Manav.id · Banking

No signature,
no wire.

Approvers sign the exact amount, account and wire ID on their own phone. Change one digit and the wire is held.

Try to break it Book a walkthrough or book a 20-min walkthrough
Animated wire approval: portal, approver phone, bank gate

For banks and credit unions sending Fedwire
Works behind any portal that releases through your payment hub
Open protocol spec

Three ways wires get stolen. Each one is held at the gate.

signed 8821 · sent 6601Held

Malware swaps the account

Run it live
old signature, new wireHeld

An old approval is replayed

Run it live
voice only, no device signatureHeld

A cloned CEO voice calls the desk

Run it live

Limit: an approver who is fooled into approving the wrong payee still signs it. That is why the phone shows the full payee before the tap. Threat model and limits

Seconds, not a callback queue.

Your callback queue
?
Tap + gate check
0:00

Tap time from the demo. Your callback time is measured in the pilot.

$3.05Breported business email compromise losses, 2025FBI IC3 2025 report, p. 8
30 daysshadow pilot beside your wire deskPilot scope
? heldwires that would have been held, counted in the pilotSample report

Change anything. The signature breaks.

Every approval leaves a signed receipt. Your auditors check it offline with a public key. No call to us.

Tap a value to tamper with it
wire receiptChecking
amount
routing / acct
wire_id
signer
approved bypasskey, user verified
algEd25519
key_idgenerating
signed_atnow
signature: generating

Demo key generated in this tab. In production Manav signs with its published key after the approver's passkey check.

Fits beside what you run today.

No core changesOne check between portal and payment hub.
Dual controlClerk initiates. CFO signs on their phone.
Approver setupEnroll a phone passkey once. App or QR. Recovery
Biometric stays on the phoneSecure Enclave or StrongBox. We never receive it.
Verify without usPublished Ed25519 key. Your gate checks every receipt locally.
Callback staysNo phone, or signing unavailable? Your desk handles it, as today.
Built onW3C WebAuthn / FIDO2NIST FIPS 186-5
SupportsUCC §4A-202 commercially reasonable security procedureFFIEC authentication guidanceModeled on PSD2 dynamic linking (EU)

Pick a flow. Click through it.

Live wire gateApprove, tamper, replay, voice clone.2 min Offline receipt checkEdit the JSON. It fails.1 min Pilot scope30 days, success criteria, exit.3 min
More flows AP and treasury release Title and escrow payoff Help desk MFA reset Reference architecture

See it on your own wire flow.

20 minutes. Then a 30-day shadow pilot beside your wire desk that reports what it would have held and how often callback was still needed.

Read-onlyNo rail changesExit any day
Sample pilot report synthetic data Wires seen1,284 Would have held3 Median tap4.2s Callback fallback6% Book a walkthrough See pilot scope

Built by TheWorkCompany LLC, the team behind the open Manav protocol. About us