If you accept Lightning payments at your shop, your wallet is now part of your business infrastructure. It deserves the same level of security attention as your cash register, your mobile money account, and your physical stock. More, actually, because a compromised Bitcoin wallet can be emptied in seconds from anywhere in the world.
This resource covers the specific safety practices that matter for merchants, not general Bitcoin safety (our beginner safety guide covers that), but the business-specific concerns: balance limits, staff access, phone loss, and daily security habits.
Balance Limits: How Much Should Be in Your Merchant Wallet
The Principle
Your merchant wallet should hold only what you need for immediate business operations. This is the same principle as not keeping more cash in the register than you need for the day.
Practical Limits
- Set a maximum balance for your merchant wallet, equivalent to no more than 2-3 days of expected Bitcoin revenue
- When the balance exceeds this limit, transfer the excess to a separate savings wallet or convert to local currency
- The merchant wallet on the point-of-sale device is your “register.” Treat it like one.
Why This Matters
If your phone is stolen or your wallet is compromised, you lose whatever is in the wallet. By keeping the merchant wallet balance low and regularly transferring excess to a more secure location, you limit your maximum loss.
Example: If you receive an average of $20 per day in Lightning payments, your merchant wallet should hold no more than $40-60 in Bitcoin at any time. Transfer or convert the rest daily or every few days.
Staff Access: Who Touches the Wallet
The Core Rule
Only people who need to process payments should have access to the wallet. This usually means you, the business owner, and at most one or two trusted staff members.
Setting Up Staff Access Safely
If staff need to process Lightning payments when you are not present:
- Use a custodial Lightning wallet that supports separate user accounts or PINs for different staff members, if available
- If using a single-account wallet, set a PIN that is different from the phone unlock code
- Change the wallet PIN if a staff member leaves or is no longer authorised
- Staff should be able to generate invoices and confirm payments, but should not need access to the recovery phrase or the ability to send payments out
- Keep the recovery phrase in your personal possession, not in the shop
What Staff Should Know
- How to generate an invoice for a customer payment
- How to confirm that a payment has been received
- What to do if a payment fails (generate a new invoice, accept alternative payment)
- How to contact you if there is a problem they cannot resolve
- That they must never share the wallet PIN, recovery phrase, or send payments out of the wallet
What Staff Should Not Know
- The wallet recovery phrase
- How to send payments from the merchant wallet (unless specifically required for refunds, in which case this should require your approval)
- The balance of any separate savings wallet
When a Phone Goes Missing: Immediate Action Plan
If the phone that runs your merchant wallet is lost, stolen, or broken, follow these steps immediately:
Step 1: Do Not Panic, But Act Quickly
You have a window of time before someone can potentially access your wallet. Use it.
Step 2: Access Your Recovery Phrase
Get your written recovery phrase from its secure storage location.
Step 3: Restore the Wallet on a New Device
If you have another smartphone available:
- Download the same wallet app
- Use the recovery phrase to restore your wallet
- Once restored, transfer the balance to a new wallet with a new recovery phrase (because the old recovery phrase may now be compromised if someone could access the phone)
Step 4: If No Spare Device Is Available
- Contact a trusted community member or facilitator who can help you access a device
- Prioritise restoring the wallet and transferring funds to a new wallet
- Until you have a new device, accept only cash or mobile money
Step 5: Secure the New Setup
- New wallet, new recovery phrase, new PIN
- Update your staff on any changed access credentials
- Review what was in the wallet at the time of loss and record the loss if applicable
Prevention: Be Ready Before It Happens
- Have your recovery phrase stored securely at home, not at the shop
- Know where you can quickly get a replacement phone
- Have the wallet app name and version noted somewhere separate from the phone
- Practice the restoration process once before you need to do it for real
- Keep a small emergency fund (cash or mobile money) to cover the period between phone loss and restoration
The Lightning payments for shops checklist includes daily operations procedures that complement these safety practices.
Daily Safety Habits
Build these into your routine:
Opening
- Check that the wallet is working and the balance matches your records
- Ensure the phone is charged and will last the business day (or keep a charger at the counter)
- Verify that the wallet PIN is set
During Business
- Do not leave the merchant phone unattended on the counter
- If stepping away, lock the phone and take it with you or give it to a trusted staff member
- Do not show your wallet balance to customers
- Do not process transactions on someone else’s phone
Closing
- Check the wallet balance against your sales records
- Transfer excess balance if above your set limit
- Lock the wallet and lock the phone
- Ensure the phone is in a secure location overnight
Conversion Safety
When converting Bitcoin to local currency, additional safety considerations apply:
If Using an Exchange App
- Use a reputable exchange with a track record in your market
- Set a separate strong password for the exchange account
- Enable two-factor authentication if available
- Do not keep a permanent Bitcoin balance on the exchange; withdraw or sell promptly
If Using Peer-to-Peer Conversion
- Only trade with people you know or through a reputable platform with escrow
- Never release Bitcoin before receiving the local currency payment
- Meet in a public, safe location if trading in person
- Keep records of every conversion: date, amount, rate, counterparty
If Using Automatic Conversion
- Understand the service’s fees and spreads
- Verify that converted funds arrive in your mobile money or bank account
- Have a fallback plan if the automatic conversion service has downtime
Record-Keeping for Security
Good records protect you in case of disputes, losses, or accounting questions:
- Record every Lightning payment received: date, time, amount, what was sold
- Record every conversion: date, amount, rate, method, local currency received
- Record any security incidents: failed payment attempts, suspicious contacts, access issues
- Keep a separate, offline backup of your records (paper notebook or separate device)
- Review records weekly to catch any discrepancies early
Common Questions
Should I use the same phone for merchant wallet and personal use? Ideally, use separate phones. If that is not practical, use separate wallets for merchant and personal Bitcoin, and treat the merchant wallet as a business tool with business security practices.
What if I need to give a refund and only staff have the phone? Refunds should require owner authorisation. Establish a process where staff flag refund requests and you approve and process them, either in person or remotely.
How do I know if my wallet has been compromised? Watch for unexpected balance changes, transactions you did not make, or unfamiliar login notifications. If you see any of these, transfer your funds to a new wallet immediately.
Is it worth getting insurance for Bitcoin held in my merchant wallet? Bitcoin insurance products are rare and expensive. The better protection is operational: keep low balances, secure your recovery phrase, and have a phone-loss plan.
Printable Safety Card for Merchants
Keep this near your point of sale:
- Keep wallet balance low — transfer excess daily
- Only authorised staff access the wallet
- Recovery phrase stays at home, not at the shop
- Lock the phone when stepping away
- If phone is lost: recover wallet, transfer funds, set up new wallet
- Record every transaction and every conversion
- Never share wallet PIN or recovery phrase with anyone