An instant receipt for every payment, even offline.

In many legacy field-collection setups, a borrower who pays in a no-signal area has no receipt for days — sometimes none at all. That is a real dispute and audit risk: the borrower has nothing proving they paid, and the institution has no borrower-side record to reconcile against.

The Ustawi app closes that gap. A receipt is generated on the agent's device at the moment of payment, whether or not there is a connection.

The receipt is marked Provisional when issued offline, then Finalized once it syncs and is confirmed against the server ledger posting. Crucially, the receipt and the underlying collection share the same idempotency key, so there is never a scenario where one exists without the other.

If a rare sync exception affects finalization, the receipt stays visible as 'Provisional — under review' rather than silently disappearing. The borrower's proof of payment never vanishes.

A receipt that doesn't correspond to a ledger entry — or a ledger entry with no receipt — is exactly the kind of mismatch that erodes trust and complicates audits. Binding the two to one shared key means they move as a single unit: both provisional together, both finalized together.