I'd like to clear up a misunderstanding about how the BCH Tipping Bot works.

At no point do users connect their wallet to Telegram.

The withdrawal process is simple:

✅ You request a withdrawal by sending "/withdraw" to the bot.
✅ The bot generates a unique voucher code and a claim link.
✅ You open the Withdrawal Portal in your web browser.
✅ Only on that website do you connect your Cashonize or Paytaca wallet to receive your CashTokens.

Your wallet is never connected to Telegram.

The bot never asks for your seed phrase, recovery phrase, or private keys. Those always remain inside your wallet.

The only information the bot may ask for is your npub, which is your public Nostr identity. Think of it like a public username or public wallet address. An npub cannot be used to access your account or steal your funds. It is only used to verify your participation in Nostr-based tasks and rewards. Nothing more.

Connecting a wallet to a website is a common way to authorize a specific transaction. In this case, that transaction simply sends the CashTokens associated with your withdrawal voucher to your own wallet. It is not requesting your private keys or permission to transfer the rest of your assets.

I appreciate people encouraging caution around wallet security. Everyone should verify what they're interacting with before connecting a wallet. At the same time, it's important that the system is described accurately so the community can make informed decisions.