Docs / Reference

Security & risks

What Whats holds, what it never does, and what you should know before you trade.

Your key

  • Each wallet's private key is generated on the server and stored encrypted (AES-256-GCM) with a master key that lives only in the server environment.
  • It is used solely to sign the transaction you just confirmed. Nothing is signed without a ✅ Confirm.
  • You can export it (export) and keep using Whats; the exported-key message is scrubbed from delivery logs once delivered.

What Whats will never do

  • Ask you for a private key or seed phrase — yours or anyone's.
  • Ask you to send funds to “support”, “verify” or “unlock” anything.
  • Message you from a number other than +1 (572) 229-4854.

Risks

⛔
IrreversibleOn-chain transactions cannot be undone. Double-check tickers, amounts, addresses and phone numbers before confirming.
  • Stock Tokens are issued by Robinhood Assets (Jersey) Ltd and are not available to US, UK, Canadian or Swiss persons. Prices can gap outside market hours.
  • Tokens and launches are volatile and can lose all value. Names and symbols are not unique; only the contract address is.
  • pons is a third-party protocol. At the time of writing its v2 contracts are deployed with audits in progress. Graduation does not indicate quality — it only means the curve sold out.
  • Custodial convenience — until you export the key, access to your wallet depends on Whats' systems and on your WhatsApp account. Export the key if you hold a meaningful balance.

Report an issue

Found a bug or something that looks wrong? Reach us on X or Telegram.