Ansem Pay — Whitepaper v1.0
A non-custodial, on-chain card-issuance protocol on Solana. Fund once from your own wallet — spend anywhere Mastercard is accepted.
3thA9TizdPJPjv3DpbscRet3jvBgtuCzom5M5CAs2uZh
01 — Abstract
Ansem Pay converts on-chain value into a spendable card without a bank, an account, or identity onboarding to mint and fund. Connect a Solana wallet, choose a value in USD, fund it with USDC or $ANSEM, and receive a single-use Mastercard — secured by a purpose-built Anchor program where every order is escrowed to its own program-derived vault until settlement. The money-in path is live on Solana mainnet today.
02 — On-Chain Flow
Wallet
USDC or $ANSEM
Vault
One-time PDA
Pool
Shared settlement
Card
Spend anywhere
A deposit lands in a vault only that order can derive, settles into the pool, and pays the provider — every hop an on-chain instruction.
03 — How It Works
Connect a Solana wallet — Phantom, Solflare, or Backpack — and choose a card value in US dollars. No email, no account, no onboarding form. Pay with USDC (1:1) or $ANSEM.
Choose Shielded or Direct, then receive a one-time, program-derived deposit address unique to this order. Sign one transfer from your own wallet. Until you sign, you hold sole custody.
Once Solana confirms the deposit, the protocol settles it into the pool — auto-swapping $ANSEM to USDC via Jupiter v6 — then pays the card provider from the pool with an on-chain payout.
The card arrives as a redemption code and activation link. Complete the provider's light activation and spend anywhere Mastercard is accepted.
04 — Architecture
The trust model is enforced by a custom Anchor (Rust) program on Solana mainnet. It guarantees each deposit is isolated in an address only that order can produce, that funds move only along sanctioned transitions, and that every movement is recorded on-chain.
Program
ansem-pay-vault
Network
Solana mainnet
Seeds
["vault", sha256(orderId)]
Assets
USDC · $ANSEM
Every order gets a unique PDA derived from its id — funds in flight are never pooled in a shared company hot wallet.
Confirmed deposits settle into a single program-controlled pool PDA, the working-capital account that pays providers.
init_pool, settle, refund, payout, set_admin — a deliberately small surface, so every transition is easy to audit.
Keys are never held. The only exits from a vault are settlement to the pool or refund to the depositor.
Deposit, settle, payout, and refund are all Solana instructions. The on-chain state is the ledger of custody.
No instruction can move a user's vault funds to an arbitrary third party. The absence is itself a security property.
| Instruction | Movement | Purpose |
|---|---|---|
| init_pool | — | One-time initialization of the shared pool PDA and admin authority. |
| settle | vault → pool | Move a confirmed deposit from its per-order vault into the shared pool. |
| refund | vault → user | Return an unsettled deposit to the original depositor (30-day window). |
| payout | pool → provider | Pay the card provider in USDC out of the pool to mint the card. |
| set_admin | — | Rotate the administrative authority for privileged instructions. |
05 — Funding Rails
The baseline rail. USDC is applied to the card value at a 1:1 dollar rate plus the protocol fee. No swap is required — the deposit flows vault → pool → provider, unchanged in denomination.
Fund in the native token and it is swapped to USDC via Jupiter v6 at settlement, sourcing best-available execution. Paying in $ANSEM also earns a fee rebate.
9cRCn9rGT8V2imeM2BaKs13yhMEais3ruM3rPvTGpump
The conversion happens at settlement — after confirmation, at the vault-to-pool transition — committing the deposit to USDC at the moment the protocol takes it into the pool, so the card's dollar value ties to the event that funds it.
06 — Privacy
Ansem Pay makes a specific, limited privacy claim — and no more, because the alternative is fraud.
Direct
The relationship between the funding wallet and the card purchase can be followed as an ordinary on-chain trace.
Shielded
The deposit is routed through the shared pool before the card is bought, so the funding wallet and the purchase are not linked by a single, direct on-chain transfer.
What Shielded is NOT
The Shielded path removes the direct, one-hop on-chain link. Analysis over pool timing, amounts, and off-chain data may still draw probabilistic associations. Users with adversarial-grade requirements should understand this boundary.
07 — Card Issuance
Cards are issued through CryptoRefills as a Swype virtual Mastercard — open-loop, spendable anywhere Mastercard is accepted. The protocol buys the card with USDC from the pool via the payout instruction and delivers a redemption code plus an activation link. Swype cards are available in $5–$99 (US); closed-loop merchant gift cards are also supported.
An honest note on activation
Spending an open-loop card requires a light activation on the provider's side. The accurate framing of the promise is "No KYC to mint and fund" — creating and paying for a card needs no bank, no protocol account, and no identity document — not "no verification ever." We disclose it so nothing is a surprise.
08 — Fees & $ANSEM
~6%
A single fee on the funded amount — covering the card face value, the provider spread, and protocol margin. No account fees, monthly fees, or inactivity fees, because there is no account.
More card volume creates more demand for $ANSEM (rebates make it the cheapest rail), which deepens usage and alignment — routing real spending demand through the token at settlement.
Token disclosures
$ANSEM is a utility token for accessing the protocol. These parameters are not yet published and must be finalized by the team. Nothing here is a promise of price, yield, or financial return.
09 — Security & Custody
01
The user has sole custody in their own wallet.
02
Funds sit in a program-controlled per-order vault PDA — not a discretionary company account.
03
Funds move into the pool PDA and are paid to the provider by the payout instruction.
10 — Disclosures
Unspent or failed orders are refundable within a 30-day window via the on-chain refund instruction (vault → user) — returned to the wallet that sent them, as auditable as the deposit itself. This whitepaper is informational, not an offer, solicitation, or financial advice.
Card activation
Spending an open-loop card requires a light activation on the provider’s side. "No KYC to mint and fund" describes the funding step — not "no verification ever."
Privacy is limited
The Shielded path is pooled settlement that breaks the direct one-to-one on-chain link. It is not a zero-knowledge system, not a mixer, and provides no cryptographic unlinkability, anonymity, or untraceability.
Single-use cards
A card is minted for a chosen value and spent down; it cannot be topped up or reloaded.
Refunds are time-bounded
Unspent or failed orders are refundable within a 30-day window, not indefinitely.
Token economics unpublished
All $ANSEM supply, allocation, vesting, distribution, and market-data parameters are [TBA]. No price appreciation or yield is promised or implied.
Third parties
Card issuance depends on CryptoRefills / Swype, and $ANSEM funding uses Jupiter v6 for swaps — third-party services with their own terms and availability.
Smart-contract risk
On-chain programs carry inherent technical risk. The audit status of ansem-pay-vault is [TBA].
Regulatory
The regulatory treatment of crypto-funded prepaid products varies by jurisdiction and may change. Users are responsible for local compliance.
11 — Roadmap
Per-order vaults, settlement to pool, refunds, provider payout, USDC and $ANSEM funding, and Swype open-loop Mastercards via CryptoRefills.
Additional funding rails, larger card denominations, and new regions.
More card products and issuers across the pool.
Program-audit publication and full $ANSEM tokenomics.
ansem-pay-vault · 3thA9TizdPJPjv3DpbscRet3jvBgtuCzom5M5CAs2uZh · $ANSEM 9cRCn9rGT8V2imeM2BaKs13yhMEais3ruM3rPvTGpump · Solana mainnet · 2026
Informational only — not investment advice, an offer, or a solicitation. Figures marked [TBA] are pending official publication. Nothing herein guarantees privacy, anonymity, untraceability, or financial return.