Paystack handles checkout
Senders pay through Paystack. Goodiebag does not store card details, card PINs, or payment credentials.
Safety and trust
Built for cash drops where money has to move cleanly.
Goodiebag keeps the fun of gifting, while treating payment flow, recipient identity, and transfer reliability as serious parts of the product.
Pass-through flow
No Goodiebag wallet balance or withdrawal queue.
No wallet
1
Sender pays with Paystack
2
Goodiebag creates link and PIN
3
Recipient claims with phone-linked bank
4
Payouts are processed through Paystack
PIN
claim protection
Paystack
checkout rail
No
wallet custody
Protection layers
Trust should be visible before anyone pays or claims
No wallet custody
Goodiebag does not operate customer wallets or stored-value accounts. Payments and payouts are processed through Paystack and supported payment partners.
PIN-protected claims
Each Goodiebag has a private PIN. The sender controls where and when the PIN is shared, which helps protect timing and access.
Phone-linked bank check
Recipients choose OPay, PalmPay, or Moniepoint and use the phone number tied to that account. Account name checks help reduce wrong payouts.
One claim per person
Claims are designed to prevent repeat claiming from the same phone identity on a single Goodiebag.
Phone number is permanent
Once a phone number is registered to a Goodiebag profile, it cannot be changed through self-service. This prevents phone-number swapping and ensures claim history stays tied to the correct identity. Always confirm your phone number is correct before registering.
Saved bank accounts are locked
If you save a receiving bank account to your profile, it is locked once confirmed. Changing it requires a support-reviewed request. This prevents unauthorised bank account changes and protects your payouts.
Operational visibility
The sender dashboard and claim records help show what happened, who claimed, and what remains after the drop.
App session security
If you use the Goodiebag app, your sign-in session is stored in your device's encrypted secure storage and is not accessible to other apps. Push notifications are sent only for bags you created. No financial credentials are stored on your device.
Sender pause and PIN rotation
Senders can pause claims or rotate the PIN from their dashboard at any time. If a link or PIN is compromised, the sender can stop new claims quickly without needing to contact support.
Device fingerprinting
Goodiebag uses device and browser signals to reduce duplicate claims, bot activity, PIN guessing, and scripted abuse. This is used for security and abuse prevention, not for selling personal data or advertising.
Transaction monitoring
Claims are subject to one-claim-per-phone-number checks, failed PIN attempt limits, claim velocity monitoring, bank verification, and manual review where needed.
Safety by role
What senders and recipients should know
Security looks different depending on which side of the drop you are on. Here is what matters most for each role.
For senders dropping cash gifts
Share the link and PIN only with your intended group. You can pause claims or rotate the PIN from your dashboard at any time if the link is compromised. Verify the bag amount and recipient count before funding through Paystack checkout.
For recipients claiming a share
Claim only from links you trust. Never pay anyone to access a Goodiebag. Confirm your phone number and the resolved account name before submitting. Successful payouts may not be reversible, so double-check everything.
For community managers and creators
Establish clear rules for your cash drops before sharing the link. Remind your community that only OPay, PalmPay, and Moniepoint accounts are supported. Share the PIN only when you are ready for claims to begin.
How pass-through architecture protects everyone
Goodiebag does not operate customer wallets or stored-value accounts. Money moves from the sender through Paystack to the claimant's bank. There is no stored balance for attackers to target, and no withdrawal queue to manage.
Fraud prevention
What Goodiebag will not ask for
If someone asks for any of these details in the name of claiming a Goodiebag, treat it as suspicious.
Never01
Your bank password
Goodiebag has no reason to ask for the login password to your OPay, PalmPay, Moniepoint, or other banking app.
Never02
Your card PIN
Sender payment is handled by Paystack checkout. Do not type a card PIN into any page that is not the official Paystack payment flow.
Never03
Your BVN
The current claim flow is built around supported phone-linked fintech bank accounts. Goodiebag does not need your BVN to claim a bag.
Never04
Your OTP or bank app password
Goodiebag will never ask for your BVN, bank app password, card PIN, or OTP outside the official Paystack checkout flow.
Safety tips
For senders
- 1. Share the claim link and PIN only with the intended group.
- 2. Avoid posting claim details publicly unless you intend public claiming.
- 3. Verify the Goodiebag amount and number of recipients before payment.
- 4. Understand that claims may be first-come-first-served or variable depending on the selected mode.
- 5. Report suspicious activity quickly via support@getgoodiebag.com.
Safety tips
For recipients
- 1. Claim only from links you trust.
- 2. Never pay anyone to access a Goodiebag.
- 3. Ensure your phone number and payout details are correct before submitting.
- 4. Always confirm the account name before claiming. Successful payouts may not be reversible.
- 5. Report impersonation, fake giveaways, or suspicious claims to support@getgoodiebag.com.
What Goodiebag is not for
Goodiebag is designed for social gifting, appreciation, and digital rewards. Do not use Goodiebag for gambling, betting, lotteries, raffles, money laundering, suspicious transfers, scams, Ponzi schemes, prohibited goods or services, bribery, coercion, harassment, or any activity that violates payment partner rules or applicable law.
Pass-through architecture
No stored recipient balance. No withdrawal queue.
Goodiebag is intentionally not a wallet in this version. The product coordinates a funded social drop and triggers the recipient transfer after a valid claim. The promise is simple: claim your share, receive it in your supported bank, move on with your day.
Safety questions
Is Goodiebag a wallet?+
No. Goodiebag does not operate customer wallets or stored-value accounts. Payments and payouts are processed through Paystack and supported payment partners for the purpose of funding Goodiebags and paying successful recipients.
What happens if someone guesses my PIN?+
Goodiebag enforces failed PIN attempt limits and device fingerprinting to detect and slow down automated guessing. Senders can also rotate the PIN from their dashboard at any time. If you believe your PIN is compromised, rotate it immediately.
How can I verify a Goodiebag link is real?+
All official Goodiebag links use the getgoodiebag.com or gbag.me domain. Short links use gbag.me/CODE format. If a link claims to be a Goodiebag but uses a different domain, do not enter your personal details. Report suspicious links to support@getgoodiebag.com.
Can I get scammed through Goodiebag?+
Scammers may impersonate Goodiebag to trick people. Never pay anyone to access a Goodiebag. Never share your BVN, card PIN, or bank app password. Only claim from links you trust. Read our guide on spotting fake giveaways for more details.
Can someone claim with my phone number?+
The payout is tied to the supported bank account linked to that phone number. The account name is checked before transfer, which makes claiming into an unrelated account much harder.
What should I do if a claim fails?+
Check that the phone number is linked to OPay, PalmPay, or Moniepoint. If the claim shows a support code (e.g. GB-CLM-8F3K2Q), include it when emailing support. The support code helps us find the failed transaction quickly. Contact support@getgoodiebag.com with the Goodiebag link and the time of the attempt.
Are all Nigerian banks supported?+
No. Goodiebag currently focuses on OPay, PalmPay, and Moniepoint because their phone-linked account behavior keeps the claim flow fast and easier to verify. Supported banks may change based on payment partner availability, verification reliability, payout success rates, compliance requirements, or operational risk.
Wrong account warning
Always confirm the account name before submitting a claim. If a payout is successfully processed to the account confirmed during claim, reversal may not be possible.
Create a drop with clear rules
Stay safe when gifting. Share the PIN intentionally, remind recipients to confirm their account name, and only claim from links you trust.
Create a Goodiebag