Yes, WATS Wallet is a legitimate, non-custodial wallet from a named company, and it is the wallet we recommend if you want to hold your own keys across EVM networks, Solana and TON with an optional NFC tap factor. Alltoscan LLC (founded 2019) makes it. You create and keep the recovery phrase, and WATS never holds a key, so it cannot move, freeze or recover your funds. It is the wrong fit if you need native Bitcoin, which it does not support, or if you want keys stored on dedicated hardware: the NFC card holds no keys. How safe you are depends heavily on your own habits, starting with downloading only from the official channels listed below.
Disclosure: WATS Wallet publishes this page about its own product. Every WATS claim below is a product fact you can check on the official channels listed here.
Who makes WATS Wallet, and is the company real?
WATS Wallet is made by Alltoscan LLC, a company founded in 2019, and you can reach it at info@watswallet.com. A named company is a useful legitimacy signal, because a wallet with nobody to contact is much harder to judge. It is not proof of safety on its own. Treat it as a starting point you can verify, not a substitute for your own checks.
The brand has exactly three products: a Chrome (Chromium) browser extension, an iOS and Android mobile app, and the optional WATS NFC Metal Card. There is no web app and no desktop app; on a computer, the Chrome extension is the desktop wallet. You can read more on the about page, and the source code of the Chrome extension is public on GitHub under the MIT license.
Who holds the keys in WATS Wallet?
You do. WATS Wallet is fully non-custodial: when you set up the extension or the mobile app, you create your own keys and your own recovery phrase on your device. WATS never holds a key. There is no co-signer, no MPC and no recovery back door.
That has two sides, and both matter. The upside is that WATS itself cannot lose, freeze or seize your funds, because it never had access to them. Other parties can still affect specific assets, for example a token issuer that can freeze its own token, or a dApp you approve, so the habits below still matter. The downside is that nobody can rescue you either: WATS cannot reset or recover a lost recovery phrase, and a phrase that leaks gives its holder full control. WATS Wallet is a recovery-phrase wallet, not a seedless one. For the concept in depth, see what a non-custodial wallet is.
Does the NFC Metal Card hold my keys?
No. The WATS NFC Metal Card is optional, and it is easy to misread, so here is the plain version. It is a tap-to-authenticate factor: you tap it to your phone to authenticate access or confirm a signature in the WATS mobile app. It holds no private keys. It is not cold storage and not a hardware wallet. Hardware wallets such as Ledger, Trezor or Tangem keep keys inside the device, which is a different job from this one.
Each card has a unique card ID and pairs to exactly one device, so it works only with that paired phone. A card picked up by someone else is not a spare key for their phone. The chip is an NTAG 216, an NFC Forum Type 2 tag that follows ISO/IEC 14443-A at 13.56 MHz; NXP's product page describes it that way and lists password protection rather than AES. The card comes in plastic or steel, both in CR-80 card size, and the steel card's metal body is specified as IP68 and MIL-STD-810. Card sets are sold at store.watswallet.com from $54.90 (plastic) and $149.90 (steel).
So the card can add a physical step in front of the wallet. It does not change the custody model, and it does not back up your recovery phrase. The deeper write-up is in NFC metal card security.
How does WATS Wallet charge fees?
On EVM networks (Ethereum, BNB Smart Chain, Arbitrum One, Optimism, Base, Polygon, Gnosis, Celo, Mantle and Cronos), every action in WATS Wallet is charged in ATS (Alltoscan Token) instead of the native gas token. It works through an ERC-4337 paymaster, an account-abstraction component that can cover the network gas on a user's behalf and, in designs like this one, take the fee from the user in a token instead of the chain's native coin. The fee is debited from one ATS balance held on BSC (BNB Chain), whichever EVM network the transaction runs on. You do not bridge ATS and you keep no per-chain ATS balance. The extension and the mobile app work the same way.
This is a convenience, not a discount: the ATS fee tracks the live network cost. Solana is fully supported and pays its own fee in SOL, while TON is fully supported and its fees are paid in ATS too; GRAM (formerly Toncoin) is the TON coin and the network is still called TON. Collected ATS is burned, with supply going from 100M toward a 30M floor, driven by usage. The ATS fee page explains the model in detail.
How do I verify a genuine WATS Wallet download?
Fake wallet apps and lookalike extensions are a known attack vector, so check the source before you install. These are the official identifiers:
- Chrome extension: the Chrome Web Store listing with ID hcfdepjikbhjocfdopeabjmonpnijoei. The ID is the last part of the listing's URL.
- iPhone: the App Store listing with ID 6743999237.
- Android: the Google Play listing with package name com.wats.wallet.
- Website and store: watswallet.com for the product and store.watswallet.com for the NFC Metal Card.
Open the app or extension from the links on watswallet.com rather than from a search ad, a message or a social media reply, then compare the ID or package name against the list above. If it does not match, do not install it.
What can the WATS Chrome extension access?
When you install the extension, Chrome warns that it can read and change all your data on all websites. Wallet extensions that connect to dApps show the same warning, because a website can only find a wallet that adds its provider to the page. WATS Wallet adds an EIP-1193 provider, announced through EIP-6963, for EVM networks and a TON Connect bridge for TON. A site still cannot read your address until you approve its connection request, and every signature and transaction waits for your confirmation. Connected sites are listed under Settings, Dapp permissions, where you can revoke each one. The extension also uses the storage, alarms, tabs and side panel permissions; the Chrome extension page explains each of them, and the manifest is public on GitHub.
