One rule does more work than all the others put together, and it fits in a single sentence: no legitimate organisation asks to be paid in prepaid voucher codes.
Not a tax authority, not a bank, not a court, not an employer, not a utility, not a hospital, not a software company. The rule has no exceptions worth the space it would take to list them, and it holds regardless of how much the caller knows about you.
It is worth understanding why it holds. A rule you understand survives contact with a convincing stranger. A rule you have merely memorised tends not to.
Who never asks
- Tax authorities. They write letters. They do not telephone demanding immediate payment, and no revenue service on earth reconciles its accounts in Neosurf codes.
- Police, courts and prosecutors. No police force takes payment over the phone. Arrest warrants are not settled by card codes. Neither is bail.
- Immigration and visa offices. Fees are paid through official portals, in your own name, against a reference number.
- Banks, including their fraud departments. A bank investigating fraud on your account does not ask you to buy vouchers, move money to a "safe account", or read anything out to prove your identity.
- Utilities, telecoms and internet providers. Disconnection notices arrive in writing, with a period to respond.
- Employers and recruiters. Money moves from employer to worker. Anything else is described in fake job offers that ask you to buy vouchers.
- Landlords and letting agents. Deposits are held under statutory schemes in many countries and cannot be held as voucher codes anywhere.
- Hospitals, clinics and insurers. They invoice.
- Airlines, hotels and travel agents. They take cards, because they have to be able to refund.
- Delivery companies and customs. Genuine duties and handling charges do exist, but they are paid on the carrier's own website or at a post office counter, never by reading digits to a caller.
- Software and hardware companies. The large technology firms do not telephone you about a virus, a refund or an expiring subscription. That pattern has its own article: fake tech support and voucher payments.
- Debt collectors and enforcement agents. Regulated collectors are required to identify themselves and the original debt in writing.
- Charities. No genuine appeal needs a code within the hour.
- Crypto platforms. No real exchange requires you to deposit fresh value to release a withdrawal, and none accepts vouchers to do it.
Why the rule holds
Organisations do not avoid voucher codes out of caution. They avoid them because the codes are unusable as a business payment.
Reconciliation. Every organisation must match an incoming payment to an account, an invoice or a case. A voucher PIN arrives carrying no payer identity, no reference, no timestamp that means anything to their systems. Even if a company wanted to accept one, it could not tell whose bill had been paid.
Audit. Accounts are examined by people whose job is to trace value in and out. A bearer instrument, redeemed by an employee, evidenced by a photograph of a receipt, is unauditable — and it is an invitation to that employee to keep the code.
Regulation. Financial and public bodies are required to know who is paying them. Accepting anonymous value contradicts the obligation directly, which is one of the reasons prepaid vouchers attract anti-money-laundering rules in the first place.
Refunds. Organisations must be able to give money back. A spent voucher balance cannot be returned to whoever bought it, because the issuer has no record connecting the buyer to the redemption.
A payment instrument that cannot be traced, reconciled, audited or refunded is not a payment instrument for institutions. It is a payment instrument for people who need those four properties to be absent.
What a voucher actually is
A prepaid voucher is a bearer instrument. It is cash in an envelope, except that the envelope can be opened from any country by anyone who reads the digits, in seconds, and the slip in your hand is only a receipt.
The PIN is the value. Whether it is a sixteen-digit Paysafecard code or the format another brand uses, the number is the money and the paper is not.
Reading a voucher code aloud is the same act as handing over the cash. There is no stage after that where you can change your mind.
The distinction that catches everything
In every legitimate use of a prepaid voucher, you choose the voucher. In every scam, somebody else chooses it for you.
Vouchers have ordinary uses. Paying a merchant that lists the brand at its own checkout. Buying online without exposing card details. Giving someone a fixed amount. Capping your own spending on a service. Selling one you no longer want. In each of those, the instrument was your decision.
Fraud does not have that freedom. It requires an untraceable, irreversible payment, so the request is always specific, and it usually comes with instructions attached: this brand, this denomination, that shop, do not let the cashier talk you out of it. The specificity is the confession.
Three questions, in order
- Who started this contact — them or me?
- Who chose the payment method — them or me?
- Is there a deadline measured in minutes or hours?
If the answers are them, them and yes, the matter is settled. Nothing they know about you changes the arithmetic. Names, addresses, dates of birth, the last four digits of a card and a list of recent purchases all circulate after data breaches. Knowledge of your details is evidence of a leak somewhere, not evidence of legitimacy.
What to do while it is happening
Hang up. Nothing is lost by hanging up on a genuine caller — a real organisation will write to you, and will not mind. Then find the number yourself, on a bill, on the back of your card, or on the organisation's own site, and call back on a different phone if you have one.
Do not read out digits. Do not photograph a slip. Do not install remote-access software because someone asked you to, whatever it is called and whoever they claim to be. Say the words out loud to someone in the room, or on the phone to a family member, before you buy anything: describing the request to another person breaks the spell more reliably than anything else.
If you are standing at a till buying several vouchers and a member of staff asks what they are for, answer honestly. Staff at many retailers are trained to ask that question for exactly this reason, and the question exists to help you.
The cases people genuinely find confusing
A friend messages asking for a code. Verify by voice or in person, on a number you already have. Account takeover is ordinary, and the message will read like them because the attacker has the history.
A website lists Paysafecard or Neosurf at its own checkout. That is a normal transaction. You are on a site you chose, buying something you wanted, at a price you can see.
An exchange asks for the code. When you sell a voucher, the code is the item being sold, so of course it is handed over — but to a business you can identify, that establishes who you are before it pays out, checks the voucher with its issuer, publishes its rates and terms, and gives you a route to complain. That is how the process is meant to run. If instead you are buying a voucher because somebody else told you to, an exchange is not a workaround. It is the same fraud with an extra step in it.
Someone offers to buy your voucher for more than its face value. Nobody pays a premium for a bearer instrument. The premium is bait, and the code is the target.
If it has already happened
Act the same day. Keep the receipts and serial numbers, contact each issuer through a number from its own website, report to the police, and tell your bank if a card or transfer was involved. Unspent balances can sometimes be blocked; spent ones cannot. The sequence is set out in you sent someone a voucher code.
And keep one sentence for the next call, because there will be one. Anyone who cannot be paid in their own name is telling you exactly who they are.