Protection for DuitNow payments
DuitNow QR has become Malaysia’s standard for instant payments. The more universal the QR code, the more valuable it is to tamper with, and the more critical the integrity of the screen that displays it.
The payer is about to scan the DuitNow QR.
Illustrative animation
DuitNow · Malaysia
With DuitNow, the payer transfers money to a registered phone number, ID document or business, or scans the national DuitNow QR. The code displayed on the merchant’s page decides who gets paid.
How the attack happens without anyone noticing
DuitNow QR swapped
The checkout’s national QR code is replaced with another registered one, diverting the instant transfer.
Tampered destination ID
The displayed identifier is swapped for a similar one, with a plausible name on the app’s confirmation screen.
Manipulated amount
The displayed charge has its amount altered, and the difference is diverted.
How it works
Four layers between the scam and your payment
- 1
Record what’s legitimate
Proteside records the legitimate DuitNow QR, identifier and amount of the charge.
- 2
On-screen check
On the payer’s screen, it checks that what’s displayed is what was issued, including anything copied.
- 3
Block before confirmation
Tampering is blocked before confirmation.
- 4
Alert and evidence
An alert and a record of the attempt for your team.
The technical details of detection and blocking are Proteside’s proprietary technology and are shown in a demo, using your real scenario. How it works
Protection scope
What’s covered
- The DuitNow QR shown on your checkout, payment links and logged-in web areas
- DuitNow ID and amount shown to the payer
- Content copied with the “copy code” button
- Scripts and extensions that try to alter the payment page
Out of scope
- Printed QR codes or stickers displayed in physical stores
- Scams that happen outside your page (messages, phone calls or fake profiles)
- Settlement between institutions, which is already protected by the payment scheme’s infrastructure
Also protected by the same installation
One installation, every payment method in your checkout.
Frequently asked questions
Does it cover cross-border QR payments?
Yes. The check applies to whatever your page displays, including when the DuitNow QR is accepted by apps from neighboring countries.
Do I need to change my payment provider?
No. Proteside is a verification layer on the page; your provider and your payment flow stay exactly as they are.
Protection for DuitNow payments
Choose the path that fits your business: start a free trial for your store or book a demo built on your real payment flow.