Admins choose which Razorpay methods appear in checkout: UPI, card, netbanking, wallet, EMI and pay later. Display order prefers UPI first for Indian users. Checkout theme color is configurable. After payment, the server verifies the HMAC signature (order_id|payment_id) before crediting points, so a forged browser success cannot add balance.