diff --git a/messages.js b/messages.js
index b0f42a2..b95d8d9 100644
--- a/messages.js
+++ b/messages.js
@@ -80,7 +80,10 @@ function verifyChallenge(address, signature) {
   if (!ch || ch.exp < Date.now()) return { error: 'Challenge expired - tap sign-in again.' };
   let rec;
   try { rec = recoverAddress(ch.message, signature); } catch (e) { return { error: 'Invalid signature: ' + e.message }; }
-  if (rec !== a) return { error: 'Signature does not match this wallet.' };
+  if (rec !== a) return { error: 'Your wallet signed with a different account than the page is using. '
+    + 'The page asked for ' + a.slice(0, 6) + '…' + a.slice(-4) + ' but the signature came from '
+    + rec.slice(0, 6) + '…' + rec.slice(-4) + '. Switch your wallet to the account that owns this '
+    + 'position, reload the page, then tap sign-in again.', signer: rec, expected: a };
   challenges.delete(a);
   const id = chain.memberIdByAccount(a);
   if (!id) return { error: 'No RM Circle position is registered to this wallet.' };
diff --git a/public/wallet-check.html b/public/wallet-check.html
new file mode 100644
index 0000000..ad7a672
--- /dev/null
+++ b/public/wallet-check.html
@@ -0,0 +1,29 @@
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Wallet check</title><link rel="icon" type="image/png" href="/favicon.png"><link rel="stylesheet" href="/styles.css">
+<style>
+  .wc{max-width:640px;margin:0 auto;padding:22px 18px 60px}
+  .wc h1{font-size:24px;margin:6px 0 6px}
+  .wc .lede{color:var(--muted);font-size:14.5px;line-height:1.55;margin-bottom:16px}
+  .row{border:1px solid var(--line);border-radius:10px;padding:11px 13px;margin-bottom:9px}
+  .row .k{font-size:11px;font-weight:800;letter-spacing:1.2px;text-transform:uppercase;color:var(--muted);margin-bottom:4px}
+  .row .v{font-size:15px;font-weight:700;word-break:break-all}
+  .yes{color:var(--teal)} .no{color:#f0a05a}
+  pre{background:var(--bg,#0b1d2e);border:1px solid var(--line);border-radius:9px;padding:10px;
+    font-size:11.5px;line-height:1.5;overflow-x:auto;white-space:pre-wrap;word-break:break-all;margin-top:10px}
+  .btn-row{margin:14px 0 4px}
+</style></head>
+<body>
+<header class="wrap nav"><a class="brand" href="/"><img class="brand-mark" src="/logo.jpg" alt="RM Circle" width="38" height="38"><span><span id="brandName">RM Circle</span><small>Wallet check</small></span></a></header>
+<main class="wc">
+  <h1>Wallet check</h1>
+  <p class="lede">This page doesn't sign anything or ask for anything. It just reports what your browser can see, so we can work out why sign-in isn't working. Open it the same way you were opening the dashboard, then screenshot this whole page.</p>
+
+  <div id="rows"></div>
+
+  <div class="btn-row"><button id="ask" class="btn btn-primary">Ask the wallet for its address</button></div>
+  <div id="askOut"></div>
+
+  <pre id="dump">collecting…</pre>
+</main>
+<script src="/rmc-wallet.js"></script>
+<script src="/wallet-check.js"></script>
+</body></html>
diff --git a/public/wallet-check.js b/public/wallet-check.js
new file mode 100644
index 0000000..b07ff15
--- /dev/null
+++ b/public/wallet-check.js
@@ -0,0 +1,80 @@
+// Diagnostic page for wallet sign-in failures. Reports what the page can
+// actually see, from the member's own device, instead of us guessing.
+//
+// It captures the one thing we cannot infer from the outside: whether a CSP
+// violation is firing when the wallet tries to inject its provider. Our
+// script-src is 'self' with no 'unsafe-inline', and wallet browsers that inject
+// via a <script> tag would be blocked silently — no error the member could see,
+// and identical symptoms to "no wallet installed".
