Skip to content
PayNow / SGQRSingapore

Protection for PayNow and SGQR payments

Singapore unified its payment QR codes under SGQR: convenient for payers, and a single point of attack on the merchant’s screen.

See pricing
PayNow / SGQR: 1. Normal purchase: The payer is about to scan the SGQR. 2. Scam attempt: The QR code is swapped: the UEN would now be a different one. 3. Blocked: Proteside detects the swap and blocks it. 4. Payment intact: SGQR intact. The store gets paid.

The payer is about to scan the SGQR.

1/4 · Normal purchase

Illustrative animation

PayNow / SGQR · Singapore

With PayNow, businesses receive instant transfers using identifiers such as their UEN; SGQR brings several schemes together in one QR code. The code displayed on the page decides who gets paid.

How the attack happens without anyone noticing

  • SGQR swapped on the page

    The checkout’s unified QR code is replaced with another one, routing the payment to the scammer’s account.

  • Tampered UEN

    For PayNow charges displayed with an identifier, the UEN is swapped for another registered one, and the app shows a plausible name and the payer confirms.

  • Manipulated amount

    Dynamic charges have their amount altered on display, diverting the difference.

How it works

Four layers between the scam and your payment

  • 1

    Record what’s legitimate

    Proteside records the legitimate SGQR, PayNow identifier and amount of the charge.

  • 2

    On-screen check

    On the payer’s screen, it checks that the displayed code and destination are the ones issued.

  • 3

    Block before confirmation

    Any mismatch is blocked before confirmation in the banking app.

  • 4

    Alert and evidence

    An alert and a record of the attempt for your team.

The technical details of detection and blocking are Proteside’s proprietary technology and are shown in a demo, using your real scenario. How it works

Protection scope

What’s covered

  • The SGQR shown on your checkout, payment links and logged-in web areas
  • UEN, PayNow identifier and amount shown to the payer
  • Content copied with the “copy code” button
  • Scripts and extensions that try to alter the payment page

Out of scope

  • Printed QR codes or stickers displayed in physical stores
  • Scams that happen outside your page (messages, phone calls or fake profiles)
  • Settlement between institutions, which is already protected by the payment scheme’s infrastructure

Also protected by the same installation

One installation, every payment method in your checkout.

Frequently asked questions

Does the check depend on the payer’s bank?

No. Proteside works on the page that displays the charge, before the banking app: with the QR code intact, any participant settles to the right destination.

Does it cover PayNow and cards on the same page?

Yes. The same installation checks every payment method shown at checkout.

Protection for PayNow and SGQR payments

Choose the path that fits your business: start a free trial for your store or book a demo built on your real payment flow.

See pricing