Staying safe from game scams

We do not choose the ads

Ads pay for the site, but which ones appear is decided by the ad network, not by us. That means an ad is never a message from Elipar, and nothing an ad says about your device is something we told it to say.

Two kinds are worth recognising instantly. The first claims your phone or computer is infected, out of date, or being watched, often with a countdown and a phone number to call. A web page cannot scan your device — it has no way to know anything about your files, your antivirus or your battery. Any page that claims otherwise is guessing, and it is guessing in order to frighten you. The second is a large button that says something like DOWNLOAD or PLAY NOW but belongs to the ad rather than the game. Our games never need a download, so on Elipar that button is always somebody else's.

If an ad ever takes over the page or opens something you did not ask for, close the tab and reopen the game. Nothing is lost — progress is saved in your own browser, not in the page.

Free coins, gems and diamonds do not exist

“Generators” that promise free in-game currency for Free Fire, Roblox, Minecraft or anything else are the most common scam aimed at players, and not one of them has ever worked. They cannot: currency in those games is created on the company's own servers, and no public web page can reach into them. If such a tool existed, the currency would instantly be worth nothing, which is the simplest reason to know it does not.

What these sites are actually doing shows up at the last step, where a progress bar finishes and a “human verification” box appears. Verification is the product. It pays the operator in one of three ways: you fill in surveys that sell your phone number and address, you install apps that earn them a commission, or — the expensive one — you are asked to log in to your game account “to receive” the reward, and hand over a real password on a fake page.

The rule that covers all of it: nothing legitimate ever asks you to prove you are human after it has promised you something.

Fake giveaways, and anyone claiming to be us

Some games here have leaderboards, and that is enough for someone to build a scam on top of them. It is worth knowing exactly how little is behind a leaderboard entry: the name on it is text you typed into a box when you submitted, not an account. It is not checked, not reserved, and not linked to you in any way. Two people can use the same name on the same day.

So there is no prize, no sponsor and no verification step — and nobody who could contact a winner even if there were one. A message saying you have won on Elipar, or asking you to “confirm your leaderboard entry,” is false no matter how real the logo looks or how closely the web address resembles ours.

The same goes for anyone offering to put your score at the top, or asking for a fee to claim a ranking. There is nothing to sell you.

Nobody legitimate needs your OTP

An OTP is the one thing standing between somebody else and your account or your money. Reading it out to a caller defeats it entirely, which is why every real bank, wallet and game company tells you they will never ask — and why anyone who does ask is, without exception, attacking you. This holds even when the message arrives seconds after you did something that seems to explain it.

One mechanic is worth knowing in detail because so many people are caught by it. You enter your UPI PIN to send money — never to receive it. Money arriving in your account needs nothing from you at all. So if someone says they are sending you a refund, a prize or a payment, and a request appears that you must approve with your PIN, approving it takes money out rather than putting it in. That is a collect request, not a payment, and it is the whole trick.

Downloads, notifications and the comment box

Nothing here needs downloading. Every game runs inside the browser tab you already have open. The one exception looks like an install and is not: your browser can add Elipar to your home screen as a shortcut, which saves no program and asks for no permissions. Anything offering an installer, an APK or a setup file for Elipar did not come from us.

Be slow with notification prompts. A site asking to send you notifications is asking for the ability to put messages on your phone or desktop later, outside the browser, where they look far more official than a web page does. Scam sites collect these permissions deliberately. If you have already said yes to something you did not mean to, it is reversible — your browser's site settings list everything you have allowed, and you can withdraw any of it.

Our comment box is public. Every game page has one, with a name field and a short message. It is not tied to any account, and there is no way to edit or delete a comment once it is posted. Treat it as a public wall: no phone number, no address, no school or workplace, no email, and never a password — not even as an example.

For parents, and for younger players

Elipar has a category of games aimed at younger children, so it is worth being plain about what the site does and does not involve. There is no sign-up, no chat between players, no friend list, and nothing to buy. The only place anyone can type something other players will see is the public comment box described above.

The two sentences most worth passing on to a child are simple ones. Nobody real gives away free coins or gems, and a site that offers them wants something else. And no game, ever, needs the password to another game — being asked for one is the moment to stop and tell someone.

If you already shared something

Act quickly and do not spend time being embarrassed about it; these scams are designed by people who do this full time, and speed matters far more than blame.

• —A password: change it immediately, from a different device if you can, and change it anywhere else you reused it. Turn on two-factor authentication on that account while you are there.
• —An OTP, or money: contact your bank or wallet provider straight away using the number printed on your card or inside the official app — never a number from the message that scammed you. Report it; in India the national cybercrime helpline is 1930.
• —An app you were told to install: uninstall it, then change the passwords for anything you opened while it was on the device.

Nothing you did on Elipar can be the source of it. The site holds no account, no password and no payment details for you, because it never collects any — everything it remembers about your play is stored in your own browser and never leaves it. You can read exactly what that covers on the privacy page.