Skip to content
FPS / HKQRHong Kong

Protection for FPS and HKQR payments

The Faster Payment System settles transfers in seconds: fast for merchants, and fast for scams. The screen that displays the FPS ID or HKQR is the point that needs watching.

See pricing
FPS / HKQR: 1. Normal purchase: The payer is about to scan the HKQR. 2. Scam attempt: The QR code is swapped: the FPS ID would now be a different one. 3. Blocked: Proteside detects the swap and blocks it. 4. Payment intact: HKQR intact. The store gets paid.

The payer is about to scan the HKQR.

1/4 · Normal purchase

Illustrative animation

FPS / HKQR · Hong Kong

With Hong Kong’s FPS, the payer transfers money instantly using a registered FPS ID, phone number or email, or the standardized QR code (HKQR). What the page displays determines where the transfer goes.

How the attack happens without anyone noticing

  • HKQR swapped

    The checkout’s standardized QR code is replaced with another valid one, and instant settlement completes the scam in seconds.

  • Tampered FPS ID

    The identifier shown or copied is swapped for the scammer’s FPS ID, with a plausible name in the banking app.

  • Altered amount

    The dynamic charge is manipulated on display, charging more than is owed.

How it works

Four layers between the scam and your payment

  • 1

    Record what’s legitimate

    Proteside records the legitimate HKQR, FPS ID and amount of the charge.

  • 2

    On-screen check

    In the payer’s browser, it checks that what’s displayed matches what was issued.

  • 3

    Block before confirmation

    It blocks tampering before confirmation, the only window available on a rail that settles in seconds.

  • 4

    Alert and evidence

    An alert and a record of the attempt for your team.

The technical details of detection and blocking are Proteside’s proprietary technology and are shown in a demo, using your real scenario. How it works

Protection scope

What’s covered

  • The HKQR shown on your checkout, payment links and logged-in web areas
  • FPS ID and amount shown to the payer
  • Content copied with the “copy code” button
  • Scripts and extensions that try to alter the payment page

Out of scope

  • Printed QR codes or stickers displayed in physical stores
  • Scams that happen outside your page (messages, phone calls or fake profiles)
  • Settlement between institutions, which is already protected by the payment scheme’s infrastructure

Also protected by the same installation

One installation, every payment method in your checkout.

Frequently asked questions

Does it work on pages in Chinese and English?

Yes. Proteside checks the integrity of the payment details on display, whatever the page’s language.

What if the customer pays through their banking app by scanning the QR code?

That’s exactly the scenario covered: we make sure the scanned QR code is the legitimate one. From there, settlement goes to the right destination.

Protection for FPS and HKQR payments

Choose the path that fits your business: start a free trial for your store or book a demo built on your real payment flow.

See pricing