Account Security and Fair Play

Rewards are verified on the server

The app is not allowed to award itself coins. Survey and offer partners send completions to the backend with identifiers and signatures; the backend checks them, rejects duplicates and credits the wallet. Daily features use server time so a spin, check-in or challenge cannot be replayed by changing the phone clock.

Signed provider callbacks. A completion must match the partner's expected signature or key.
Duplicate protection. The same provider transaction cannot pay twice.
Server-side daily limits. Daily rewards reset on the server, not on the device.
Reviewed payouts. Withdrawals are checked before they are processed.

Protecting your account

Keep codes private

Never share your password, one-time code or UPI PIN. Zyphora support will not ask for them.

Secure your email

Your email is the account recovery path. Use a password manager and two-factor authentication where possible.

Use your own device

Sharing an account or device makes it harder to prove which activity is yours during a review.

Install from Google Play

Only the official Play Store listing is supported. Modified or sideloaded builds can be unsafe.

Fair-play rules

One account per person. Multiple accounts used to farm rewards are not allowed.
No automation. Emulators, scripts, bots and modified clients can invalidate rewards.
Honest task completion. Surveys and offers must be completed as described, by you.
No tracking tricks. VPNs or blockers used to fake a location or bypass attribution are not allowed.
Respect the payout rules. Use payout details registered in your own name.

Why an account may be restricted

A restriction is a review, not a punishment on its own. It can be triggered by duplicate accounts, unusual device patterns, repeated rejected completions, a payout detail mismatch or a provider fraud signal. While a review is open, withdrawals and some tasks may pause.

The in-app account status screen explains the reason where possible. If you believe the restriction is a mistake, email support@zyphorarewards.online from the account address and include the account email, device model and any relevant task or withdrawal IDs. Do not create another account to work around a restriction.

Beware of recovery scams. Nobody legitimate will ask for payment, a password, an OTP or remote access to "unlock" a Zyphora account. Report such messages to support.

Data and privacy

Zyphora collects what the service needs to operate: account details, task and wallet records, device and security signals, and payout details for withdrawals. The Privacy Policy lists the categories, retention and your rights. Privacy requests go to the same support address.

Security and fair play