I bought an eShop gift card from an established digital retailer for the first time. After paying, I saw a prompt saying that revealing the code would confirm delivery and that my IP address would be logged for that purpose. The store then asked whether I wanted to display the code. I'm not very familiar with buying digital vouchers, so the wording made me worry that clicking "OK" could create a security or privacy risk. Is this a normal practice, and what could the seller actually do with my public IP address?
3 Answers
This is generally not a security concern. A website has to see your public IP address whenever you connect to it, and many services log it for security, fraud prevention, troubleshooting, or basic traffic records. The store already could have recorded it when you visited or placed the order; clicking to reveal the code doesn’t expose anything fundamentally new. Your public IP alone usually doesn’t give someone access to your device or accounts.
The wording is a little awkward, but it may simply be their way of treating a digital code like a delivered item. They could record that the order was accessed, when it happened, and which IP connected to the account. The more important precautions are to use the official site, protect your account with a unique password and two-factor authentication if available, and avoid sharing the gift-card code after revealing it.
Showing your public IP address is routine and normally harmless. It isn’t the same as revealing your exact home address, passwords, or private files. The seller may be using the IP as one piece of evidence that the code was displayed, especially for disputes involving digital delivery. It isn’t a particularly strong form of proof, since many people’s IP addresses change, but it doesn’t make the transaction dangerous by itself.
That clears up my misunderstanding. The fact that the site specifically mentioned logging it made it sound much more serious than normal website activity.