E-commerce

Selling Digital Products: Codes, Courses and Files

A practical guide to selling digital products: delivering codes, courses and files safely, protecting yourself from fraud and chargebacks, and writing a fitting refund policy.

Thebes International teamPublished 7 min read

Selling Digital Products: Codes, Courses and Files

Selling digital products looks easier than selling physical goods: no warehouse, no shipping, no packaging. But it brings its own challenges. Delivery has to be almost instant, the product can be copied or resold, card fraud targets exactly this kind of item, and the refund policy looks nothing like one for clothes or electronics. This guide covers the three main types (codes and license keys, online courses, and downloadable files) and complements the complete guide to starting an online store.

Types of digital product and their risks

TypeExamplesDeliveryMain risk
Codes and license keysGift cards, game codes, software keys, subscriptionsCode shown after payment and sent by emailStolen-card fraud and invalid codes
Online coursesRecorded courses, live cohort programsAn account on a learning platformAccount sharing and leaked content
Downloadable filesDesign templates, e-books, photo presets, fontsA secure download linkUnlicensed redistribution

Codes and license keys

Where your codes come from

Start at the source: buy codes from the publisher or an authorized distributor and keep the invoices. Cheap codes from unofficial sources can be revoked after you sell them, because they were bought with stolen cards or outside the publisher's terms. You then carry the refund, the angry customer and possibly a suspended payment account.

Codes are real inventory

Treat each code like an item on a warehouse shelf:

  • Upload codes in batches, recording the date added, supplier and expiry date where relevant.
  • Configure the system so each code is delivered once only and reserved when payment succeeds, not when it is added to the cart.
  • Never show a code on any page or in any message before payment is fully confirmed.
  • Set a low-stock alert and stop sales automatically when stock runs out, rather than accepting orders you cannot fulfill.
  • Restrict access to the code file within your team; unsold codes are cash in text form.
  • State the region clearly: many cards and codes are tied to one country's store, so put the valid region or account type in the product name itself, for example "Top-up card for Saudi accounts". Region mismatches are a well-known source of complaints.

Instant or manual delivery?

Instant delivery means the code or download link appears right after payment succeeds, is emailed, and is saved in the customer's account. It is what most buyers expect, but it also suits a fraudster who wants to turn a stolen card into a code they can resell within minutes. Manual delivery means reviewing the order before releasing the product: slower, but safer. The practical answer is a hybrid:

  • Instant delivery for low-value orders, customers with a clean purchase history, and payments that passed the card issuer's extra authentication step.
  • Manual review for high-value first orders, several orders in a short time, and cases where the card's country doesn't match the customer's country or connection location.
  • A clear promise on the product page, such as: "Codes are delivered instantly for most orders; some orders go through a security review of up to two hours during business hours." A clear promise prevents anxious messages.

Whichever method you use, log the delivery time and channel for every order. That log is your evidence in any dispute.

Online courses

A course is a different kind of digital product, because the customer buys access rather than a file. Key decisions:

  • Where to host it: a dedicated learning platform, a learning plugin for your store, or a private video host with access control. What matters is that you control who watches and can suspend or extend an account.
  • Access period: lifetime or time-limited, stated clearly before purchase.
  • Free preview lessons: one or two open lessons reduce hesitation and later refund requests.
  • Limiting sharing: there is no complete protection, but you can reduce leaks with a watermark showing the student's email, limits on devices or simultaneous sessions, and no direct video downloads.
  • Language and subtitles: subtitles add clear value for bilingual Gulf audiences; subtitles and on-screen text explains how to add them.

Downloadable files

Templates, e-books, fonts and photo presets are easy to deliver and just as easy to copy. To protect them and serve the customer well:

  • Use temporary download links that expire after a set time or number of downloads, rather than a permanent link that can be shared.
  • List the file format, size and compatible software on the product page, so nobody buys a file they cannot open.
  • Write the license in plain language: personal use only, commercial use for one project, or unlimited commercial use, and what is forbidden, such as reselling the file itself. For licensing basics, see image rights and licensing.
  • Let buyers download updates if you release a corrected version. It cuts complaints and builds loyalty.

Fraud and chargebacks

A chargeback happens when a cardholder disputes a transaction with their bank. The amount is usually pulled from your account along with a fee, and you are asked to prove the sale was legitimate. With digital goods the code has usually been used already, so you lose both the product and the money. Warning signs:

  • Several orders from the same account or card within minutes.
  • Repeated payment attempts with different cards for one order.
  • A high-value first order from a disposable email or an unverifiable phone number.
  • A card country that differs from the customer's country and connection location with no clear reason.

Preventive steps:

  1. Enable 3-D Secure, the card issuer's extra authentication step, through your payment gateway. It verifies the cardholder and, under card network rules, shifts liability for some fraud cases to the issuing bank.
  2. Cap the number and value of orders per customer per day.
  3. Use the risk-scoring tools your gateway provides and review high-risk orders manually.
  4. Keep a record for every order: payment time, connection address, delivery time and code redemption time if the supplier provides it. This is what you submit when responding to a dispute.
  5. Pause sales of the most targeted items temporarily if you notice a wave of suspicious orders.

For the gateway's role in all this, see payment gateways explained. For protecting the store and its accounts, see online store security and customer data protection.

A refund policy for digital goods

A code that has been revealed or a file that has been downloaded cannot be "returned", so the policy must be clear before payment, not after. Points to cover:

  • Codes: non-refundable once shown or sent, unless proven invalid, in which case the code is replaced after checking with the supplier.
  • Courses: you might allow refunds within a short period as long as the student has watched only a small part of the content. Choose the period and proportion that suit you and state them in numbers.
  • Files: usually no refund after download, with a commitment to supply a working copy or refund if the file is corrupt or not as described.
  • Explicit consent: add a checkbox at checkout where the customer confirms they have read the policy and understand the product is digital and delivered immediately.
  • Support channel: name one channel for support requests and a response time.

The general principles of clear policy wording are covered in shipping, delivery and returns.

Presentation and pricing

A digital product cannot be touched, so presentation does the persuading: screenshots from inside the template or course, a table of contents and a free sample. Tiered pricing works well, such as a personal license and a commercial license, or a course alone and a course with a live Q&A session. Bundling and psychological pricing are covered in pricing strategies for e-commerce. Also check the VAT rules for digital products and services in your country and your customers' countries with the competent authority, as they may differ from the rules for physical goods.

Practical checklist

  • An authorized source for every code, with invoices kept.
  • Codes treated as stock: delivered once, reserved at payment, alert before running out.
  • The valid region or platform written into the product name.
  • Hybrid delivery: instant for safe orders, manual review for suspicious ones.
  • 3-D Secure enabled and daily order limits in place.
  • A complete delivery log that can serve as evidence in disputes.
  • Temporary download links and a plain-language license.
  • A clear digital refund policy shown before payment, with a consent checkbox.
  • Legal and tax requirements reviewed with the competent authority.

Related articles