Accept USDT payments for what you sell

How it works

1. Activate PUQET Pay from your account. You need approved identity verification and 2FA. Merchants who break the rules are suspended.
2. Add your own USDT (BEP-20) wallet address, then create payment links or connect the API.
3. The buyer opens the checkout, sends USDT to your address from any wallet and pastes the transaction hash.
4. PUQET reads the transfer on BNB Smart Chain: right token, right address, enough amount, inside the time limit, and a transaction never used before.
5. After the confirmations, the invoice is marked paid, the buyer sees your delivery note, and your webhook is called.

Only USDT on BNB Smart Chain is supported for now. Card, bank and mobile-money payments are not. Prices are 1–10000 USDT per invoice. You are responsible for your products, delivery, customer support and any refunds, which you send from your own wallet.

Not allowed

• Investment, trading, "guaranteed profit", MLM or referral-earning schemes
• Gambling, betting and lotteries
• Counterfeit, pirated or stolen goods and accounts
• Weapons, drugs and other illegal or age-restricted products
• Adult content
• Anything illegal in the buyer's or the merchant's country

API documentation

Create an API key and a webhook secret in your merchant dashboard (API & webhooks tab). Keep them on your server only. Send amounts as strings.

Create an invoice

POST /api/pay/v1/invoices — required: amount, title. Optional: orderRef, customerEmail, customerName, shippingAddress, successUrl (https), expiresInMinutes (15–1440, default 60).

curl -X POST https://puqet.com/api/pay/v1/invoices \
  -H "Authorization: Bearer pqk_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": "19.99",
    "title": "Ebook: Crypto Basics",
    "orderRef": "ORDER-1042",
    "customerEmail": "[email protected]",
    "successUrl": "https://yourshop.com/thank-you",
    "expiresInMinutes": 60
  }'

Response (201). Send the buyer to checkoutUrl.

{
  "success": true,
  "invoice": {
    "id": "inv_…",
    "status": "pending",          // pending | confirming | paid | underpaid | expired
    "amount": "19.99",
    "token": "USDT",
    "payTo": "0x…your wallet…",
    "orderRef": "ORDER-1042",
    "checkoutUrl": "https://puqet.com/pay/inv_…",
    "txHash": null,
    "paidAmount": null,
    "expiresAt": "2026-10-20T12:00:00.000Z",
    ...
  }
}

Read an invoice

GET /api/pay/v1/invoices/{id} with the same Authorization header. Returns the same invoice object.

Webhooks

When an invoice becomes paid (or underpaid), we POST JSON to your webhook URL: { id, type: "invoice.paid" | "invoice.underpaid", created, data: invoice }. The X-Puqet-Signature header is t=<unix time>,v1=<HMAC-SHA256 of "t.body" with your secret>. Answer with any 2xx status. Failed deliveries are retried for about 11 hours; you can also resend from the dashboard. Use orderRef and id to make your handler safe to run twice.

// Node.js (Express): verify X-Puqet-Signature with your webhook secret
import crypto from 'crypto';

app.post('/puqet-webhook', express.raw({ type: 'application/json' }), async (req, res) => {
  const header = req.get('X-Puqet-Signature') || '';            // "t=…,v1=…"
  const parts = Object.fromEntries(header.split(',').map((p) => p.split('=')));
  const expected = crypto.createHmac('sha256', process.env.PUQET_WEBHOOK_SECRET)
    .update(`${parts.t}.${req.body}`).digest('hex');
  const fresh = Math.abs(Date.now() / 1000 - Number(parts.t)) < 300;
  const ok = fresh && parts.v1 && parts.v1.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(parts.v1), Buffer.from(expected));
  if (!ok) return res.status(400).end();

  const event = JSON.parse(req.body);                        // { id, type, created, data: invoice }
  if (event.type === 'invoice.paid') {
    // Optional but recommended: re-read GET /api/pay/v1/invoices/{id} before delivering.
    await markOrderPaid(event.data.orderRef, event.data.txHash);
  }
  res.status(200).end();
});

Never deliver an order because a browser came back to your success page. Wait for the signed webhook, or check the invoice with the API.