News and analysis on the attacks that target the moment of payment, and what to do about them.
Paid by Pix, order still pending? The five most common causes, how to find yours on the receipt and what to do in each case, including when it is a scam.
4 min read
Malware that swaps the Pix QR code can be on your computer or on the store's website. See how each works, how to find where it is and what to do in each case.
4 min read
A wrong Pix payment online can be your mistake or a QR code altered on the store's page. How to tell them apart, when MED applies and how to try to get it back.
4 min read
How to tell if a Pix QR code was altered in an online purchase, what to check in your banking app before you confirm and what to do if you have already paid.
4 min read
How to monitor checkout changes: what to watch on the payment page, how often, which methods see each type of change and how to set up alerts your team acts on.
6 min read
How Magecart reached Pix: the code that swaps the QR and Copia e Cola codes at checkout, what changes compared with cards and what stores must check on screen.
5 min read
What Magecart is, how the code gets onto the payment page, the cases that defined it and a checklist to protect your online store across card, Pix and boleto.
6 min read
Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.
6 min read
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 min read
PayNow, DuitNow, PromptPay, QR Ph, FPS and UPI have all become targets of QR scams. The recurring patterns, what authorities advise and a merchant checklist.
6 min read
Pix checkout scam: how the QR code and Copia e Cola code are swapped on legitimate stores, who is hit, the warning signs and what merchants and buyers can do.
5 min read
PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.
2 min read
How FPS and HKQR work in Hong Kong, which anti-scam protections already exist and what online merchants should do to stop QR codes being swapped at checkout.
4 min read
MED 2.0 traces scam money beyond the first account and, since September 1, gives 80 days to contest a refund. Here is what changes for online stores using Pix.
4 min read
How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.
4 min read
São Paulo's consumer agency warned about altered Pix QR codes in online shopping. What it said, what it means for stores and how to answer customers.
4 min read
How QR Ph, the Philippines' national QR standard, works, which scams target online stores and buyers, and what merchants can do to stop swapped codes.
4 min read
Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.
4 min read
Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.
4 min read
How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.
4 min read
How DDA and payee verification help buyers spot a swapped boleto, and what online stores that issue boletos must do for these checks to actually work.
4 min read
How DuitNow QR, Malaysia's national payment QR standard, works, and what online stores should do to keep the QR code at checkout from being swapped.
4 min read
What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.
4 min read
How the PromptPay QR scams flagged by Thai police work, and the best practices that stop the QR code on an online store's checkout from being swapped.
4 min read
How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.
4 min read
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 min read
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 min read
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 min read
How malware and browser extensions swap the Pix key or payment code on the buyer's computer, and why the online store still loses the sale and takes the blame.
4 min read
How SGQR brings PayNow and other schemes into one QR code in Singapore, which scams the authorities have documented and how to protect your checkout QR.
5 min read
A step-by-step guide for merchants when a Pix payment doesn't show up: reconciliation, swapped QR codes, the customer's MED dispute, evidence and notices.
5 min read
How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.
4 min read
A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.
4 min read
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 min read
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 min read
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 min read
How UPI QR code and VPA scams work, what the RBI and Indian police warn about, and the practical steps that protect an online store's payment page.
4 min read
How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.
4 min read
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 min read