Every PDFi+ invoice is a signed 1inch order. Pay from the page or inside Acrobat; it settles only if the payee matches the merchant's ENS name.
INVOICE NO
1048
DUE
Oct 26, 2026
FOR
Globex Corp.
Consulting services
Made with
“Invoice #1042 was paid $980.00 on Sepolia. The router checked acme-demo.eth on-chain before the money moved.”
View transaction 0x659666…30a3 on EtherscanForged
Change the account number, keep the logo. Business email compromise cost about $2.77B in 2024 (FBI IC3).
PAY TO
GB29 NWBK 6016 1331
GB82 WEST 1234 5698
Edited in transit
Unchecked
Nobody verifies the payee when the money moves. The PDF and the bank details on it are two unrelated things.
PAY TO
GB29 NWBK 6016 1331
Not checked
Unenforced
Terms live in the text. Nothing computes what is due today, or refuses a second payment.
PAY TO
GB29 NWBK 6016 1331
Not checked
01
Each invoice is a signed order. It carries the amount, the terms and the ENS name it pays. The PDF, the pay link and the QR all point to the same order, so there is nothing to edit in transit.
02
Customers pay with a username, or a wallet. At settlement the router resolves the merchant's ENS name and the invoice's own name. If either does not match, the payment reverts. A forged PDF cannot collect.
1inch router · settlement checks
Forged copy, same logo: payee does not match, reverted.
03
Sell an unpaid invoice in one click. Financiers keep a single balance on 1inch Aqua that bids on every invoice they list. The merchant takes the best bid today; the financier collects in full when the customer pays.
Invoice #1043 · $1,000.00 due Oct 26
ListedPayee checked on-chain at settlement
The router resolves the merchant's name and the invoice's name inside the payment. A forged invoice reverts.
Terms enforced by the router
The amount due today and the one-payment rule are computed by a SwapVM instruction, not by the PDF.
No. Everything runs on Ethereum Sepolia with demo USDC that anyone can mint. The contracts are verified on Etherscan but not audited.
PDFi does. A PDFi account is a custodial server wallet on Coinbase Developer Platform; your password authorises each payment and only a salted hash of it is stored. There is no password reset.
The payment reverts. The router checks that your ENS name belongs to whoever signed the invoice and that the invoice's own name points to its vault.
acme-dem0.eth resolves correctly for its own owner, so the chain cannot catch spelling. The pay page always shows the name from the signed invoice: read it.
No. Each invoice accepts exactly one payment; the second is refused on-chain.
Any viewer can open the pay link or scan the QR. Paying from inside the PDF uses Adobe Acrobat's JavaScript.
Non-payment. Factoring is non-recourse: the financier carries the risk that the customer never pays, and prices for it.
Issue it under your ENS name. Your customer pays with a username, and you can sell it early if you need the cash.