Closed-loop brand codes — app stores, gaming, streaming, retail — bought by businesses from a prepaid B2B wallet, delivered sealed, and accounted for journal by journal.
Delivered, partly delivered, quarantined, held for the supplier — each one a signed, sequenced event your webhook receives. Illustrative data, real contract.
Recharge apps, kirana aggregators and reward platforms buy through the /v1 API or the partner portal. The volume channel, and the first one.
A “Sell vouchers” tab for TapProof merchants: kiranas sell codes at the counter and earn a commission, with the reveal behind the app PIN.
A catalogue inside the VIKAM app, UPI-only, with device-bound reveal and velocity limits.
Landed cost from supplier cost and FX; your price from face value minus your discount — held until the quote expires.
Under a lock on your wallet: status, tier caps and balance checked, the amount moved from available to reserved. Never negative.
Our order id is the supplier reference, so the supplier itself dedupes. A timeout is never retried as a new purchase.
Region, denomination, expiry and duplicates checked. Good codes sealed; bad ones quarantined and claimed back.
Plaintext only on an explicit reveal, once per code, audited with the device id. A second attempt returns the original timestamp.
Delivered units settle reserved → supplier float + margin; undelivered units release to available in the same transaction.
Per-code envelope encryption bound to its context, masked everywhere else. The reveal flips the code, decrypts and audits in one transaction.
Append-only journals, balanced by the database. Top-ups are idempotent on the bank UTR. Corrections are new journals, never edits.
When a supplier times out, money stays reserved while a resolver asks the supplier about that exact reference — then delivers or releases.
The same Idempotency-Key returns the original result. A different body under the same key is rejected.
Asked for 10, got 7: you get 7, pay for 7, and 3 are released to your balance in the same transaction.
Daily and monthly caps are enforced at order time, inside the same lock that reserves the money.
Bearer-key REST, quotes with a TTL, idempotent orders, and sequenced, HMAC-signed webhooks you can replay from any sequence number.
# 1 · Quote — the price is fixed until expiresAt curl -s https://codeproof.fluxusforge.in/v1/quotes \ -H "Authorization: Bearer $CODEPROOF_KEY" \ -H "Content-Type: application/json" \ -d '{"sku":"GPLAY-IN-500","qty":2}' # 2 · Order — the Idempotency-Key makes a retry safe curl -s https://codeproof.fluxusforge.in/v1/orders \ -H "Authorization: Bearer $CODEPROOF_KEY" \ -H "Idempotency-Key: 0b9e6c1e-…" \ -d '{"quoteId":"q_…","clientReference":"txn-8841"}' # → 201 FULFILLED · 202 SUPPLIER_AMBIGUOUS (money held) # 3 · Reveal — plaintext once, audited per device curl -s -X POST https://codeproof.fluxusforge.in/v1/orders/$ORDER/codes/$CODE/reveal \ -H "Authorization: Bearer $CODEPROOF_KEY" \ -H "X-Device-Id: pos-terminal-12"
POST https://your-app.example/codeproof X-Codeproof-Event: order.partial X-Codeproof-Seq: 1042 X-Codeproof-Signature: t=1767000000,v1=5f2c…e9 { "seq": "1042", "type": "order.partial", "createdAt": "…", "data": { "orderId": "…", "clientReference": "txn-8841", "requested": 10, "delivered": 7, "refundedMinor": "147000", "codes": [{ "codeId": "…", "masked": "****-****-7Q2K", "expiresAt": "…" }] } } // Signed: HMAC-SHA256(secret, t + "." + body) // Ordered per partner by seq · retried with backoff · never dropped
Every partner is one legal entity with one wallet. Tier and caps are set at onboarding and enforced on every order.
| Tier | Who | KYC | Monthly cap | Channels |
|---|---|---|---|---|
| T0 | Consumer — individual, own use | Mobile OTP + PAN + device binding | ₹25K / month, ₹10K / day, 3 codes / day | VIKAM / web |
| T1 | Reseller — proprietor or freelancer | Aadhaar eKYC with liveness + PAN + penny-drop + selfie | ₹2L / month | App + portal |
| T2 | Proprietorship, partnership or LLP | Udyam or GST + firm PAN + partner KYC + bank in firm name + premises proof | ₹25L / month (₹5L without GST) | Portal + API |
| T3 | Private limited company | CIN + MCA directors + board resolution + GST + company PAN + bank in company name + UBO ≥ 10% | ₹5Cr / month, raised on history | API + portal |
| T4 | Enterprise — aggregators, fintechs, corporates | T3 + your AML policy + site or video visit + addendum | Custom, optional credit line | API |
Codeproof is in build. The core — catalogue, pricing, orders, the single-reveal vault, the double-entry ledger and the partner API — runs today against a simulated supplier. Partner access is by invitation while we complete supplier contracts and go-live checks.
No. Codeproof sells closed-loop brand codes to businesses. Partners hold a prepaid B2B balance with us to buy codes; there is no stored value for individuals and no consumer wallet.
By bank transfer (UPI, NEFT, RTGS or IMPS) to your own virtual account, whose details you receive during onboarding. Every credit is matched to its bank UTR and can never be applied twice. Cards and net-banking are not accepted.
The order becomes “Confirming with supplier”. Your money is held — not spent and not refunded blind — while our resolver asks the supplier what happened to that exact order reference. It then settles to delivered or refunded. We never re-buy, so you are never charged twice.
Codes are envelope-encrypted per code the moment they arrive and are masked everywhere, including in our own console. Plaintext exists only in the one reveal response you request, and every reveal attempt is audited.
Every code is validated before it is sealed — region, denomination, expiry of at least 60 days, duplicates. A code that fails is quarantined, you are not charged for it, and we raise a claim against the supplier.
Tell us who you are and how you would distribute codes. We review every request and reply by email.