+(function () {
+  'use strict';
+  var violations = [];
+  window.addEventListener('securitypolicyviolation', function (e) {
+    violations.push(e.violatedDirective + ' blocked ' + (e.blockedURI || '(inline)') +
+      (e.sourceFile ? ' from ' + e.sourceFile : ''));
+    render();
+  });
+
+  function row(k, v, good) {
+    return '<div class="row"><div class="k">' + k + '</div><div class="v ' +
+      (good === true ? 'yes' : good === false ? 'no' : '') + '">' + v + '</div></div>';
+  }
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  var announced = [];
+  window.addEventListener('eip6963:announceProvider', function (e) {
+    try { announced.push(e.detail.info.name + ' (' + e.detail.info.rdns + ')'); } catch (x) {}
+    render();
+  });
+  try { window.dispatchEvent(new Event('eip6963:requestProvider')); } catch (x) {}
+
+  function render() {
+    var eth = window.ethereum;
+    var flags = [];
+    if (eth) {
+      ['isMetaMask', 'isTrust', 'isTrustWallet', 'isCoinbaseWallet', 'isSafePal', 'isPhantom', 'isRabby']
+        .forEach(function (f) { if (eth[f]) flags.push(f); });
+      if (eth.providers && eth.providers.length) flags.push('providers[' + eth.providers.length + ']');
+    }
+    var html = '';
+    html += row('window.ethereum present', eth ? 'YES' : 'NO', !!eth);
+    html += row('wallet flags', flags.length ? esc(flags.join(', ')) : '(none)');
+    html += row('EIP-6963 wallets announced', announced.length ? esc(announced.join(' · ')) : '(none)');
+    html += row('CSP violations seen', violations.length ? esc(violations.join(' | ')) : 'none', violations.length ? false : true);
+    html += row('page address', esc(location.href));
+    document.getElementById('rows').innerHTML = html;
+
+    document.getElementById('dump').textContent =
+      'UA: ' + navigator.userAgent + '\n' +
+      'ethereum: ' + (eth ? 'yes' : 'no') + '\n' +
+      'flags: ' + (flags.join(',') || '-') + '\n' +
+      'eip6963: ' + (announced.join(',') || '-') + '\n' +
+      'csp: ' + (violations.join(' | ') || 'none') + '\n' +
+      'href: ' + location.href;
+  }
+
+  document.getElementById('ask').addEventListener('click', async function () {
+    var out = document.getElementById('askOut');
+    out.innerHTML = '';
+    try {
+      var eth = await window.RMCWallet.pick();
+      if (!eth) { out.innerHTML = row('result', 'No provider found — the page cannot see a wallet', false); return; }
+      var accs = await eth.request({ method: 'eth_requestAccounts' });
+      var chain = await eth.request({ method: 'eth_chainId' });
+      out.innerHTML = row('accounts returned', esc(JSON.stringify(accs))) +
+        row('first account', esc(accs && accs[0] || '(none)')) +
+        row('selectedAddress', esc(eth.selectedAddress || '(not exposed)')) +
+        row('chain id', esc(chain) + (chain === '0x89' ? ' — Polygon ✓' : ' — NOT Polygon'), chain === '0x89');
+    } catch (e) {
+      out.innerHTML = row('error', esc(e && (e.message || e.code || String(e))), false);
+    }
+    render();
+  });
+
+  setTimeout(render, 400);
+  render();
+})();
diff --git a/server.js b/server.js
index 247c6c4..45aea67 100644
--- a/server.js
+++ b/server.js
@@ -1427,7 +1427,7 @@ const server=http.createServer(async(req,res)=>{
       if((mj=pathname.match(/^\/join\/(\d{1,15})$/)))return serveMemberPage(req,res,path.join(PUBLIC_DIR,'join.html'),'join',mj[1]);
     }
     let file;
