No Hardware Bottlenecks
Transform any merchant smartphone into a fully functional PIN-on-Glass SoftPOS. The merchant's device serves as the bi-directional gateway.
NILLAR
Payment
Re-Imagined.
Nillar decouples ownership from authorization. Powering merchant-initiated, phoneless transactions using just an alias and a secure PIN.
PCI MPoC Certified · PSD2 SCA · NIBSS NIP Integration
Scroll
Trusted by innovative companies worldwide
NIBSS NIPMastercard Cloud CommerceSamsung SoftPOSCentral Bank of NigeriaPCI MPoCSmile ID VerificationEntrust IdentityAmazon One BiometricsPSD2 CompliantPCI Security Standards Council
The Nillar Framework
The end of hardware dependency.
By shifting the hardware requirement entirely to the merchant, Nillar democratizes digital payments. We reduce the friction of checkout to a memorized identifier and a secure PIN.
Alias-Based Identity
Users authorize transactions using a Unique Authorization Code (VPA). Your visual Encrypted Identifier stops phishing and instills trust before PIN entry.
PCI MPoC Security
Industry-leading security standards. We employ Runtime Application Self-Protection (RASP), white-box crypto, and dynamic keypads to protect consumers.
NIBSS Instant Payment
Native integration with national instant payment rails. Transactions bypass legacy card networks for instant debit/credit processing.
Emergency Consumer Mode
When a consumer loses their phone and wallet, Nillar acts as the ultimate safety net. Transact securely at Tier 1 merchants using just your mind.
Hardware Fingerprinting
Sophisticated device attestation continuously monitors the merchant device environment. Rogue or rooted devices are instantly isolated.
The Fintech Impact
Re-engineering the payment flow.
- Cards Required
- 0
- Phoneless transaction capability for users
- Unified Alias
- 1
- Virtual Payment Address per user
- Hardware Shift
- 100%
- MERCHANT device acts as the sole gateway
- Checkout Time
- <5s
- Identity proofing and settlement latency
The Transaction Lifecycle
Four phases to frictionless checkout.
The Nillar protocol maximizes security without compromising the speed of retail checkout.
01
Initiation
Merchant enters the transaction amount. The app prompts the consumer for their 'Unique Authorization Code' (VPA).
No cards. No NFC tap.
02
Identification
The server retrieves the user profile and displays an 'Encrypted Identifier' (visual token/masked name) to the merchant to confirm identity.
Prevents phishing and builds Trust.
03
Verification
The app requests the transaction PIN. The consumer enters it safely on the merchant's screen via MPoC-secured PIN-on-Glass.
Isolated, obfuscated, and dynamic.
04
Settlement
The encrypted packet reaches Nillar, interfacing instantly with national payment rails (like NIBSS NIP) for real-time settlement.
Instant debit/credit.
nillar_alias_fetch.ts
import { NillarAuth } from "@nillar/merchant-sdk";
// Step 1: Merchant enters payload containing the Consumer Alias
const payload = {
merchant_id: "mch_829910",
user_alias: "800-SKY-WALK", // Consumer's memorized identifier
amount: 4500, // NGN
device_attestation_token: "rasp_tok_...", // TEE runtime validation
};
// Step 2 & 3: Identity Request & PIN Challenge
const identityProof = await NillarAuth.initiate(payload);
console.log(identityProof.encrypted_identifier); // "J*** Smith - BlueMoon"
// Step 4: Encrypted PIN payload sent for Instant Settlement
const tx = await NillarAuth.submitEncryptedPIN(identityProof.session, securePinHashed);
console.log(tx.status); // "Settled via NIBSS NIP"
Security Architecture
The standard for SoftPOS.
By turning a consumer smartphone into a secure PIN-pad gateway, we enforce MPoC standards with absolute precision.
PCI MPoCCertified
Modular and flexible framework for secure PIN and contactless data on COTS devices.
PSD2SCA Aligned
Meets European Strong Customer Authentication via alias possession and PIN knowledge.
CBNCompliant
Aligns with Central Bank of Nigeria's KYC/AML mandates and PTSA transaction reporting.
NIBSSNIP Integrated
Direct real-time settlement using the Nigerian Inter-Bank Settlement System.
Runtime Application Self-Protection (RASP)
Hardware-backed attestation prevents Nillar from running in compromised, rooted, or jailbroken environments.
White-Box Cryptography & Tokenization
PIN entry is deeply obfuscated. Bank account numbers are tokenized to render intercepted data useless.
Dynamic Keypad & Visual Masking
Prevents 'shoulder surfing'. Keypad layouts randomize, and users receive an 'Encrypted Identifier' before PIN entry.
Continuous Device Fingerprinting
Tracks merchant device reputation and network flags. Isolates high-risk environments instantly.
Ready to begin?
The future of invisible commerce is here.
Join the "High-Trust" Pilot Program. Turn your smartphone into a PCI MPoC certified payment terminal without dongles, card dependency, or consumer hardware.
No extra hardware needed · iOS & Android Supported · Enterprise & Micro-merchant tiers