Game Top-Up Safety Guide: How to Protect Your Account and Money

The game top-up market is large, growing, and unfortunately attracts bad actors alongside legitimate businesses. Gamers lose money to scam platforms, have accounts compromised through credential theft, and receive currency obtained through policy-violating means that puts their accounts at risk.

The good news: the risks are largely avoidable. Most players who get into trouble made one of a small number of identifiable mistakes. This guide covers all of them.

The Single Most Important Rule

Never share your game account password with any top-up platform. Ever.

This rule protects you from the most common and most damaging category of top-up risk. Legitimate top-up platforms process currency delivery through official API systems using only your public Player ID. They have no need for your account password, and they never ask for it.

If a platform asks for your:

• Game account email address
• Game account password
• Login credentials of any kind

Close the tab immediately. You are looking at either a phishing attempt designed to steal your account or a platform using illegitimate account-based delivery methods that put your account at risk.

This rule applies to every game without exception:

• PUBG Mobile → Only Player ID + Server required
• Mobile Legends → Only User ID + Zone ID required
• Free Fire → Only Player ID required
• Genshin Impact → Only UID + Server required
• Honkai: Star Rail → Only UID + Server required
• Valorant → Only Riot ID required

No password. No login. No exceptions.

The Complete 5-Point Safety Check

Before using any top-up platform for the first time, run through this checklist:

Check 1: HTTPS Verification

Look at the browser address bar. The URL should begin with "https://" and show a padlock icon. This confirms the connection between your device and the site is encrypted.

If the URL begins with "http://" (no S) or shows a warning icon, leave immediately. Never enter payment details on an unencrypted site under any circumstances.

Check 2: Domain Age

Established platforms have been operating for years. New domains — particularly those registered in the past six months — are a significant warning sign in the top-up market.

Check domain age using a free tool like Whois.com. Enter the domain name and look for the "Registered On" date. Any platform registered within the past six months warrants significant additional scrutiny.

Why this matters: scam platforms frequently operate under new domains, collect payments for a period, then disappear. An established domain indicates a platform with a real, ongoing business.

Check 3: Trustpilot Verification

Search for the platform name on Trustpilot (trustpilot.com). What you're looking for:

• Review count: Established platforms have hundreds to thousands of reviews. Fewer than 50 reviews for a platform claiming to serve many customers is suspicious.
• Overall rating: Look for 4.0 stars or above. Below 3.5 is a concern.
• Recent reviews: Read the most recent 10–20 reviews, not just the aggregate score. A high aggregate score built over years combined with a wave of recent negative reviews may indicate a change in platform quality.
• Response pattern: Good platforms respond professionally to negative reviews. Platforms that respond defensively or don't respond at all are less accountable.
• Review content: Genuine reviews mention specific games, mention delivery times, and sound like real customers. Suspiciously uniform five-star reviews with vague praise are a warning sign.

Check 4: Contact Information

Legitimate businesses display contact information. At minimum, look for:

• A support email address
• Ideally a live chat option or support ticket system

If a top-up platform has no visible contact information whatsoever — no email, no chat, no contact page — treat this as a serious red flag. Businesses that can't be reached have no accountability for problems.

Check 5: Price Reasonableness

Compare the platform's prices against the general market. If prices are dramatically below what every other established platform charges — by 40% or more — the pricing makes no legitimate economic sense.

Legitimate savings through reputable platforms are typically in the 10–25% range compared to in-game purchase prices. Savings of 50%+ with no clear explanation indicate either currency obtained through policy-violating means or an outright scam.

Red Flags Reference List

Avoid any platform that displays these warning signs:

Account credential requests:

• Asks for your game account password
• Asks for your game account email
• Requires you to log in with your game account on their platform

Suspicious pricing:

• Prices 40%+ below every established competitor
• No clear explanation for dramatically low prices
• Prices that seem impossible given market rates

Missing trust signals:

• No HTTPS encryption
• Domain registered in the past 6 months
• Fewer than 50 Trustpilot reviews
• Rating below 3.5 on Trustpilot
• No visible contact information

Suspicious acquisition channels:

• Found through WhatsApp or social media DMs (not search)
• Promoted by unknown individuals offering to buy currency "on your behalf"
• Requires you to add a friend in-game for delivery
• Claims to offer "hacked" or "modded" currency

What Happens If Something Goes Wrong

Despite precautions, issues occasionally occur. Here is what to do:

If You Shared Your Password Accidentally

Act immediately:

1. Change your game account password right now
2. Change the password on any email account linked to your game account
3. Enable two-factor authentication on your game account if not already active
4. Check your account for unauthorised purchases, name changes, or item removals
5. Contact the game's official customer support immediately and explain the situation
6. Document everything: screenshots of your account state, transaction history, and communications

Speed matters. The faster you change credentials and contact support, the better your chances of recovering any compromised items or account standing.

If You Paid But Received Nothing

1. Contact the platform's customer support with your order details and proof of payment
2. If you paid via PayPal, open a buyer dispute through PayPal immediately
3. If you paid via credit card, contact your bank or card issuer about a chargeback
4. Report the platform to your country's consumer protection authority
5. Leave an accurate review on Trustpilot warning other customers

If You Suspect You Received Illegitimate Currency

If you purchased from an unknown platform offering unusually low prices and you're concerned the currency may have been obtained through policy violations:

1. Contact the game's customer support proactively and explain the situation
2. In some cases, voluntary disclosure before a developer investigation concludes works in a player's favour
3. Avoid using the suspect currency if possible until the situation is clarified

How MangoRecharge Reduces Your Risk

MangoRecharge applies a five-point vetting process before any seller appears in our comparison results:

• Domain age 1 year or more
• Trustpilot rating 4.0 or above
• HTTPS enabled on the platform
• PayPal accepted as a payment method
• Visible contact information

This vetting removes the vast majority of risky platforms from consideration before you see them. Using MangoRecharge as your starting point for any top-up purchase means you're already operating within a vetted ecosystem.

This doesn't make every listed seller perfect — no vetting process eliminates all risk — but it filters out the clear bad actors and reduces your exposure to the most common risks significantly.

Summary Checklist for Every Purchase

Before any top-up:

• [ ] Platform uses HTTPS ✓
• [ ] Domain established 1+ year ✓
• [ ] Trustpilot rating 4.0+ with genuine reviews ✓
• [ ] Contact information visible ✓
• [ ] Price is in a reasonable range (10–25% below in-game, not 50%+) ✓
• [ ] Platform only asks for Player ID, not password ✓

After purchase:

• [ ] Received the correct amount of currency ✓
• [ ] No suspicious account activity ✓

This checklist takes two minutes and protects you from the most common top-up risks. Use it every time you buy from a platform you haven't used before.