Is GrabPoints Safe? What Trust Scores and Suspensions Reveal (2026)

This is not a scam. It is a business model with risks you should understand before investing hours of your time.

Is GrabPoints Legitimate?

Yes. GrabPoints is operated by Reward Holdings Limited, a company based in Hong Kong. The platform has been active since 2014, has over 10 million downloads, and pays real rewards through PayPal, gift cards, and prepaid cards.

The platform offers over 250 reward options, including PayPal, Amazon, Walmart, Netflix, Starbucks, and prepaid Visa cards.

For a full overview of the platform, see our GrabPoints review.

What the Trust Scores Actually Say

Independent security platforms consistently rate GrabPoints as risky. Here is what the data shows:

Gridinsoft identifies "2 detections in blacklists" and a "low rating of 4.1/5 across 6,043 reviews". The platform states: "Most people would be better off avoiding it entirely".

The subdomain members.grabpoints.com — the area where users manage accounts and process payouts — has an even lower trust score of just 7/100 according to Gridinsoft.

Important caveat: Automated rating systems are not perfect. Gridinsoft notes: "Although the evidence suggests risk, there is still a chance the site is legitimate". The low scores do not mean GrabPoints is a scam — they mean the platform displays behaviors consistent with risky websites.

What Data GrabPoints Collects

GrabPoints' privacy policy (last updated October 1, 2024) describes extensive data collection. Here is what the platform collects:

Automatically collected data

• IP address — On every visit to the website or use of the app
• Website usage data — Which pages you visit, how long you stay, which features you use
• App usage data — How you use the mobile app
• Device ID (UDID) — A number uniquely associated with your mobile device

Voluntarily provided data

• Demographic information — Age, gender, occupation, household size, education, ethnicity
• Email address — For account management and communication
• Phone number — For SMS communication
• Payment details — PayPal account or other payout information

The policy states: "We use your non-personally identifiable information to personalize content and target advertising for you and others". This means your demographic data and usage patterns are used to show you targeted advertising.

For a full breakdown of GrabPoints' privacy practices, see our GrabPoints data privacy guide.

How Your Data Is Shared

GrabPoints' privacy policy is unusually transparent about how your data is shared. Here are the key disclosures:

1. Sharing with advertisers on offers and surveys

When you complete offers or answer surveys, your personal data is shared with advertisers: "When you complete offers and surveys, we may also share personal information with advertisers so we can easily provide offers and make the process seamless".

2. Sharing with market research companies

GrabPoints shares your demographic data with third-party market research companies: "GrabPoints may share your personal and/or sociodemographic information with third-party market research companies, including but not limited to unique identification numbers (UID), postal code, gender, marital status, education, race/ethnicity (as permitted by applicable law), employment-related information, and non-personally identifiable information about household members".

3. Service providers

The platform engages third parties for services like email campaigns, marketing support, and customer service. These entities have access to your information to perform their functions.

4. Data sales and business transfers

The policy permits disclosure of data "in the event of a sale or transfer of some or all of its assets to a successor or other relevant entity".

5. Government requests

Member data may be "disclosed on the basis of a valid request from public authorities, including to meet national security or law enforcement requirements".

The Suspension Problem: Why Accounts Get Banned After Payouts

This is the most serious safety issue with GrabPoints. On Trustpilot, dozens of users describe the same pattern: successful first withdrawal, account suspension on the second.

GrabPoints officially explains that accounts may be frozen for "various reasons, such as suspicious activity, policy violation, or an internal review". While frozen, users can continue earning points, but all reward redemptions are disabled.

The company also admits that the freeze "may lead to permanent suspension if the issue isn't resolved".

The most common triggers for suspension are:

• VPN or proxy usage — Even accidental use can result in a permanent ban
• Rushing through surveys — The system detects poor-quality responses
• Inconsistent information — Contradictory demographic answers
• Multiple accounts — Each person is allowed only one account
• Fake or nonsense answers — Quality checks detect this
• Automation tools — Bots and scripts are strictly prohibited

For the full process on recovering a frozen account, see our GrabPoints account frozen guide.

The Phishing Problem: Fake GrabPoints Messages

Like many GPT platforms, GrabPoints has a problem with phishing scams where fraudsters impersonate the platform to steal credentials and personal information.

GrabPoints has not published a public list of phishing warnings, but the general patterns are known:

• Fake GrabPoints websites designed to steal login credentials
• Messages from fake accounts on social media
• Payment requests to "unlock" rewards
• Offers for "exclusive rewards" requiring personal data

How to protect yourself:

• Verify URLs. Always navigate directly to grabpoints.com rather than clicking links in messages
• Never share your password. GrabPoints will never ask for your password via email or message
• Download the app only from official sources. Use Google Play or the App Store
• Be skeptical of unexpected messages. If someone claims to be from GrabPoints and asks for personal data, it is likely a scam

How to Protect Yourself on GrabPoints

If you decide to use GrabPoints despite these risks, here is how to minimise your exposure:

1. Use a dedicated email address. Don't use your primary email. Create an address specifically for GPT platforms.
2. Use a unique password. Never reuse a password from another service.
3. Never use a VPN. This is the most important rule. Even accidental VPN usage can lead to a permanent ban.
4. Cash out as soon as you hit the $3 threshold. Don't accumulate a large balance. The documented pattern of suspensions after second payout requests suggests that large balances attract scrutiny.
5. Answer surveys honestly and consistently. Inconsistent or rushed answers can trigger suspensions.
6. Review the privacy policy. Understand what data is collected and shared.
7. Keep documentation for high-value tasks. Screenshots and confirmation emails make support tickets more likely to succeed.

For more on maximizing your earnings while staying safe, see our GrabPoints payout guide and our survey disqualification guide.

Frequently Asked Questions

Does GrabPoints collect your data?

Yes. GrabPoints collects IP addresses, device IDs, demographic information, email addresses, and usage data. The privacy policy also describes sharing data with advertisers, market research companies, and service providers.

Is GrabPoints safe to use?

GrabPoints is a legitimate platform active since 2014 that pays. However, Gridinsoft gives the site a trust score of 35/100, Trustpilot shows 1.5/5, and there is a documented pattern of account suspensions after payout requests.

Why is GrabPoints rated so poorly on Trustpilot?

The most common complaint is a specific pattern: successful first withdrawal, account suspension on the second. Dozens of users describe their accounts being suspended immediately after a second payout request, without explanation.

Is GrabPoints a scam?

No. GrabPoints pays and has been operating since 2014. However, the low trust scores and user complaints mean the platform carries significant risks, especially for users who accumulate larger balances.

Platform information and limitations

The privacy policy permits sharing with advertisers, market research companies, and service providers. Data may also be shared in the event of a business sale or on government request.

Platform information and limitations

Never use a VPN. Answer surveys honestly and consistently. Cash out as soon as you reach the $3 threshold. Use only one account. These rules are sufficient for most users.

Is GrabPoints GDPR-compliant?

GrabPoints' privacy policy references US and European data protection laws. The platform is based in Hong Kong, and its primary compliance framework is not clearly stated. EU users have the right to request data access and deletion, but enforcement may be difficult.