Protection for Transferencias 3.0 payments
Argentina’s interoperable QR code made it possible to pay from any wallet, and created a single target: the code displayed on the merchant’s screen. If it’s tampered with, every wallet pays the scammer.
The payer is about to scan the QR code with their wallet.
Illustrative animation
Transferencias 3.0 · Argentina
Under Transferencias 3.0, the payer scans an interoperable QR code with the wallet or bank of their choice, and the money lands instantly in the merchant’s account. The integrity of the displayed QR code is the heart of the system.
How the attack happens without anyone noticing
Interoperable QR code swapped
The checkout QR code is replaced with another valid one, pointing to a pass-through account. Since every wallet accepts the code, the scam works across all of them at once.
Tampered alias or CVU
For charges that display an alias or CVU on the page, the identifier is swapped for a similar one, and the instant transfer can’t be undone.
Amount altered on display
The dynamic charge shown to the payer is manipulated to a higher amount.
How it works
Four layers between the scam and your payment
- 1
Record what’s legitimate
Proteside records the legitimate QR code, alias or CVU and amount of every charge generated.
- 2
On-screen check
On the payer’s screen, it checks that the displayed code and identifier are the ones issued.
- 3
Block before confirmation
Tampering is blocked before the code is scanned or the payment confirmed.
- 4
Alert and evidence
An alert and a record of the attempt for your team.
The technical details of detection and blocking are Proteside’s proprietary technology and are shown in a demo, using your real scenario. How it works
Protection scope
What’s covered
- The interoperable QR code shown on your checkout, payment links and logged-in web areas
- Alias, CVU and amount shown to the payer
- Content copied with the “copy code” button
- Scripts and extensions that try to alter the payment page
Out of scope
- Printed QR codes or stickers displayed in physical stores
- Scams that happen outside your page (messages, phone calls or fake profiles)
- Settlement between institutions, which is already protected by the payment scheme’s infrastructure
Also protected by the same installation
One installation, every payment method in your checkout.
Frequently asked questions
Doesn’t the payments infrastructure stop this scam?
No. It guarantees settlement between participants, not what the merchant’s page displays. A QR code tampered with at the source produces a valid payment to the wrong account.
Does it work for physical stores showing a QR code on a screen?
Proteside protects QR codes displayed on web pages: checkouts, payment request links and merchant dashboards. Printed QR codes are out of scope.
Protection for Transferencias 3.0 payments
Choose the path that fits your business: start a free trial for your store or book a demo built on your real payment flow.