Legitimate top-up services never require your account password
I attempted to order Zenless Zone Zero monochrome. While payment was processed, I was asked for my HoYoverse account email and password. A region and UID should be sufficient; requesting login credentials is a severe security risk and violates game developer Terms of Service. I refused to share the password and requested a refund. Support promised a refund 'within 3 to 7 working days,' but I only have their word. I have screenshot evidence of the order and the request for credentials, which I will submit to my bank for a chargeback if the refund does not arrive. Legitimate top-up services never require your account password.