-    if(pathname==='/')file=path.join(PUBLIC_DIR,'index.html');else if(pathname==='/app'||pathname==='/app/')file=path.join(PUBLIC_DIR,'app.html');else if(pathname==='/start'||pathname==='/start/')file=path.join(PUBLIC_DIR,'start.html');else if(pathname==='/training'||pathname==='/training/')file=path.join(PUBLIC_DIR,'training.html');else if(pathname==='/admin'||pathname==='/admin/')file=path.join(PUBLIC_DIR,'admin.html');else if(pathname==='/my'||pathname==='/my/'||/^\/my\/\d{1,15}$/.test(pathname))file=path.join(PUBLIC_DIR,'my.html');else if(pathname==='/contract'||pathname==='/contract/')file=path.join(PUBLIC_DIR,'contract.html');else if(pathname==='/disclaimer'||pathname==='/disclaimer/')file=path.join(PUBLIC_DIR,'disclaimer.html');else if(pathname==='/privacy'||pathname==='/privacy/')file=path.join(PUBLIC_DIR,'privacy.html');else if(pathname==='/refunds'||pathname==='/refunds/')file=path.join(PUBLIC_DIR,'refunds.html');else if(pathname==='/how-pay-works'||pathname==='/how-pay-works/')file=path.join(PUBLIC_DIR,'how-pay-works.html');else if(pathname==='/tools'||pathname==='/tools/')file=path.join(PUBLIC_DIR,'tools.html');else if(pathname==='/fast-start'||pathname==='/fast-start/')file=path.join(PUBLIC_DIR,'fast-start.html');else if(pathname==='/flyers'||pathname==='/flyers/')file=path.join(PUBLIC_DIR,'flyers.html');else if(pathname==='/weekly-rhythm'||pathname==='/weekly-rhythm/')file=path.join(PUBLIC_DIR,'weekly-rhythm.html');else if(pathname==='/generation-pay'||pathname==='/generation-pay/')file=path.join(PUBLIC_DIR,'generation-pay.html');else if(pathname==='/suite'||pathname==='/suite/')file=path.join(PUBLIC_DIR,'suite.html');else if(pathname==='/suite/copy'||pathname==='/suite/copy/')file=path.join(PUBLIC_DIR,'suite-copy.html');else if(pathname==='/suite/page'||pathname==='/suite/page/')file=path.join(PUBLIC_DIR,'suite-page.html');else if(pathname==='/suite/email'||pathname==='/suite/email/')file=path.join(PUBLIC_DIR,'suite-email.html');else if(pathname==='/suite/video'||pathname==='/suite/video/')file=path.join(PUBLIC_DIR,'suite-video.html');else if(pathname==='/suite/traffic'||pathname==='/suite/traffic/')file=path.join(PUBLIC_DIR,'suite-traffic.html');else if(pathname==='/suite/voice'||pathname==='/suite/voice/')file=path.join(PUBLIC_DIR,'suite-voice.html');else if(pathname==='/suite/split'||pathname==='/suite/split/')file=path.join(PUBLIC_DIR,'suite-split.html');else if(pathname==='/suite/funnel'||pathname==='/suite/funnel/')file=path.join(PUBLIC_DIR,'suite-funnel.html');else if(pathname==='/suite/leader'||pathname==='/suite/leader/')file=path.join(PUBLIC_DIR,'suite-leader.html');else if(pathname==='/suite/founder'||pathname==='/suite/founder/')file=path.join(PUBLIC_DIR,'suite-founder.html');else if(pathname==='/suite/grants'||pathname==='/suite/grants/')file=path.join(PUBLIC_DIR,'suite-grants.html');else if(pathname==='/suite/intel'||pathname==='/suite/intel/')file=path.join(PUBLIC_DIR,'suite-intel.html');else if(pathname==='/direct-join'||pathname==='/direct-join/'){if(!getSession(req)){res.writeHead(302,{Location:'/admin'});return res.end();}file=path.join(ROOT,'private','direct-join.html');}else if(pathname==='/join-now'||pathname==='/join-now/'){if(!getConfig().dappFallbackPublic){res.writeHead(302,{Location:'/start'});return res.end();}file=path.join(ROOT,'private','join-now.html');}else if(/^\/join\/\d{1,15}$/.test(pathname))file=path.join(PUBLIC_DIR,'join.html');else if(pathname==='/join'||pathname==='/join/'){res.writeHead(302,{Location:'/join-now'});return res.end();}else{
