Every payment rail in finance was built around one assumption: once it's sent, it's gone. Wire the wrong account, get scammed by a fake invoice, fat-finger an extra zero -- the money is already gone before you've finished feeling sick about it. GhostPay is the optional switch you flip when you want a safety net -- new address, first-time recipient, larger amount. Normal sends stay instant; GhostPay is there for when you're not sure.

Here's the actual mechanism: a GhostPay isn't a transfer, it's a locked container with a one-time code. You fund it, you set an expiry, and you get a code and a link -- until someone uses that code to claim it, the money isn't theirs yet. If nobody claims it before your expiry hits, it simply sits unclaimed and you can reclaim it back to your vault yourself, for a small fee. Send it to the wrong person and they never enter the code? It comes back to you at expiry. This is sender-set control -- you choose the window before you send, which is the one thing every other payment rail takes away from you the instant you hit "send."

That's the whole idea. It lets you reclaim a send that nobody claimed before expiry. It cannot stop a scam if the scammer gets the claim code, and once claimed, a GhostPay is final. Every GhostPay is logged on your account, start to finish.