If you’ve been sitting on your wallet wondering whether the third-party top-up market is still safe after Riot’s latest policy shake-up, you’re not alone. Plenty of players panicked when the “Penalty Linking” update dropped, assuming their go-to discount platforms were suddenly off-limits. Most of them were wrong.
Here’s what actually changed, who’s really at risk, and where you can still buy Valorant Points at a price the official store would never offer you.
What Riot’s 2026 Policy Update Actually Targets
Let’s kill the rumor first: Riot’s 2026 Penalty Linking update is not about gift card codes. It’s about account access.
The policy specifically closes loopholes around services that require your Riot login credentials to top up your account directly. Think “pilot services,” account boosters, and UID-injection platforms that ask for your password. Those are the operations in Riot’s crosshairs — and the penalties for using them range from temporary restrictions to permanent bans.
Standard code-based redemption? Completely untouched. Riot’s own support documentation confirms that gift cards and prepaid codes are redeemed by the account holder themselves through the official Riot client or the Riot Code Redemption website. You enter the code, you get the VP — the third-party seller never touches your account. That distinction is exactly where the policy draws its hard line.
How Valorant Gift Card Redemption Actually Works in 2026
The redemption process has been consistent since Riot’s early 2025 security update and remains unchanged through Q2 2026:
- Open the Valorant client or go to the official Riot Code Redemption page
- Navigate to Store → Prepaid Cards & Codes
- Enter your code and click Submit
A few things worth knowing before you buy: Riot enforces a limit of five gift card redemptions per 24-hour window. More importantly, every Valorant gift card is region-locked — a card issued for NA will not work on an EU account, and Riot’s system flags cross-region redemptions for automatic fraud review. Always confirm the card’s Shard (NA, EU, AP/SEA) matches your account before purchasing. Riot support will not assist with cards bought from the wrong region.
Where to Buy: A Verified Breakdown of Your Options
Not all purchase channels carry the same risk — or the same price tag. Here’s an honest look at the current landscape.
Official Riot Store Zero discount, zero risk. If price doesn’t matter, this is your benchmark. For everyone else, the official store is just a reference point.
Authorized Retail Partners (Amazon, GameStop, etc.) These are officially contracted by Riot and carry the same zero-risk profile. Discounts are rare and tied to first-party promotions — usually 0% to 10% off during seasonal events. Useful when they run promos; not particularly competitive otherwise.
Established Third-Party Code Platforms: This is where the real value lives. Platforms that operate a code-delivery model — sending you a redeemable string of characters via email, which you input yourself at Riot’s portal — stay on the right side of the 2026 rules. The key distinction: they sell you a code, not account access.
Among the more established options in this category, a Valorant gift card through a platform like LootBar has become a popular route for budget-conscious players. With over 44,000 verified reviews on Trustpilot and a 4.9/5 rating as of early 2026, it sits meaningfully above the anonymous P2P marketplace tier. Discounts on this type of platform typically land between 5% and 20%, depending on denomination and timing, which adds up fast if you’re topping up monthly for a Battle Pass or skin bundle.
Grey-Market P2P Marketplaces Technically compliant if the codes are valid, but sourcing transparency varies. The real risk here isn’t Riot’s policy — it’s chargeback reversals. If a seller funded their code purchase with a stolen card, Riot can revoke that code after you’ve already redeemed it. Savings aren’t worth that.
Credential-Sharing / Pilot Services were banned outright under the 2026 update. Any service asking for your Riot username and password is now a direct policy violation, and Riot has confirmed enforcement includes permanent account suspension.
The Risk-Value Breakdown (At a Glance)
| Platform Type | Riot Policy Status | Typical Discount | Risk Level |
| Official Riot Store | Fully compliant | 0% | None |
| Authorized retailers | Fully compliant | 0–10% | None |
| Established code platforms (e.g., LootBar) | Code-compliant | 5–20% | Low |
| Anonymous P2P marketplaces | Code-compliant (sourcing risk) | 10–30% | Low–Medium |
| Credential / pilot services | Banned | Variable | Critical |
Five Rules for Buying Safely
1. Never hand over your password. A legitimate platform will never ask for it. Code delivery is the only compliant method under the 2026 rules — this is non-negotiable.
2. Match your region before you buy. Cards are Shard-specific. Buying the wrong region is the most common — and most avoidable — mistake.
3. Prioritize platforms with verified review history. Volume and recency matter on Trustpilot and similar platforms. A site with 40,000+ reviews over multiple years tells a different story than a new storefront with a handful of five-stars.
4. Time your purchase strategically. Riot runs Double VP promotions at various points in the year. Combining a discounted third-party code with one of these events is the highest-yield move for regular players.
5. Keep your receipt until redemption is confirmed. Riot requires proof of purchase to investigate any code issue. Don’t discard your order confirmation email until the VP shows in your account.
Final Thoughts
Riot’s 2026 policy did exactly what it was designed to do: it went after credential-sharing services, not the broader gift card market. For players who understand the difference between handing someone your login and redeeming a code yourself, nothing has fundamentally changed.
The smart move is still using an established, review-verified platform that operates on a code-delivery basis. If you’re looking for a starting point, the LootBar gift card hub covers Valorant alongside 150+ other titles, making it a practical option for players who top up across multiple games without wanting to manage five different storefronts.
Just stay out of anything that touches your credentials. That’s the only rule that actually matters.
