Digital wallet for events: how to implement cashless with top-ups and refunds

Five years ago, talking about cashless at a festival was talking about the future. Today it means talking about the present and, in many formats, about the only model that makes sense. European festivals that have migrated completely to cashless report reductions in average transaction time of more than 70% and increases in average spend per attendee of between 20% and 40%.

But a poorly implemented cashless system is worse than having no cashless at all. Lost balances with no refund, top-ups that take ages to appear, validation failures at the bar at 11 p.m., frustrated attendees who broadcast their complaints on social media for days. The difference between a cashless system that works and one that collapses isn't in the concept: it's in how you design the operations for top-up, refund, atomicity, and reconciliation.

This guide covers every piece of implementing a digital wallet for events in 2026: from how the attendee loads their balance to how the organizer balances the financial close of the event. No theory. With the real operations that separate profitable cashless projects from those that generate more complaints than revenue.

What a digital event wallet is

A digital event wallet is a preloaded balance linked to the attendee and to a physical identifier (NFC wristband, card, or mobile app) that allows payment inside the venue without a card or cash. The balance is loaded before or during the event and is spent at bars, food trucks, merchandise stands, and any integrated point of sale.

Unlike a generic prepaid system (gift card, vouchers), a digital event wallet includes three layers that change the experience:

• Identity: the balance is linked to a specific person, not to an anonymous object.
• Real-time operations: each transaction is processed instantly and deducted from the available balance.
• Refund of unspent balance: the user recovers what they didn't use, which maintains trust for future editions.

If you want to see how this concept fits into the complete ticketing ecosystem, we have a post about it in our ticketing glossary.

Top-up: the first point of contact and the first point of friction

Online top-up before the event

Online top-up before the event is the ideal option: the attendee loads their balance from home, with no queues, using a card or their usual payment method. They arrive at the venue with their wristband already active and make their first purchase without going through physical top-up points.

Benefits for the organizer:

• Advance cash: revenue before the event, which improves cash flow.
• Fewer queues on D-day: every attendee who tops up online is one less in the line at the physical top-up point.
• Forecasting data: the balance loaded pre-event is a real indicator of expected consumption.
• Upsell opportunity: the top-up flow can offer bonuses (top up €50 and get €5 extra), bundles, or pre-purchased products.

For it to work, the online payment flow must be as easy as any e-commerce purchase. If it requires complex registration, unnecessary data, or verifications that are perceived as invasive, conversion drops and the attendee decides to top up at the box office. Which kills the main benefit of the option.

Physical top-up points at the venue

Despite online top-up, there will always be a percentage of the audience that arrives without having loaded a balance. The standard operational rule is to set up between 1 and 2 physical top-up points per 1,000 expected attendees. Below that ratio, the queues at the top-up box office compete with the queues at the bars, and the experience collapses.

Physical points must accept both card and cash (card-only operation excludes a segment of the audience and generates legitimate complaints). The operator loads the wristband with a POS terminal, the balance appears in seconds, and the attendee moves on. The complete process should not take more than 90 seconds per person.

Top-up at the bar

The most convenient option for the attendee is top-up at the bar: when they run out of balance, the bartender offers to top them up at the very point where they're ordering. Without moving, without an extra queue, without losing their turn. The conversion from "ran out of balance" to "topped up and kept spending" rises significantly with this option.

There's an operational risk: if every bartender can top up, the pressure on the terminals multiplies at peak time and the bartender gets distracted from their main job (serving). The best practice is to enable top-up on only some terminals per bar (typically the one at the far end) and to have a dedicated top-up operator at large bars.

Bonuses and incentive mechanics

Incentivized top-up

A common mechanic: "Top up €50 and get €55 in balance." Three benefits for the organizer:

• Increases the average loaded balance: the attendee who was going to load €30 loads €50 because of the bonus.
• Drives spending: with more available balance, the psychological barrier to spending drops.
• Unspent balance goes back to the organizer: whatever is left unspent and unclaimed becomes additional revenue.

The golden rule is that the mechanic must be transparent. "Top up X and get Y extra" is clear. Opaque mechanics with hard-to-read conditions generate complaints and erode trust. E-commerce regulation applies to any cashless offer: clarity in communication is a legal obligation.

Dedicated balance by category

Some events move to the next generation of mechanics: balance segmented by category. For example, an attendee who buys the "Festival + €30 in drinks + €20 in food" bundle receives two separate balances that can only be spent in their corresponding category. This makes it possible to offer packages with real perceived value without the organizer losing control over where consumption happens.

