Are third-party game top-ups safe? The real risks, and how to check a seller

What can go wrong with a third-party top-up?

Four things, from the most common to the rarest:

1. The currency is taken back. Some sellers stock currency bought with stolen cards. When the real card owner disputes the charge, the publisher reverses it, and the account that received the currency loses it or gets restricted.
2. The game's rules forbid the purchase. Several publishers only allow their own store or authorized partners. Buying elsewhere can break their terms even if the payment was clean.
3. Your account is exposed. A seller that asks for your login, password or verification code can take over the account.
4. Nothing arrives. Fake shops and “free diamonds” offers collect payments or personal data and deliver nothing.

A low price is not a risk by itself. A price far below the official store, with no explanation of where the currency comes from, is.

What do publishers say about buying elsewhere?

Their own words, read on 22 October 2026:

• PUBG Mobile “never authorizes any individual or third-party platform to perform intermediary purchases” (official notice, 2021). Its licence terms still accept codes bought “through us or one of our authorized retailers”.
• Garena says Free Fire currency “may also be purchased directly from certain authorized third parties” (terms, clause 7.3).
• HoYoverse lists “use of any unapproved payment methods” as a violation (Cognosphere terms).
• Supercell allows purchases only “from us or our authorized partners” (terms 4.1).
• Riot may suspend an account when it must refund “due to unauthorized use of a payment made from your account” (terms 2.1.2).
• Kuro Games lists “having top-ups performed on your behalf through any third-party platforms without our permission” as a dishonest transaction (Wuthering Waves terms).

Moonton, Activision and Konami pages we read target fraud rather than resellers. The full table, with links, is on the publisher rules page.

How do chargebacks lead to bans?

The chain is simple. A seller buys currency with a card that is not theirs and credits it to your player ID. Weeks later, the card owner reports the charge. The publisher refunds the owner, then recovers the currency from the account that received it.

Publishers describe the consequences themselves. PUBG Mobile's notice promises “heavier punishments” for refund abuse and confiscates currency obtained illegally. Garena may cancel a transaction for non-payment, which “could result in a loss of access”. Activision lists “Acquiring COD Points via fraudulent means” as an infraction. Reports of negative diamond or Primogem balances after a refund come from resellers and news sites, not from publishers, so treat them as unconfirmed.

Paying the seller in crypto does not protect you here. What protects you is a seller whose stock is clean, which in practice means an authorized source.

Is paying for a top-up in crypto a red flag?

Not by itself. At least one 2026 buying guide lists “crypto-only payment” as a red flag, and the worry is fair: a crypto payment cannot be charged back, so a dishonest seller keeps the money. But the same is true of many local wallets and vouchers.

The questions that matter are the same for every payment method: where the currency comes from, who runs the shop, and what happens if a top-up fails. A crypto shop that answers all three in writing is easier to trust than a card shop that answers none.

Crypto also brings a rule of its own: in some countries, paying for goods in crypto is banned. Not available where paying for goods in crypto is banned (Indonesia, Vietnam, Thailand, Turkey, Bangladesh, Nepal, Egypt, Algeria, Morocco, Tunisia, Iraq, Kuwait, Qatar, Ecuador, Afghanistan, China) or restricted by sanctions (Iran, North Korea, Cuba, Russia, Belarus, Syria, Yemen); paused in Pakistan, Saudi Arabia and the United Arab Emirates until a legal check. See where crypto top-ups are allowed.

What about “free diamonds” offers?

They are scams, without exception. Roblox says it plainly on its gift card page: “Any person, website, or video offering a code for free Robux is a scam.” The same applies to free diamond, UC or crystal offers, apps that promise to add currency, and pages that ask for your login to “verify” you. Bitdefender's warning about scams aimed at Genshin Impact players, first published in December 2025 and updated in April 2026, lists hoyoverse.com, hoyolab.com and genshinimpact.com as the official domains.

No legitimate seller can create game currency. It is sold by the publisher, directly or through partners, and it always has a price.

How does CryptoGameTopUp handle these risks?

• Source. We top up only through channels each publisher authorizes, such as official distributors and publisher stores. We do not buy from grey-market sellers, and we do not sell a game whose publisher allows no intermediary.
• Games. We do not sell currency for Clash of Clans, Brawl Stars, Clash Royale, eFootball, Arena Breakout, Arena of Valor, Age of Empires Mobile, Wuthering Waves or Whiteout Survival, and we do not top up PUBG Mobile or Honor of Kings by player ID: their publishers allow no intermediary or require a login we would have to ask you for. The games we do not sell page explains each case.
• Your account. A top-up needs only the player ID the game shows, plus the zone or server when the game uses one: never your game password or a login code. We will never ask for your game password, your login code or your account recovery email: a top-up needs only your player ID.
• Mistakes. When the game allows it, the checkout shows the player name linked to the ID before you pay, so a typo is caught in time. A top-up credited to the ID you entered cannot be taken back, so check the ID before you pay.
• Failures. If a top-up cannot be completed, its full amount goes back to your balance. The refund policy gives the details.
• Age. For adults only: you must be 18 or older to buy.

We cannot promise what a publisher will do with an account. We can make sure the currency we deliver comes from a channel the publisher authorizes.