Connect Crypto.com Pay

Why Crypto.com Pay

Two reasons. It is one of the cheapest options here at around 0.5%, and Crypto.com gives your buyer cashback for paying with it. That is a genuine incentive for the customer to choose your crypto option, and you do not fund it.

Before you start

Crypto.com verifies merchants before enabling live payments. Apply at merchant.crypto.com and get through that first.

Where to get the two values

Crypto.com Pay secret key — merchant.crypto.com → Developers → API keys. Copy the secret key, not the publishable one.

Webhook signature secret — the same Developers area, Webhooks section. Add a webhook pointing at the URL kitty gives you (see below), then copy the signature secret it generates.

Connect with the secret key first, copy the webhook URL from the card, add the webhook at Crypto.com, then Replace keys with the signature secret filled in.

Connecting

Settings → Connections → Take payments → the Crypto.com Pay card → Connect → paste both values → Save and connect, then Test connection.

The webhook, which is not optional

kitty needs Crypto.com Pay to tell it when someone pays. Without that, the checkout takes the money and no order, customer or revenue figure ever appears in kitty.

On the connected card, press Webhook URL, copy it, and paste it into merchant.crypto.com → Developers → Webhooks.

Treat that URL like a password — anyone holding it can post events at this venture. It never expires; you rotate it by disconnecting and reconnecting. Deliveries are capped at 300 a minute per venture.

What it can and cannot do here

One-off payments only — no subscriptions and no failed-payment recovery, as with every crypto provider. Refunds are issued in the Crypto.com merchant dashboard and recorded here when reported.

After it's connected

Test connection proves the key works right now, and names the account it reached — so a member with two logins can see they pasted the wrong one. Do that before you put anything on sale.

Then, in Where new checkouts go, pick this provider on its own or One page, every method, which offers every provider you've connected on a single page and quietly hides one that starts failing.

Anything already on sale keeps the provider it was armed on. A price, once created at a provider, cannot be moved — so to switch, open the venture's Revenue tab, Take off sale, then put it back on sale.

How the keys are stored

Encrypted at rest with AES-256-GCM, used server-side only, never returned to the browser, never written to a log, and never shown again after saving.

Payment keys are scoped to a venture or the whole workspace, never to you personally — two businesses in one workspace settle into two different bank accounts, so a personal key is refused for money on purpose.