Real-time promos

If your platform supports dynamic promotions, you can launch incentives during the event: "double the balance loaded during the next hour." Useful for driving consumption in off-peak moments (afternoons with fewer people, lineup change-over moments) and for creating urgency.

Balance refunds: the piece that defines trust

Why it matters more than it seems

Unspent balance is the touchstone of cashless. If the attendee knows they'll recover what they didn't use without friction, they load without fear, spend freely, and recommend the system. If the refund is difficult, opaque, or feels like a trap, the entire cashless setup of the event is tainted.

In most modern European festivals, between 5% and 15% of the loaded balance is never claimed. Part of it is small balances the attendee decides not to recover for simplicity ("€3 isn't worth the hassle"). Another part is abandonment due to a difficult process. The difference between these two cases defines whether you have built trust or lost revenue forever.

Refund options

Three common flows:

Automatic refund to the original card: the balance is refunded automatically, with no action from the attendee, in the days following the event. It's the cleanest model but requires solid payment infrastructure and full traceability of every transaction.

Refund requested online: the attendee goes to a portal or app, enters their wristband or ID, and requests the refund. The reimbursement arrives in X days. It works when the portal is accessible, mobile-first, and free of unnecessary steps.

Refund at the box office during a defined period: the attendee goes to a physical point during a time window after the event. A useful but limited option; it requires the audience to be able to return to the venue within the deadline, which excludes anyone who traveled.

The best practice is to offer at least two options in parallel, with the automatic one as the default whenever it's technically feasible.

Refund policy and communication

The policy must be public from the moment of the first top-up, not hidden on an internal event page. Deadline, option, fee if any (ideally zero), minimum refundable balance (if any, ideally zero), procedure. The clearer it is, the fewer support queries and the lower the risk of formal complaints.

Atomicity and double-spend prevention

The technical problem

Imagine two simultaneous transactions at different bars, both against the same wallet with a €10 balance. One requests €7 and the other requests €6. If the system processes both in parallel without atomicity, both are approved and the final balance is −€3. Result: two drinks served and only €10 charged. A direct loss.

At an event with thousands of transactions per minute at peak time, this scenario isn't theoretical: it happens constantly if the system doesn't have blocking atomicity per wallet.

How it's solved

A professional system implements per-wallet atomicity: when a transaction is in progress against a balance, that balance is locked for any other concurrent transaction until the first one is confirmed or fails. If a second transaction arrives during the lock, it waits (microseconds) or is rejected with a clear reason ("wallet in use, try again").

Atomicity must also apply to offline mode: if a wristband has been paying offline at a bar for 10 minutes without syncing, those payments are reconciled as a group when connectivity returns, not transaction by transaction in a disordered way.

Without this layer, the entire cashless system has a structural vulnerability that surfaces at exactly the worst moment: the peak hour on Saturday.

Operations on the day of the event

Before the gates open

Wristbands or cards are loaded with the balance pre-purchased online, associated with the attendee's ticket, and handed out at check-in. The wristband-to-attendee association must be instant: the attendee doesn't wait, the operator reads the QR code on the ticket with a scanner, scans the wristband with the NFC reader, and the system confirms the link.

At large events, this sync happens in batches: the attendee receives the wristband on entry, scans their entry QR, and the system links the two identifiers in milliseconds.

During the event

Each transaction deducts balance in real time. The attendee can check their remaining balance at any time from their app, by reading the wristband at self-service readers, or by asking the bartender. Continuous transparency reduces disputes at the bar.

The organizer's team monitors in real time:

• Total balance in circulation (loaded minus spent)
• Spending distribution by bar and product
• Wristbands with low balance (an opportunity to push top-up at the bar)
• Errors and failed validations (a sign of a technical problem)

Closing the event

When the event ends, the system freezes each wallet's balance. Transactions pending synchronization are processed in batch. A balance sheet is generated: total balance loaded, balance consumed, balance pending refund, PSP fees, adjustments for incidents.

More on the integrated closing of bars and POS in our guide to POS for events.

Financial reconciliation

What has to be balanced

The financial close of a cashless event balances five columns:

1. 1Loaded balance: what the attendee put into their wallet (online + physical top-ups + top-ups at the bar).
2. 2Consumed balance: what was spent at bars, food trucks, merchandise stands, and other points.
3. 3Balance pending refund: the unspent balance, flagged for reimbursement.
4. 4PSP fees: what Stripe or another provider charges to process payments.
5. 5Revenue for subcontracted bars: if the bars are operated by third parties under a revenue-share agreement, their portion of the consumption.

