Skip to main content
AroPay is a confidential payments solution: it lets businesses send sealed, private payments on public ledgers without exposing confidential information. Amounts and balances are encrypted on-chain with fully homomorphic encryption, so you keep the auditability and finality of a public blockchain while payroll, supplier pricing, and treasury flows stay private. AroPay runs on the Aro Confidential Rails, built on Zama Protocol FHE. The value layer is cAROUSD (Aro Confidential US Dollar), an ERC-7984 confidential token designed to be backed 1:1 by liquid stablecoins (USDC and USDT) through the Aro Liquidity Commitment, with sealed transfers and regulator-grade disclosure controls built into the rail itself.

​
Environments

AroPay runs the same platform and API in two environments; what changes is the chain underneath and the money behind it:

Production (Ethereum Mainnet)

Live at aropay.aro.media on Ethereum Mainnet (chain ID 1). Real value: cAROUSD minted and redeemed 1:1 against stablecoin reserves. Deposits and transfers move real funds; there is no faucet.

Sandbox (Sepolia)

Live at dev.aropay.aro.media on Sepolia (chain ID 11155111). A test stablecoin stands in for USDC/USDT and a built-in faucet provides funds, so you can integrate and rehearse flows end to end. Everything else, including the FHE rail, is identical.
Integrations built against the sandbox carry over to production unchanged; only the base URL (and your API key) differs. Every account ships with admin-provisioned credentials, custodial wallets, and live on-chain access to the confidential rail, driven either from the web dashboard or, primarily, from a versioned JSON API.
The dashboard is an API client. Everything you can click in the UI maps one-to-one onto the same /api/v1 endpoints documented here, so anything you prototype by hand is already automatable.

​
What you can do with it

Fund a wallet

Get money into a wallet. In the sandbox, the built-in faucet sends test stablecoin plus an automatic gas top-up.

Mint confidential funds

Convert public stablecoin into cAROUSD, an encrypted ERC-7984 balance that hides amounts on-chain.

Send private transfers

Move value publicly (standard ERC-20) or privately with FHE-encrypted amounts: one endpoint, two rails.

Redeem back to stable

Burn cAROUSD and receive stablecoin 1:1, with asynchronous settlement you can track end-to-end.

Post a letter of value

Aro Mail: escrow cAROUSD into a printed letter with a QR and claim code, mail it through Lob, and let the recipient claim it into their wallet.

Track transactions

Filter history, poll in-flight rows to completion, deep-link to the explorer, and download notarized receipts.

​
Start here

Quickstart

From first login to a private transfer in about five minutes.

How AroPay works

The architecture: wallets, rails, the operator, and mint modes.

API reference

Every endpoint with schemas, examples, and an interactive playground.

​
The platform at a glance

​
How accounts work

AroPay accounts are provisioned by your Aro Media contact; there is no self-serve sign-up during the MVP, and sandbox and production credentials are separate. You receive a one-time temporary password, set your own password on first login, and from there can enable two-factor authentication, register passkeys, and create API keys for programmatic access.
Already have credentials? Head straight to the quickstart; it walks the full loop: wallet → faucet → mint → private transfer → redeem.