How to Buy Game Top-Ups with No Password Required
Legitimate game top-ups almost never need your password. Here is how ID-based delivery works, when a login is genuinely required, and how to tell the difference.
· By the Krosty Shop team
The most common worry about game top-ups is handing over an account. In most games, you never need to — the top-up is delivered using a public identifier.
How ID-based delivery works
You provide your player ID (sometimes with a server or zone). The top-up is sent to that account through the game's own system. Your password is never involved, and nobody logs in as you.
Games that work this way
Free Fire, Mobile Legends, PUBG Mobile, Genshin Impact, Honor of Kings and most other mobile titles.
When a login IS legitimately required
A minority of games offer no ID-based top-up at all — the purchase must happen inside the account. In those cases a login is genuinely necessary, but it should be used once, for that order only, and never stored. A trustworthy seller will tell you upfront which type your game is.
The red flag
If a game supports ID top-ups and someone still insists on your password, that is the warning sign. There is no technical reason for it.
Double-check the ID
This is the one real risk, and it is on your side: a wrong digit sends the top-up to a stranger, and it generally cannot be reversed. Copy the ID directly from the game rather than typing it from memory.
Is it safe to buy here?
Krosty Shop is a Venezuelan digital-goods store with a 5.0★ average across 1,900+ Google reviews, thousands of deliveries, and real human support on WhatsApp and Telegram (@krostyshopuniverse).
A quick map: ID-based, account-based and code-based games
Rather than a blanket rule, here is how each game in our catalog is actually delivered, so you know what to expect before you order:
- ID-based (public identifier only): Free Fire, PUBG Mobile (global version), Honor of Kings, Blood Strike, Arena Breakout, Genshin Impact (UID + server) and Mobile Legends (ID + zone).
- Account-based (someone signs in to deliver): Roblox, Brawl Stars, Clash of Clans and Clash Royale (Supercell ID), Call of Duty Mobile (Activision), Fortnite and Epic balance, Wild Rift and TFT (Riot), Diablo Immortal (Battle.net), EA SPORTS FC Mobile (EA account), TikTok and Booknet. These games simply offer no ID-based top-up.
- Code-based (you redeem it yourself): Riot Access for Valorant and League PC, Minecraft (Minecoins) and Minecraft Dungeons, Discord Nitro and all gift cards. Apex Legends has no direct top-up: we offer the gift card of your platform (PlayStation, Xbox or Steam) so you buy Apex Coins yourself.
Every product page on the games catalog states which of the three applies.
ID-based games: the details people get wrong
The ID is public and cannot be used to log in, so sharing it carries no account risk. The mistakes happen elsewhere:
- Server or region. Genshin needs the server (America, Europe, Asia, TW/HK/MO); Honor of Kings locks the region at account creation; Free Fire has regional servers; PUBG Mobile has separate global, Korean, Vietnamese and Indian versions with separate currency. Mobile Legends needs the zone ID next to the player ID.
- ID vs. nickname. The ID is a number; the display name is not enough.
- Typing instead of copying. Copy it from the profile screen. A wrong digit sends the top-up to a stranger and no publisher reverses it.
Account-based games: how to keep the risk low
When a game has no ID-based option, someone has to sign in. Supercell, Epic, Riot and Blizzard all prohibit sharing your account in their terms, so ordering an account-based top-up is a decision you make knowing that. What keeps it as safe as it can be:
- Use the game's own login (Supercell ID, Riot username and password, Epic email and password, Battle.net). Stores like ours do not use Google, Apple or Facebook sign-in, so create the native login first; progress is kept.
- Keep two-factor authentication on. You will be asked to approve the sign-in or pass along a one-time code at the moment of processing; that is expected, and it is also your control over who gets in.
- Supercell ID has no password at all: it emails a six-digit code each login. You will be asked for that code during processing, and only through the order channel.
- Share credentials only through the checkout or the order chat, never in public groups, and change your password after delivery. The two-factor setup guide walks through it.
Codes: the third way
With a code, nobody touches the account: you receive the code by email and redeem it yourself. Riot Access codes, for example, are redeemed at Riot's official redeem page or inside the game; Riot ties each code to the region where it was sold, the whole code goes to a single game, and per Riot they do not expire. Gift cards work the same way in their own platform. If a game offers a code route and you can wait to redeem it yourself, it is the lowest-friction option for buying for someone else.
Frequently asked questions
Is giving my player ID safe?
Yes. It is a public identifier, like a username — it cannot be used to log into your account.
When is a login genuinely needed?
For a few games that have no ID-based top-up at all. In those cases it should be optional, used once, and never stored.
What if a seller insists on my password for an ID game?
Treat it as a red flag. If the game supports ID top-ups, no password is needed.
What if I give the wrong ID?
The top-up goes to that account and generally cannot be reversed. Always double-check before confirming.
Does the server or region matter for an ID top-up?
Often, yes. Genshin, Honor of Kings, Free Fire and PUBG Mobile tie the top-up to the server or version the account lives on, and a top-up aimed at the wrong one does not arrive. Check the profile screen and tell us if the account was created in another region.
Why does a Supercell game ask for an email code?
Because Supercell ID does not use a password: every sign-in sends a six-digit code to the account email. During processing you will be asked for that code through the order channel; it expires in a matter of minutes, so keep the inbox open.
Can a top-up be reversed if I gave the wrong ID or server?
No. Garena, HoYoverse, Tencent and the other publishers do not reverse top-ups sent to another account, and neither can we once it is credited. Copy the ID from the game and double-check the server before paying.