{"slug": "moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey", "title": "MoonPay Lets ChatGPT and Claude Spend Your Crypto Behind a Passkey", "summary": "MoonPay launched PayBox on July 23, going live July 28, to let ChatGPT and Claude execute crypto and card payments using passkey authentication and user-set spending limits, with Fortune reporting the tool aims to make AI commerce safe by scoping permissions rather than handing agents raw credentials. The non-custodial control layer stores credentials and manages keys but is not a custodian or payment processor, and it follows MoonPay's April 29 acquisition of Sodot, a key management firm that secured over $50 billion in transactions for clients including eToro, BitGo, Flow Traders, and Exodus, in an all-stock deal Bloomberg pegged at about $100 million.", "body_md": "*MoonPay's PayBox is trying to make ChatGPT and Claude useful at the point where AI commerce usually stops: payment. The hard question isn't whether a chatbot can draft a purchase or a crypto transfer. It's whether you should trust the approval layer around it.*\n\nAsk ChatGPT or Claude to book a flight or pay a merchant - move some crypto, even - and PayBox is supposed to handle the last step without sending you into a pile of wallet screens. Fortune reported that MoonPay unveiled the tool on July 23 and said it would go live on July 28, with users able to plug it into Claude or ChatGPT and fund it from a bank account or with cryptocurrency.\n\nThat sounds simple. It isn't.\n\nMoney inside a chatbot changes the job of the chatbot. It's no longer only helping you compare prices or draft a plan. It's sitting near the button that spends your money. MoonPay's bet is that PayBox can make that feel normal by using a non-custodial wallet, passkey-based authentication where available, and user-set rules around what an agent can do. According to MoonPay's own terms, PayBox can store credentials and manage keys for a self-custodial wallet, but it isn't a custodian, payment processor, broker, exchange, or merchant of record. Funds move between your funding source and the recipient or merchant. PayBox is the control layer.\n\nThat distinction matters. If you're using an AI agent to spend money, you don't only care whether the agent understood the prompt. You care who can approve the transaction, what the approval covers, and whether the agent can run off with a broader permission than you meant to give it.\n\n## The Real Product Is Permission\n\nPayBox is being pitched around plain-language use. The cleaner example is not a trader staring at gas fees. It's a user telling Claude to pay a reservation fee or buy something from a merchant that can accept agentic transactions - book a table while it's at it. Fortune reported that PayBox users can set guardrails, such as limiting purchases under a certain dollar amount or requiring notification before a purchase.\n\nThat is the product.\n\nThe chat window is just the front door. The useful part is the permission system behind it, because agentic commerce breaks if users have to approve every tiny step and becomes dangerous if they approve too much at once. Visa is building the same problem from the card-network side. Its Intelligent Commerce developer materials describe agent-specific tokens, passkey authentication, payment instructions, and controls meant to match a payment credential request to the user's original instruction, including merchant and amount checks.\n\nMoonPay is coming at the same problem from crypto and wallets. PayBox can return a scoped output for payment or wallet operations, according to its terms, rather than handing the agent the underlying credential. For card payments, that can mean a payment token or virtual card. For wallet operations, that can mean a signature, signed message, or transaction hash. You want that boring plumbing to be boring. When it fails, it fails expensively.\n\nFrankly, the weakest version of AI finance is the one where a user gives an agent a funded hot wallet and hopes the model behaves. Prompt injection, mistaken instructions, bad merchant pages, and confused tool calls are not exotic risks. They're normal software risks with money attached. A scoped approval is not magic, but it is a better starting point than letting the agent hold the keys and improvise.\n\n## MoonPay Is Selling the Rails Too\n\nPayBox also fits a larger MoonPay buildout. On April 29, MoonPay announced that it had acquired Sodot, an Israeli key management infrastructure company, and launched MoonPay Institutional. PRNewswire carried MoonPay's announcement that Sodot had secured more than $50 billion in transactions and protected more than 10 million wallets for clients including eToro, BitGo, Flow Traders, and Exodus. CoinDesk reported that Bloomberg had pegged the all-stock deal at about $100 million.\n\nThat acquisition matters because PayBox is not only a consumer feature. It is a public test of the key-management stack MoonPay wants to sell to banks, asset managers, trading firms, and exchanges. MoonPay said the institutional unit would be led by Caroline D. Pham, the former acting chairman of the CFTC, and would use Sodot's infrastructure for digital asset access, payments, trading, wealth management, and treasury products.\n\nSo you should read PayBox in two ways. For consumers, it's a wallet-shaped answer to a clear problem: AI assistants can recommend and compare. They can draft, too. But they still need a safe way to pay. For MoonPay, it's a retail showcase for infrastructure that becomes more valuable if ChatGPT, Claude, and other assistants become common entrances to financial activity.\n\nThe risk hasn't disappeared. It has moved into the rules.\n\nMoonPay's terms say users are responsible for configuring and revoking agent clients and grants, and that an operation submitted by an agent using valid credentials and an applicable grant can be deemed authorized whether or not the user reviewed it. That is the sentence to sit with. The future of AI payments will not be decided by how friendly the prompt looks. It will be decided by the small print around authorization, recovery, fraud, and the moment your agent does exactly what you allowed, even if it wasn't what you wanted.\n\n**Also read:** [Stat Sniper Wants Its AI Betting Picks to Show Their Work](https://startupfortune.com/stat-sniper-wants-its-ai-betting-picks-to-show-their-work/) • [Palantir posts 93% revenue growth then its CEO calls AI labs Marxist](https://startupfortune.com/palantir-posts-93-revenue-growth-then-its-ceo-calls-ai-labs-marxist/) • [Hugging Face CEO Says China Is Now Winning the Open Model AI Race](https://startupfortune.com/hugging-face-ceo-says-china-is-now-winning-the-open-model-ai-race/)", "url": "https://wpnews.pro/news/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey", "canonical_source": "https://startupfortune.com/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey/", "published_at": "2026-08-04 03:56:47+00:00", "updated_at": "2026-08-04 04:25:26.891023+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-products", "ai-agents", "ai-safety"], "entities": ["MoonPay", "PayBox", "ChatGPT", "Claude", "Fortune", "Sodot", "Visa", "Bloomberg"], "alternates": {"html": "https://wpnews.pro/news/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey", "markdown": "https://wpnews.pro/news/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey.md", "text": "https://wpnews.pro/news/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey.txt", "jsonld": "https://wpnews.pro/news/moonpay-lets-chatgpt-and-claude-spend-your-crypto-behind-a-passkey.jsonld"}}