01
Data depends on product format
The digital code is sent by email and activated by the buyer independently. Direct deposit requires a recipient: public username, account name or game ID. Subscription as a gift can use a username or a separate gift link.
Before payment, the product card must explain the delivery method. If the description promises a code, but the form suddenly requires a password, the script is inconsistent and needs to be clarified.
| Format | Usually sufficient | Should not be required |
|---|---|---|
| Code to email | Mail or service password | |
| Direct top-up | Username, login or player ID | Password and 2FA |
| Gift link | Recipient contact or email | Access to his account |
| Cryptopayment | Payment address and order comment | Wallet seed phrase |
02
Why is the public identifier acceptable?
Username or player ID tells the system where to deliver the goods, but does not itself confirm the right to enter. It still needs to be checked as a payment information: one mistake can send the charge to another person.
Copy the value from the profile, do not replace it with the displayed nickname and do not correct the case or characters from memory if the service distinguishes between them.
03
Secrets that must not be told
The password and second factor allow authentication. The login QR can create a new session, the cookie can transfer an already open session, and the seed phrase gives control over the crypto wallet. None of these secrets are needed to deliver a regular code or top up.
Password for the game, service, Telegram or email.
SMS code, push confirmation and authenticator application code.
Steam Guard and backup recovery codes.
QR for login, session file or browser cookie.
Seed phrase and private key of the wallet.
Real support may ask for unclassified order information, but should not ask to dictate a one-time login code.
04
How to check the form before payment
Map each field to a delivery mechanism. We will explain the email for the letter, the player ID for the accrual, the region for the code compatibility. A field without a clear purpose should raise a question.
Check the domain, HTTPS and support contacts, but remember: the lock icon confirms the encryption of the connection, not the integrity of the seller. Look for conditions for issuing, returning and processing data.
05
If the secret has already been transferred
Immediately change your password through the official service, end other sessions and enable two-factor protection. For a wallet with a revealed seed, create a new secure wallet and transfer assets following the official instructions of the application you are using.
Save correspondence and website address. Do not continue to follow instructions from someone who is rushing or asking for new verification codes.