Trust & safety on Deshopa

How escrow, verification and signed records protect buyers and sellers.

vendors holding a live signed badge

money events in the escrow ledger

Verify now →

Scan a QR or type a code

1. Your money is held in escrow

When you pay, Deshopa holds the money. The vendor does not receive it yet.
The vendor is paid only after you confirm the order was received, or 7 days after confirmed delivery with no dispute.
Opening a dispute freezes the money until it is resolved. Refunds come out of escrow.
Instalment payments are held the same way; the order ships only once the plan is fully paid.
Every step — paid, held, dispatched, delivered, received, released, refunded — is written to a tamper-evident ledger and you get a signed receipt with a QR code for it.

Verified vendors get a digitally signed badge listing exactly what we checked: business email, phone, owner identity (NIN/BVN), business registration (CAC) and bank account name.
The badge has a code (like DV-7K2Q-9X) and a QR code that vendors can print on flyers, stickers and receipts.
If a vendor is suspended or loses verification, the badge is revoked instantly and every check shows it as revoked — even printed QR codes.
Reviews can only be written by customers who bought and received the product, and each carries a signed “Verified purchase” record.
Negotiated prices and instalment plans are signed agreements, so neither side can later claim different terms.

Open deshopa.store/verify and scan the QR or type the code. The signature is checked on your device.
After opening the verify page once, QR codes can be checked offline.
Only trust QR codes that open deshopa.store. A fake QR pointing elsewhere is flagged.
Developers can verify the W3C Verifiable Credentials with any standard library using the public key below.

Identifier (DID): did:web:deshopa.store
Key fingerprint (SHA-256): D373 0648 EBBB 4701 100F 1FCA 18E5 5F2E 54F6 DDB6 6CDA 2FFC 0027 150B D2E4 BA73; Fingerprint computed on your device from /.well-known/did.json: …
Published in DNS: _deshopa-trust.deshopa.store TXT "deshopa-trust=v1; kid=key-1; sha256=d3730648ebbb4701100f1fca18e55f2e54f6ddb66cda2ffc0027150bd2e4ba73"

If the fingerprint here, in DNS and on our official pages all match, the key has not been swapped.

Each day Deshopa re-checks every link in the escrow ledger and signs the result. Receipts commit to their place in this chain.