Design a Social Gifting Feature

Problem statement

Design a social gifting feature that lets users send virtual gifts—stickers, badges, animated items, and purchased premium gifts—to each other inside a social platform. A sender spends coins or real money; a recipient receives a notification, a profile or feed moment, and, for monetized creators, convertible earnings; live audiences see the gift as a real-time overlay and leaderboard movement. The feature spans coin purchase, catalog browsing, atomic value transfer, delivery fan-out, earnings accounting, refunds, and fraud control.

The distinctive engineering fact is that gifting is simultaneously three systems that hate each other. It is a payment system, where a double-spend or lost posting is money and therefore requires serializable, double-entry, idempotent semantics. It is a social fan-out system, where one gift can produce a recipient notification, a feed story, and a broadcast to hundreds of thousands of live viewers, which demands eventual consistency and coalescing. And it is a real-time system, where the overlay must appear within half a second during a live stream even while the ledger is still committing. A strong answer keeps these planes separate and defines exactly which one may degrade first.

Why the problem is distinctive

A like or a comment can retry invisibly. A gift cannot: the sender's balance decreased, so every retry path must be idempotent and every failure must reconcile to a durable truth. A feed post can be eventually visible; a gift overlay that lands ten seconds late destroys the social moment and the whale's willingness to spend. And unlike pure virtual reactions, purchased gifts touch real money, app-store fees, chargebacks, anti-money-laundering rules, and creator payouts, so the design must include compliance and fraud as architecture, not as an afterthought.

Public operating baseline versus design assumptions

Public evidence shows the category is real and large. TikTok reports more than one billion monthly users and runs a two-currency live gifting economy where purchased coins become gifts and creators accumulate diamonds that cash out through payment providers. Twitch documents that each bit cheered pays the streamer one US cent and supports community sub gifting that bursts fan-out randomly across a channel's viewers. Meta's Stars program likewise pays creators one cent per star on Live and Reels, and its earlier Facebook Gifts experiment (2012-2014) showed that physical-goods gifting failed where virtual goods succeeded. These are cited public facts used for context only.

For capacity planning this answer explicitly assumes a mature platform with 500M MAU, 120M DAU, 10M gift sends per ordinary day, a 6x holiday peak, 1.5M concurrent live viewers at peak, and 3 postings per gift. Unless tied to a citation, every number is a stated design assumption, target, or budget.

The four architectural planes

1. Commerce plane: payment providers, app-store IAP receipt validation, coin wallet, double-entry ledger, creator earnings, payouts, refunds, chargebacks.
2. Social plane: catalog, gift metadata, feed stories, profile showcases, notification fan-out over the social graph.
3. Live real-time plane: room-scoped WebSocket overlay broadcast, gift animations, leaderboards, coalescing under hot rooms.
4. Trust plane: purchase and send velocity rules, collusion and money-laundering detection, content moderation of gift notes at the architecture level, enforcement ladder, audit.

The interview win is stating early: the ledger is the source of truth; overlays, notifications, and leaderboards are projections that may lag, coalesce, or shed load, but never define balance.