+    if(pathname==='/')file=path.join(PUBLIC_DIR,'index.html');else if(pathname==='/app'||pathname==='/app/')file=path.join(PUBLIC_DIR,'app.html');else if(pathname==='/start'||pathname==='/start/')file=path.join(PUBLIC_DIR,'start.html');else if(pathname==='/training'||pathname==='/training/')file=path.join(PUBLIC_DIR,'training.html');else if(pathname==='/admin'||pathname==='/admin/')file=path.join(PUBLIC_DIR,'admin.html');else if(pathname==='/my'||pathname==='/my/'||/^\/my\/\d{1,15}$/.test(pathname))file=path.join(PUBLIC_DIR,'my.html');else if(pathname==='/contract'||pathname==='/contract/')file=path.join(PUBLIC_DIR,'contract.html');else if(pathname==='/disclaimer'||pathname==='/disclaimer/')file=path.join(PUBLIC_DIR,'disclaimer.html');else if(pathname==='/privacy'||pathname==='/privacy/')file=path.join(PUBLIC_DIR,'privacy.html');else if(pathname==='/refunds'||pathname==='/refunds/')file=path.join(PUBLIC_DIR,'refunds.html');else if(pathname==='/how-pay-works'||pathname==='/how-pay-works/')file=path.join(PUBLIC_DIR,'how-pay-works.html');else if(pathname==='/tools'||pathname==='/tools/')file=path.join(PUBLIC_DIR,'tools.html');else if(pathname==='/fast-start'||pathname==='/fast-start/')file=path.join(PUBLIC_DIR,'fast-start.html');else if(pathname==='/flyers'||pathname==='/flyers/')file=path.join(PUBLIC_DIR,'flyers.html');else if(pathname==='/weekly-rhythm'||pathname==='/weekly-rhythm/')file=path.join(PUBLIC_DIR,'weekly-rhythm.html');else if(pathname==='/generation-pay'||pathname==='/generation-pay/')file=path.join(PUBLIC_DIR,'generation-pay.html');else if(pathname==='/suite'||pathname==='/suite/')file=path.join(PUBLIC_DIR,'suite.html');else if(pathname==='/suite/copy'||pathname==='/suite/copy/')file=path.join(PUBLIC_DIR,'suite-copy.html');else if(pathname==='/suite/page'||pathname==='/suite/page/')file=path.join(PUBLIC_DIR,'suite-page.html');else if(pathname==='/suite/email'||pathname==='/suite/email/')file=path.join(PUBLIC_DIR,'suite-email.html');else if(pathname==='/suite/video'||pathname==='/suite/video/')file=path.join(PUBLIC_DIR,'suite-video.html');else if(pathname==='/suite/traffic'||pathname==='/suite/traffic/')file=path.join(PUBLIC_DIR,'suite-traffic.html');else if(pathname==='/suite/voice'||pathname==='/suite/voice/')file=path.join(PUBLIC_DIR,'suite-voice.html');else if(pathname==='/suite/split'||pathname==='/suite/split/')file=path.join(PUBLIC_DIR,'suite-split.html');else if(pathname==='/suite/funnel'||pathname==='/suite/funnel/')file=path.join(PUBLIC_DIR,'suite-funnel.html');else if(pathname==='/suite/leader'||pathname==='/suite/leader/')file=path.join(PUBLIC_DIR,'suite-leader.html');else if(pathname==='/suite/founder'||pathname==='/suite/founder/')file=path.join(PUBLIC_DIR,'suite-founder.html');else if(pathname==='/wallet-check'||pathname==='/wallet-check/')file=path.join(PUBLIC_DIR,'wallet-check.html');else if(pathname==='/suite/grants'||pathname==='/suite/grants/')file=path.join(PUBLIC_DIR,'suite-grants.html');else if(pathname==='/suite/intel'||pathname==='/suite/intel/')file=path.join(PUBLIC_DIR,'suite-intel.html');else if(pathname==='/direct-join'||pathname==='/direct-join/'){if(!getSession(req)){res.writeHead(302,{Location:'/admin'});return res.end();}file=path.join(ROOT,'private','direct-join.html');}else if(pathname==='/join-now'||pathname==='/join-now/'){if(!getConfig().dappFallbackPublic){res.writeHead(302,{Location:'/start'});return res.end();}file=path.join(ROOT,'private','join-now.html');}else if(/^\/join\/\d{1,15}$/.test(pathname))file=path.join(PUBLIC_DIR,'join.html');else if(pathname==='/join'||pathname==='/join/'){res.writeHead(302,{Location:'/join-now'});return res.end();}else{
       const safe=path.normalize(pathname).replace(/^([.][.][/\\])+/, '').replace(/^[/\\]+/,'');file=path.join(PUBLIC_DIR,safe);if(!file.startsWith(PUBLIC_DIR))file='';
     }
     if(file&&staticFile(req,res,file))return;return staticFile(req,res,path.join(PUBLIC_DIR,'404.html'),404);
