Try SendSure in two minutes, no wallet needed
SendSure plays everyone here: the payee, an attacker and the payer's approver. Every step is a real transaction on Arc testnet, on a sandbox org that never counts as traction.
1. A payee proves their address
The payer sends an invite. The payee signs once with their wallet; SendSure's relayer pays the gas.
2. A look-alike address, and an attacker
Address poisoning: a scammer plants an address that starts and ends like the real one. First, the free payout check on a list that contains it. Then the attacker signs a claim for the payee's work and tries to get it paid.
3. “Please pay my new wallet”
The attacker now tries to move the payee's payouts to their own wallet.
4. A real payment
The payee signs a claim for 0.05 USDC. The agent checks it with the contract's own rules: it is a first payment to a new address, so it waits for a person. The demo approver co-signs; the agent pays.
5. An inbox full of tricks
The payee now sends three messy claims: the same work billed again under a new invoice number, a large claim with no description, and a “new wallet” request with a hidden instruction to the AI. The agent reviews them with Claude.
6. The books
Every demo payment (claim, decision hash, Arc tx), reconciled to the treasury's balance on-chain, in the format your books use. With Odoo or ERPNext, payments are recorded there directly.
Finish step 4 to download the books.
Check any address
Is this address a payee who proved it for this org, right now? Public: no names, no amounts.