Tappy – Global Top-Ups, Gift Cards & Wallet SaaS Platform

Description

Tappy – Global Top-Ups, Gift Cards & Wallet SaaS Platform

Tappy is a production-ready SaaS script for digital recharge & rewards. Your customers fund a prepaid wallet, then send mobile top-ups and buy gift cards across 140+ countries and 700+ operators — one at a time, in bulk, or on a recurring schedule. Resellers manage an agent network and earn commission, while you run the entire platform from a dedicated admin back office. Every screen is built with real data, real money flows, and a real test suite — not a clickable mock-up.

Full feature list

• 4 user roles: Admin, Business, Reseller, Customer
• International airtime & data top-ups (700+ operators)
• Automatic operator detection & live FX
• Global gift-card catalog with instant delivery
• Prepaid wallet with an immutable ledger
• Stripe Checkout funding (+ pluggable gateway)
• Wallet auto-reload with threshold & cooldown
• AI Copilot (multi-provider, confirm-to-send)
• Bulk top-ups via CSV upload, per-row results
• Recurring automations on a schedule
• Saved recipients & address book
• Reseller program: customers, tiers, commissions
• Automatic commission attribution & earnings
• Configurable commission/pricing rules
• Developer REST API with scoped keys
• HMAC-signed webhooks + delivery log
• Admin dashboard with real platform metrics
• User management, roles & suspension
• KYC verification — document upload & review
• Risk & fraud engine with held-for-review
• Live operator/country catalog sync
• Audit log of sensitive actions
• Admin “log in as user” impersonation
• Reports: revenue, margin, product mix, destinations
• Transactions with search, filters & receipts
• CSV export across lists
• Support tickets with replies
• Notifications & in-app alerts
• White-label branding (logos, colors, modes)
• Landing-page CMS with SEO & social meta
• Integrations settings (Stripe, mail, providers)
• Two-factor authentication (Laravel Fortify)
• Light & dark mode
• Comprehensive in-app & offline documentation

Built right — secure & tested

• Money integrity — server-side fee calculation, row-locked wallet mutations and idempotency keys prevent double-charges; failed deliveries auto-refund.
• Secrets encrypted — API keys and integration secrets are encrypted at rest and never returned to the client in plaintext.
• Hardened — CSRF protection, rate limiting, request-size limits, signed webhooks (fail-closed in production) and KYC documents on private storage.
• Test suite — 300+ automated Pest tests covering wallet, top-ups, refunds, roles, KYC, risk and webhooks.