One public rule
Private contact is never proof. Legitimate offers verify on the artist’s official website.
ARTIST-TO-FAN AUTHORIZATION PROTOTYPE
A private message can start a conversation. The official domain establishes trust.
FanPassRail gives artists a clear way to authorize private contact, show the exact terms of an offer, and protect fans from impersonators—without asking fans to become scam detectives.
Demonstration only · No real payments · No endorsement by any artist
THE SIMPLE RULE
Do not trust the message.
Verify the authorization.
- Official domain
- Exact offer terms
- Time-limited authorization
- Payment only on the official site
WHY DIGITAL ARCH
Fans should never have to guess who is real.
Follower counts, profile photos, voices and persuasive messages can all be copied. FanPassRail changes the question from “Do I believe this person?” to “Does the artist’s official system authorize what this person is telling me?”
The artist keeps control of access, duration, price and permissions. The fan receives one place to verify everything.
THE COMPLETE DEMO ROUTE
One protected path, from first contact to verified receipt.
- 01Team invitation
An authorized team member creates a unique fan URL that expires after 24 hours.
- 02Fan challenge
The fan independently opens the official domain and generates a one-time challenge.
- 03Exact offer
The team binds an offer to that challenge and creates a cryptographically random authorization code.
- 04Official verification
The fan returns to the official domain, enters the code and sees the complete terms.
- 05Safe checkout
Any authorized payment happens only on the official domain. This prototype simulates it.
- 06Receipt and audit
The fan receives a receipt, while the team retains an auditable event history.
THE 12-POINT STRUCTURE
Security principles behind FanPassRail.
Protected team portal
Production access requires login, MFA or passkeys, and role-based permissions.
Defined offers
Purpose, recipient, price, benefits, duration, expiry and authorized contact are explicit.
Random authorization
Codes are cryptographically random, time-limited, revocable and single-use.
Fan-bound challenge
The fan generates a one-time challenge before the team creates the offer.
No DM payments
The private account can send an authorization—not a payment address or surprise fee.
Independent arrival
The fan types the official address or uses a verified public profile to reach the portal.
Complete verification
The site displays the exact authorized terms, not merely a green “valid” message.
Official-site checkout
If payment is required, the published price is the full authorized price.
Verified communication
Activated fans can later enter an official space without exposing private contact details.
Artist-controlled access
The artist controls volume, duration, renewal, permissions and termination.
Audit trail
Creation, terms, verification, payment status, activation, expiry and revocation are recorded.
TRY THE PROTOTYPE