الانتقال إلى المحتوى

أمن المدفوعات الإلكترونية

أخبار وتحليلات عن الهجمات التي تستهدف لحظة الدفع، وما يمكن فعله حيالها.

مزيد من المقالات بالإنجليزية

  • الامتثال لمعيار PCI DSSأدلة عملية

    How to choose a tool for PCI DSS requirements 6.4.3 and 11.6.1

    Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.

    6 دقائق للقراءة

  • أمان صفحة الدفعالامتثال لمعيار PCI DSS

    Why a script inventory misses the swapped QR code

    Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.

    6 دقائق للقراءة

  • الاحتيال والخداعأخبار

    QR code scams in Asia: what six markets teach online sellers

    PayNow, DuitNow, PromptPay, QR Ph, FPS and UPI have all become targets of QR scams. The recurring patterns, what authorities advise and a merchant checklist.

    6 دقائق للقراءة

  • الامتثال لمعيار PCI DSSأدلة عملية

    PCI DSS 6.4.3 and 11.6.1: what your payment page needs

    PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.

    2 دقائق للقراءة

  • أدلة عمليةالاحتيال والخداع

    FPS and HKQR in Hong Kong: QR scams and good practices

    How FPS and HKQR work in Hong Kong, which anti-scam protections already exist and what online merchants should do to stop QR codes being swapped at checkout.

    4 دقائق للقراءة

  • الاحتيال والخداعالعملات المستقرة والمشفرة

    Address poisoning: lookalike addresses that fool even experts

    How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.

    4 دقائق للقراءة

  • أمان صفحة الدفعالامتثال لمعيار PCI DSS

    Do gateway-hosted card fields solve everything?

    Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.

    4 دقائق للقراءة

  • الامتثال لمعيار PCI DSSأدلة عملية

    Pix security rules: the central bank's part and the merchant's

    Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.

    4 دقائق للقراءة

  • أدلة عمليةالاحتيال والخداع

    Transferencias 3.0: Argentina's interoperable QR and tampering

    How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.

    4 دقائق للقراءة

  • أدلة عمليةالاحتيال والخداع

    DuitNow QR in Malaysia: how it works and how to stop QR swaps

    How DuitNow QR, Malaysia's national payment QR standard, works, and what online stores should do to keep the QR code at checkout from being swapped.

    4 دقائق للقراءة

  • أدلة عمليةPix

    Contactless Pix and no-typing payments: the new risks

    What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.

    4 دقائق للقراءة

  • أمان صفحة الدفعالامتثال لمعيار PCI DSS

    Third-party scripts on the payment page: what PCI DSS requires

    How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.

    4 دقائق للقراءة

  • أدلة عمليةأمان صفحة الدفع

    Pix Automático: what to check on the authorization screen

    How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.

    5 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Crypto wallet address swaps: the scam with no chargeback

    How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.

    4 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Fake payment form at checkout: how to spot and block it

    How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.

    4 دقائق للقراءة

  • أدلة عمليةPix

    Pix security checklist for online stores

    A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.

    4 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Tampered boleto: how the payment line is swapped on screen

    How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.

    4 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Compromised plugins and scripts: the way into Pix checkout fraud

    How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.

    4 دقائق للقراءة

  • أدلة عمليةأمان صفحة الدفع

    Static vs dynamic Pix QR codes: what changes at checkout

    The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.

    4 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Card data theft at checkout: how the copying happens

    How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.

    4 دقائق للقراءة

  • الاحتيال والخداعأمان صفحة الدفع

    Tampered Pix copy-and-paste codes: how the swap works

    How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.

    4 دقائق للقراءة

الاشتراك عبر RSS