Is paas.build legit? Who is behind it, where the money sits, and how to check

People search this, and they should. A domain registered this year is asking you to route revenue through it. This page answers the question with things you can verify yourself, not with adjectives.

The short version

paas.build is a brand, not a company. The company is UNIPaaS Financial Services Ltd, a UK payment institution authorised by the Financial Conduct Authority under reference number 929994. When you take a payment through paas.build, the money is processed by UniPaaS, held in safeguarded, segregated client accounts as the FCA requires, and paid out to you through J.P. Morgan. The 3.9% rate, the instant account and the AI-agent integration are a new front door. The rails behind the door have been running since 2019 for software platforms and the thousands of small businesses they serve.

Four ways to check, none of which involve trusting us

1. The FCA register. Go to register.fca.org.uk and search for "UNIPaaS" or the reference 929994. You should see an Authorised Payment Institution with permission to provide payment services. If it ever says anything else, do not use us.
2. Companies House. Search "UNIPaaS Financial Services" at find-and-update.company-information.service.gov.uk. You will find the registered UK company, its filing history and its officers.
3. The checkout domain. Make a test payment. The hosted checkout page your customers see is served from unipaas.com, and the card form is UniPaaS's PCI DSS v4 environment. A brand that was faking a licence could not borrow someone else's checkout.
4. The people. I am Oded Kovach, co-founder and CTO of UniPaaS, formerly VP R&D at SafeCharge, which was acquired by Nuvei. My LinkedIn and email are on the contact page, and I answer.

Where your money is, step by step

Safeguarding is the part worth understanding. Under the UK Payment Services Regulations, an authorised payment institution must keep customer funds separate from its own, so that if the institution failed, those funds are returned to customers rather than to creditors. That is a legal obligation, audited, not a promise on a website.

What we never ask for

• Your password. There is none: you sign in with a one-time code emailed to you.
• Your card number or your customers' card numbers, by email, chat or form. Cards are entered only on the hosted checkout.
• A fee to open an account, a deposit, or "verification" payments. Opening an account is free; you pay per transaction.
• Remote access to your computer, your bank login, or a code sent to your phone by someone else.

If anyone contacts you claiming to be paas.build and asks for any of these, forward the message to security@paas.build.

Why it looks new, and one thing that went wrong

The domain is young and the site is lean, which trips some automatic trust signals. In July 2026, shortly after launch, Google's Safe Browsing briefly flagged our portal sign-in page as potentially deceptive, which happens to many young domains with a login form. We submitted the page for review with our regulatory details and it was cleared within about thirty hours. We mention it because you may find traces of it, and because the honest explanation is better than hoping you do not.

What we are not

We are not a merchant of record for most of our builders. For UK and most European sellers, you are the merchant: the payment is in your name, the customer is yours, and we are the regulated institution processing and settling it. That is a different model from Paddle or Lemon Squeezy, with different tax and liability consequences, which we explain in MoR vs PayFac. It is also why we can give an individual a live account instantly: the licence and the risk controls are ours, and the account starts with a cap that rises as verification completes. The full detail of that is on the trust and security page.