Your Chatbot Can Now Pay The Bill
Type a request into Claude or ChatGPT, tap your fingerprint to confirm it, and the transaction is done.
That is the pitch behind PayBox, a new payment vault from crypto payments firm MoonPay that lets AI assistants handle spending on a user's behalf, without ever holding the money themselves.
What Does PayBox Actually Do
Until now, AI chatbots could help you compare flight prices, research an investment, or shortlist products to buy, but the final step, opening a browser, logging into a payment app, and pushing the transaction through, was always left to the human.
PayBox closes that gap.
Once connected to Claude or ChatGPT, the vault stores both crypto wallets and payment cards, and users can simply describe what they want done in plain language.
Commands can be as direct as swapping $100 of PYUSD to SOL, moving funds across to Robinhood Chain, or asking the assistant to chase better yield through Aave.
The AI puts the transaction together, the user signs off with a passkey, and the payment goes through.
At launch, the vault also handles restaurant bookings, flight reservations, and shopping across major online retailers, with more services expected to be added in the coming weeks.
Why Trust Was The Real Problem To Solve
Handing an AI the ability to spend money sounds risky on its face, and MoonPay says that trust, not convenience, was the harder problem to crack.
Most existing tools force a choice between letting an agent act freely or keeping tight control, and that usually means trusting one party, whether that is the platform, the agent, or a hosted wallet, to hold the money outright.
MoonPay CEO Ivan Soto-Wright framed the shift as the next stage in how money has been hidden inside our devices.
"The card hid the cash. The phone hid the card. This is the era where money disappears into conversation.”
He added that billions of AI agents are coming online and each one will need a safe way to hold, move, and spend money.
PayBox's answer is to split the job in two, letting the assistant prepare a transaction while keeping the actual custody of funds separate and out of its reach.
The company said,
"PayBox is built so no party, including MoonPay and the AI itself, can unilaterally access the user's funds or credentials.”
How The Money Stays Locked Even From MoonPay
The security backbone comes from Sodot, an Israeli key management firm MoonPay bought for roughly $100 million in an all-stock deal back in April 2026.
Sodot's systems already protect more than $50 billion in assets and over 10 million wallets for clients such as eToro and BitGo, and that infrastructure now sits underneath every PayBox vault.
Wallet keys are never stored whole.
Instead, they are split using multi-party computation, a method that breaks a private key into separate fragments so no single party can use it alone.
Those fragments then live inside trusted execution environments, isolated pockets of hardware that shield data even from the server running the software.
MoonPay's launch announcement put it plainly:
"wallet keys are split via MPC across hardware-isolated enclaves, so no device, session, or party, not MoonPay, not the AI agent, ever holds a complete key or can sign alone."
Card payments follow a similar logic, routing through Visa's agentic commerce protocol so the AI processes a payment without ever seeing the actual card number, cutting down the chance of card details leaking or being reused elsewhere.
How Much Control Users Get To Keep
PayBox gives people two modes to choose from.
Under "Always Ask," every single transaction needs passkey approval before it moves.
Under "Autonomous," the AI can act within spending limits and permissions the user sets in advance.
Either way, MoonPay says every authorisation is tied to a single action and can be revoked instantly.
MoonPay Labs chief engineer Niraj Prasad said the shift gives users something that simply did not exist before.
Where an agent could once only lay out product options, that list now stretches to include the payment itself.
Which Blockchains And Payment Methods Are Supported
PayBox launches with support for Solana alongside seven Ethereum-compatible networks: Ethereum, Base, Robinhood Chain, Arbitrum, Polygon, Hyperliquid, and Tempo.
On the payment side, it works with debit cards, bank accounts, Apple Pay, and PayPal.
A large part of what makes this possible is x402, an open payment protocol Coinbase originally built and later donated to the Linux Foundation in April 2026, where it is now governed as a vendor-neutral industry standard backed by Visa, Mastercard, Stripe, Shopify, AWS, and Anthropic.
x402 lets an AI agent pay any service set up to accept agent-initiated transactions, stretching PayBox's reach well beyond crypto-native tasks.
Is This Part Of A Bigger Pattern
PayBox did not appear overnight.
MoonPay has been building toward it through most of 2026, starting with an open wallet standard for AI agents in March, backed by PayPal, the Ethereum Foundation, and the Solana Foundation.
In May, it launched an app letting people buy crypto inside ChatGPT, though that version still redirected users to a checkout page to finish the purchase.
By June, it had shipped a desktop app linking Claude and Codex directly to crypto wallets.
The wider x402 ecosystem has also been picking up pace.
Coinbase rolled out tools in June letting AI agents accept USDC payments, trade crypto, discover paid services through an AI marketplace, and handle high-frequency micropayments more smoothly.
Amazon Web Services has folded x402 into its Bedrock AgentCore Payments service, while Fireblocks launched its own x402-compatible payments framework and joined the x402 Foundation.
Blockchain analytics firm Chainalysis reported on 3 June 2026 that agentic payments on Coinbase's Base network had already crossed 100 million transactions in roughly nine months, though it noted that speculative activity drove some of that early volume.
What Happens To Fraud Risk Now
MoonPay's own breakdown of how agent-based payment fraud tends to happen points to three main weak spots: theft of the key itself, leakage of card numbers, or a flaw somewhere in the wider system that lets the whole setup be broken open.
The company says PayBox has been built to address each of these individually rather than relying on one layer of defence.
For now, PayBox is only available through Claude and ChatGPT, with support for Gemini and Grok expected to follow within a month.
Developers, meanwhile, can plug the vault into their own AI applications through MoonPay's software development kit.
XingChi
Weatherly
Weiliang
YouQuan
The Block
TheBlock
Cointelegraph
Bitcoinist