Skip to content
Testnet pilot on Arc

Stablecoins that reach the right person, or come back.

Notol holds your USDC in escrow until the recipient proves they control the destination. Wrong address, no answer, changed your mind? It returns to you.

Test USDC only for now. No real money moves during the pilot.

The problem

A stablecoin transfer is final. One wrong character and it's gone.

Banks fixed this. Since October 2025, every eurozone bank checks the payee name against the IBAN before a SEPA transfer. Crypto has no equivalent, so a test transfer and a careful look are all that stand between you and a lookalike address.

  • 1M+address poisoning attempts a day on Ethereum aloneSource: MEXC
  • $50Mlost by one trader in USDT, minutes after a successful $50 test transferSource: The Block
  • 612%rise in USDT dust transfers used for poisoning after fees droppedSource: ForkLog

How it works

Money waits until the right person proves it's theirs.

A poisoner can own a lookalike address, but they never get the link, and release needs both.

  1. 1

    Lock

    You sign one transaction. The USDC moves into an escrow contract on Arc, not to us and not to the recipient yet.

  2. 2

    Prove

    The recipient gets a link through a channel you choose. They sign with the wallet that owns the address, or claim with a PIN.

  3. 3

    Release or refund

    A valid proof releases the money to them. "Not my address", a cancel, or 72 hours of silence sends it back to you.

What the recipient opens. It releases only with a signature from the wallet that owns the To address.

Two ways to send

Send to an address you have, or to a person who doesn't have one yet.

Send to an address

The recipient already has a wallet.

You enter
Their address or Notol name, and the amount.
You share
A confirm link, through your own chat or email.
They prove it
By signing with the wallet that owns the address.
It pays out to
That address, once the contract checks the signer.

A Notol name resolves to the owner's address, and the money is held in escrow until they sign.

Send to a person

They have no address yet, or you don't know it.

You enter
The amount and a 4-digit PIN.
You share
A one-time claim link one way, the PIN another way.
They prove it
With the link and the PIN. Five wrong PINs lock it.
It pays out to
Whichever wallet they connect.
Verified payee

After a first confirmed transfer, the pair is recorded on chain with the recipient's name. Next time Notol shows who you're paying, and blocks a pasted address that only looks like theirs. The registry is public, so anyone can look an address up.

Look up an address

Security

Built so that we can't take your money, even if we wanted to.

Notol is software, not a custodian. Here is what the system makes impossible.

  • No admin key to your money

    The contracts have no owner, no upgrade and no pause. Funds can only go to the recipient or back to you.

  • We relay, we never decide

    Every payout our server sends carries the recipient's signature, which fixes where the money goes. Refunds can only go back to you. A copied or front-run transaction pays no one new.

  • A stolen link is not enough

    The link secret lives after the #, which browsers never send to a server. Claiming also needs the PIN, checked off chain with a 5-try lockout.

  • Refunds never depend on us

    After 72 hours anyone can trigger the refund. If Notol's servers vanish, your money still comes home.

For developers

Let your app or agent send through Notol.

An SDK, an MCP server for AI agents, and a partner API with payee checks and event webhooks. Same escrow, same rules. Access is by request during the pilot.

FAQ

Questions

What does the recipient need?

For an address send, the wallet that owns that address. For a person send, the link, the PIN and any wallet to receive into. They never type an address, and we pay their gas.

The link opened inside Telegram. How do I connect a wallet?

Tap Connect wallet. Notol opens your wallet app to approve, then you switch back. If nothing happens, open the link in your phone’s browser instead.

The PIN locked, or the link got lost. What now?

The money stays in escrow either way. The sender can copy the link again from Activity in the browser they sent from, or cancel and send a new link and PIN. If nobody acts, it refunds after 72 hours.

Which tokens and chains?

USDC on Arc, Circle’s stablecoin chain. EURC and funding from other chains are planned.

Is this live?

Notol is in a testnet pilot. It runs on Arc testnet with test USDC, which you can get from Circle’s faucet. No real money moves yet.

Send it once. Send it right.

Try the full flow on Arc testnet with test USDC.

Send USDC

Get test USDC