The five columns have to balance to the cent. Cent-level discrepancies are normal due to rounding. Euro-level discrepancies are a sign of an operational or technical problem that needs to be investigated.

Process timing

A professional close with an integrated cashless system can be completed in 24–48 hours after the event. Without an integrated system, the close can take two weeks and there are always discrepancies that get written off as losses.

Compliance and custody of funds

The legal detail many overlook

The balance loaded by the attendee is money that isn't yours yet until it's spent. While it sits in the wallet, the organizer is holding customer funds in custody. In Spain and the European Union, holding third-party funds in custody without a license is a regulatory infringement that can have serious consequences.

There are three valid ways to operate:

• Work with an authorized PSP (Stripe, Adyen, etc.) that processes the payments and holds the funds in segregated accounts. It's the standard option and the one we recommend for 95% of events.
• Hold your own EMI or payment license, which requires authorization from the Bank of Spain and extremely high operating costs. It only makes sense for very large volumes and recurring operators.
• Use a wallet infrastructure from a provider with the corresponding license: this is what modern cashless platforms offer, taking on the regulated part and leaving the operations to the organizer.

If your provider doesn't clearly explain how the loaded funds are held in custody, assume there's a latent legal problem. More on payment methods at events in our dedicated guide.

In-house cashless vs external cashless

External cashless (specialized provider)

The organizer hires a provider that supplies hardware, software, operations, and, in many cases, on-site staff. Integration with ticketing and POS varies: if the provider is different from your sales platform's provider, the integration can be fragile.

Pros: speed of implementation, no technical development, professional support.

Cons: dependence on the provider, limited integration with the rest of the ecosystem, fees that can be high.

Cashless integrated into the ticketing platform

The ticketing, access control, POS, and cashless systems are all from the same provider. The integration is native: the validated ticket activates the wristband, the balance loaded online appears from the first scan, the POS bars are the same points where the balance is spent, and the close is done in a single dashboard.

Pros: a coherent experience, less operational friction, unified data, integrated close.

Cons: the provider covers the entire spectrum, less flexibility if you want to swap out one piece.

The clear trend since 2024 is toward cashless integrated into ticketing platforms, especially at medium and large recurring events where the operational friction of managing two providers isn't worth it.

Common mistakes when implementing cashless

Launching without testing the refund

The day of the event sorts out the top-up and consumption operations. The refund comes later and, if it hasn't been tested under real conditions, it's where the problems blow up. Before the first real event, test the complete refund flow with simulated attendees and audited data.

Underestimating audience education

Cashless works if the attendee understands it. If your event attracts an audience unfamiliar with it, prepare clear communication in advance: how to top up online, what the wristband looks like, what to do if they run out of balance, how to recover what they didn't spend. Short videos, FAQs, graphic instructions. Without this, the first cashless event for an inexperienced audience is always the hardest.

Overloading the physical top-up points

If your model depended 100% on online top-up, you could save yourself the physical points. In practice, between 30% and 60% of the audience tops up on-site at their first cashless event. Calibrate the physical points for that real demand, not for the optimistic scenario.

Not having a plan B for connectivity failures

The offline system must work 100% without a network. Before the event, simulate connectivity outages and verify that transactions are still processed locally and sync correctly when the network returns.

Communicating the refund policy poorly

If the first time the attendee learns about the refund process is by reading the fine print on their wristband, you've lost. Communication must be proactive: a post-event email, a post-event social media post with the steps, automatic reminders before the deadline ends.

Conclusion

Cashless is no longer a question of "whether" but of "how." Well implemented, it transforms operations: bars three times faster, a significantly higher average spend, real-time data to optimize, a clean financial close, and the elimination of cash handling at the venue.

Poorly implemented, it can damage the event's reputation for years. The difference is in the details: frictionless top-up, transparent refunds, technical atomicity, regulatory compliance, and reconciliation to the cent.

Modern platforms integrate cashless with ticketing and POS from the start, which eliminates the operational seams created by separate systems. The wristband validates entry, pays at bars, records consumption, and enables a balance refund, all within a single ecosystem.

Want to see how a digital wallet integrated with ticketing and POS works on a platform designed for professional events? Request a demo of Futura Tickets and we'll walk you through a complete event in 30 minutes: from online top-up to financial close, with real operational data.