What red flags and habits protect me?
WATS will never ask for your recovery phrase. Not in support chat, not in a direct message, not on a website, not for a giveaway or a wallet "validation". Anyone who asks is a scammer, whatever logo they use. The same rule holds for every self-custody wallet.
- Write the recovery phrase down offline and store it where only you can reach it. Never photograph it or paste it into a form.
- Confirm that the asset and the network match before you send; a wrong-network transfer can be impossible to reverse.
- Be skeptical of dApp prompts and token approvals, and revoke approvals you no longer need.
- Keep the device and the wallet software updated and use device biometrics.
The guide to crypto wallet security best practices covers these habits in more detail.
What are the limits of WATS Wallet?
Here are the limits, stated without spin:
- No native Bitcoin. WATS Wallet covers EVM networks, Solana and TON. If Bitcoin is central to your holdings, use a wallet that supports it.
- Self-custody carries the responsibility. A lost recovery phrase cannot be recovered by anyone, WATS included.
- The card is not a vault. It holds no keys, so it is not a replacement for cold storage or a hardware wallet.
- Fees on Solana are paid in SOL. The single-balance ATS model applies to EVM networks, and fees on TON are paid in ATS too.
- No web app and no desktop app. The three products are the Chrome extension, the mobile app and the card.
This page does not cite or deny any third-party security audit, user count, rating, award or incident. Those are things to verify, not to take from a product's own page: look for a published audit report from the auditor itself, check the store listings for current ratings and reviews, and read the public documentation. If a claim like that matters to your decision, ask the team at info@watswallet.com and judge the evidence yourself.
Bottom line: is WATS Wallet safe and legit?
It is a real product from a named company, Alltoscan LLC, founded in 2019, with a clear non-custodial design: your keys and recovery phrase stay with you, and WATS cannot touch your funds. We recommend it if you want self-custody for EVM networks, Solana and TON, with ATS fees from a single BSC balance and an optional NFC card as a physical tap factor. Choose something else if you need native Bitcoin or keys on dedicated hardware.
The practical steps are short: install only from the official identifiers above, write the recovery phrase down offline, never share it with anyone, and check the network before every send.
Frequently asked questions
Is WATS Wallet safe to use?
WATS Wallet is fully non-custodial: you create and hold your own keys and recovery phrase in the Chrome extension and the mobile app, and WATS never holds a key, so it cannot move, freeze or recover your funds. That removes the risk of WATS holding or losing your funds, but also any safety net: a lost or leaked recovery phrase cannot be fixed by anyone. Install only from the official listings, keep the phrase offline, and check the network before every send.
Who is behind WATS Wallet, and is the company legitimate?
WATS Wallet is made by Alltoscan LLC, a company founded in 2019, reachable at info@watswallet.com. A named company, official store listings and public source code are signals you can verify, but they are not a guarantee on their own, so do your own due diligence and check the official channels before installing.
Can WATS recover my funds or my recovery phrase?
No. WATS never holds a key and has no co-signer, no MPC and no recovery back door, so it cannot recover, move or freeze your funds. If the recovery phrase is lost, nobody can restore it. WATS will also never ask you for your recovery phrase: anyone who does is a scammer.
Does the WATS NFC Metal Card store my private keys?
No. The WATS NFC Metal Card holds no private keys and is not cold storage or a hardware wallet. It is an optional tap-to-authenticate factor: you tap it to your phone to authenticate access or confirm a signature in the WATS mobile app. It has a unique card ID and pairs to exactly one device. The chip is an NTAG 216 (NFC Forum Type 2, ISO/IEC 14443-A, 13.56 MHz), in a plastic card or a steel card with an IP68, MIL-STD-810 metal body.
How do I know I am downloading the real WATS Wallet?
Start from watswallet.com and compare the identifiers: the Chrome Web Store ID is hcfdepjikbhjocfdopeabjmonpnijoei, the App Store ID is 6743999237 and the Google Play package is com.wats.wallet. The NFC Metal Card is sold at store.watswallet.com. If a listing does not match, do not install it.
What are the honest limits of WATS Wallet?
There is no native Bitcoin. Self-custody means a lost recovery phrase cannot be recovered by anyone. The NFC card holds no keys and is not a vault. ATS fees come from one BSC balance and apply to EVM networks, fees on TON are paid in ATS too, while Solana pays its own fee in SOL; ATS is not a discount, since the fee tracks the live network cost. There is no web app and no desktop app beyond the Chrome extension.
Why does the WATS Chrome extension need access to all websites?
So that dApps can detect it. The extension adds its wallet provider to each page as it loads (EIP-1193 and EIP-6963 for EVM networks, TON Connect for TON), which is why Chrome warns that it can read and change data on all websites. No site gets your address until you approve its connection request, every signature and transaction needs your confirmation, and you can revoke any connected site in Settings.
Sources
- WATS Wallet - Chrome Web Store — Chrome Web Store · checked
- Wats Wallet App - App Store — Apple App Store · checked
- Wats Wallet - Apps on Google Play — Google Play · checked
- watswallet/wats-wallet-bnb-chain — WATS Wallet (GitHub) · checked
- wats-wallet-bnb-chain/SECURITY.md — WATS Wallet (GitHub) · checked
- NTAG 213/215/216: NFC Forum Type 2 Tag Compliant IC with 144/504/888 Bytes User Memory — NXP Semiconductors · checked
- ERC-4337: Account Abstraction Using Alt Mempool — Ethereum Improvement Proposals · checked

