Category
Checkout security: Proteside guides and analysis on security at the moment of payment, with practical steps to protect your business.
How to monitor checkout changes: what to watch on the payment page, how often, which methods see each type of change and how to set up alerts your team acts on.
6 min read
How Magecart reached Pix: the code that swaps the QR and Copia e Cola codes at checkout, what changes compared with cards and what stores must check on screen.
5 min read
What Magecart is, how the code gets onto the payment page, the cases that defined it and a checklist to protect your online store across card, Pix and boleto.
6 min read
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 min read
Pix checkout scam: how the QR code and Copia e Cola code are swapped on legitimate stores, who is hit, the warning signs and what merchants and buyers can do.
5 min read
Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.
4 min read
How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.
4 min read
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 min read
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 min read
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 min read
How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.
4 min read
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 min read
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 min read
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 min read
How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.
4 min read
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 min read