks catch relay attacks that RSSI alone cannot. A relay adds measurable latency. Legitimate physical proximity responds in under 5ms.
Android Play Integrity API and iOS App Attest verify device and app integrity before any session. Rooted or modified devices cannot initiate transactions.
Cold merchant interviews. Zero marketing. Prototype-stage product. The data speaks for itself.
NexPay targets proximity-based UPI transactions at physical merchant locations, estimated at 40% of all UPI volume. A 5% share of this market over 3 years represents ₹2.78 Trillion in transaction value.
NexPay is running its first merchant pilot in India. If you're a merchant, investor, or fintech partner, we want to talk to you.