Description
Tappy – Global Top-Ups, Gift Cards & Wallet SaaS Platform
Tappy — Global Top-Ups, Gift Cards & Wallet SaaS Platform
A complete, white-label platform to launch your own international airtime, data & gift-card business — with a prepaid wallet, AI Copilot, reseller program, developer API and a powerful admin back office.
View Live Demo | Documentation
Built with: Laravel 13 · PHP 8.4 · React 19 · Inertia.js · TypeScript · Tailwind CSS v4 · Stripe · Reloadly
Full feature list
- 4 user roles: Admin, Business, Reseller, Customer
- International airtime & data top-ups (700+ operators)
- Automatic operator detection & live FX
- Global gift-card catalog with instant delivery
- Prepaid wallet with an immutable ledger
- Stripe Checkout funding (+ pluggable gateway)
- Wallet auto-reload with threshold & cooldown
- AI Copilot (multi-provider, confirm-to-send)
- Bulk top-ups via CSV upload, per-row results
- Recurring automations on a schedule
- Saved recipients & address book
- Reseller program: customers, tiers, commissions
- Automatic commission attribution & earnings
- Configurable commission/pricing rules
- Developer REST API with scoped keys
- HMAC-signed webhooks + delivery log
- Admin dashboard with real platform metrics
- User management, roles & suspension
- KYC verification — document upload & review
- Risk & fraud engine with held-for-review
- Live operator/country catalog sync
- Audit log of sensitive actions
- Admin “log in as user” impersonation
- Reports: revenue, margin, product mix, destinations
- Transactions with search, filters & receipts
- CSV export across lists
- Support tickets with replies
- Notifications & in-app alerts
- White-label branding (logos, colors, modes)
- Landing-page CMS with SEO & social meta
- Integrations settings (Stripe, mail, providers)
- Two-factor authentication (Laravel Fortify)
- Light & dark mode
- Comprehensive in-app & offline documentation
Built right — secure & tested
- Money integrity — server-side fee calculation, row-locked wallet mutations and idempotency keys prevent double-charges; failed deliveries auto-refund.
- Secrets encrypted — API keys and integration secrets are encrypted at rest and never returned to the client in plaintext.
- Hardened — CSRF protection, rate limiting, request-size limits, signed webhooks (fail-closed in production) and KYC documents on private storage.
- Test suite — 300+ automated Pest tests covering wallet, top-ups, refunds, roles, KYC, risk and webhooks.

