Compliance and Acceptable Use

Age

You must be 18 or older to open an account or buy on Topupa Sandbox. Some brands set a higher age for using their product; their rules apply when you redeem.

Identity verification

We may ask you to confirm your identity before an order is fulfilled or a wallet is funded: for example, when an order is unusually large, a card payment is flagged by the payment provider, several accounts share a device or payment method, or a law requires it. Verification may involve a government ID, proof of address or confirming that you control the payment card. Orders stay on hold (not charged) until verification is complete; if it is not completed within a reasonable time the hold is released and the order cancelled.

Sanctions and region restrictions

• We do not sell to persons or in territories subject to sanctions that apply to us, and we screen accounts and payments against applicable sanctions lists.
• Each gift card is valid only in the region shown on the brand page. Buying a code for a region where you cannot legally use it is your responsibility; a region mismatch after reveal is not a refund reason.
• We may limit which brands or values are available in your country, based on brand rules and local law.

Fraud prevention

To protect customers and brands we use automated and manual checks, including velocity limits per account, device, card and IP, value caps, duplicate-code detection and manual review of unusual orders. We record the time, IP address and browser of every code reveal. We also share fraud signals with our payment provider and, where required, with law enforcement.

Reporting suspected fraud

Contact us at once if you see an order or wallet movement you did not make, if someone contacts you claiming to be Topupa Sandbox and asks for a code, or if you think your account has been accessed by someone else. Logged-in customers should open a "Suspected fraud" ticket; anyone can use the contact form or email support@topupa.com. Suspected code exposure or a duplicate charge is escalated to our on-call team immediately.

We never ask for a full code or PIN by email, chat, phone or social media. Anyone who does is not us.

Resale and partner programme

Codes bought on the storefront are for personal use or as gifts. Commercial resale, bulk buying for resale, listing codes on marketplaces or using them as payment in another business is not permitted and will lead to account closure. Businesses that want to distribute codes can apply to our partner programme, which provides an API, agreed pricing and a signed reseller agreement.

Acceptable use

• One person, one account. Do not create accounts for others or share login details.
• Use only payment methods you are entitled to use.
• Do not use automation, scripts or VPN/proxy services to bypass limits, region rules or fraud checks.
• Do not attempt to access other customers' data, probe our systems or interfere with the service.
• Do not use the service for any unlawful purpose, including money laundering, scams or buying codes under duress for a third party.

Enforcement

We may hold, cancel or refuse orders, limit values, require verification, or suspend or close accounts that breach these rules. Where we cancel an order the hold is released. Where fraud is confirmed we may keep evidence for the retention periods in our Privacy Policy and share it with the payment provider, the issuer or the authorities.