Actualités et analyses sur les attaques qui visent le moment du paiement, et sur la manière d’y faire face.
Pix payé et commande en attente : les cinq causes fréquentes, comment trouver la vôtre sur le justificatif et que faire dans chaque cas, arnaque comprise.
5 min de lecture
Le virus qui remplace le QR code Pix peut être sur votre ordinateur ou sur le site de la boutique. Comment chacun agit, comment savoir où il est et que faire.
5 min de lecture
Pix erroné sur un achat en ligne : votre erreur ou un QR modifié sur le site. Comment trancher, quand le MED s'applique et comment tenter de récupérer la somme.
5 min de lecture
Comment savoir si le QR code Pix a été modifié sur un achat en ligne, quoi vérifier dans l'appli bancaire avant de confirmer et que faire si vous avez payé.
5 min de lecture
Quoi surveiller sur la page de paiement, à quel rythme, quelles méthodes voient chaque type de modification et comment créer des alertes que l'équipe traite.
6 min de lecture
Comment Magecart est arrivé au Pix : le code qui remplace le QR et le Copia e Cola, ce qui change face à la carte et ce que la boutique doit vérifier.
5 min de lecture
Ce qu'est Magecart, comment le code entre sur la page de paiement, les affaires marquantes et une liste pour protéger l'e-commerce : carte, Pix et boleto.
7 min de lecture
Arnaque au Pix au paiement : comment le QR code et le Copia e Cola sont remplacés, qui est touché, les signes et ce que commerçant et client doivent faire.
5 min de lecture
Les champs de carte hébergés par le prestataire réduisent le périmètre PCI DSS, mais la page autour reste modifiable. Où le risque demeure et que faire.
5 min de lecture
Comment inventorier, autoriser et surveiller les scripts tiers de la page de paiement selon les exigences 6.4.3 et 11.6.1 du PCI DSS, et les erreurs à éviter.
5 min de lecture
Comment fonctionne le faux formulaire de carte superposé à la page de paiement, les signes qu'une boutique est touchée et les mesures concrètes pour le bloquer.
4 min de lecture
Comment un code caché sur la page de paiement copie numéro, date d'expiration et cryptogramme pendant la saisie, avec des cas réels et les bons réflexes.
5 min de lecture
Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.
6 min de lecture
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 min de lecture
PayNow, DuitNow, PromptPay, QR Ph, FPS and UPI have all become targets of QR scams. The recurring patterns, what authorities advise and a merchant checklist.
6 min de lecture
PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.
2 min de lecture
How FPS and HKQR work in Hong Kong, which anti-scam protections already exist and what online merchants should do to stop QR codes being swapped at checkout.
4 min de lecture
MED 2.0 traces scam money beyond the first account and, since September 1, gives 80 days to contest a refund. Here is what changes for online stores using Pix.
4 min de lecture
How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.
4 min de lecture
São Paulo's consumer agency warned about altered Pix QR codes in online shopping. What it said, what it means for stores and how to answer customers.
4 min de lecture
How QR Ph, the Philippines' national QR standard, works, which scams target online stores and buyers, and what merchants can do to stop swapped codes.
4 min de lecture
Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.
4 min de lecture
How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.
4 min de lecture
How DDA and payee verification help buyers spot a swapped boleto, and what online stores that issue boletos must do for these checks to actually work.
4 min de lecture
How DuitNow QR, Malaysia's national payment QR standard, works, and what online stores should do to keep the QR code at checkout from being swapped.
4 min de lecture
What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.
4 min de lecture
How the PromptPay QR scams flagged by Thai police work, and the best practices that stop the QR code on an online store's checkout from being swapped.
4 min de lecture
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 min de lecture
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 min de lecture
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 min de lecture
How malware and browser extensions swap the Pix key or payment code on the buyer's computer, and why the online store still loses the sale and takes the blame.
4 min de lecture
How SGQR brings PayNow and other schemes into one QR code in Singapore, which scams the authorities have documented and how to protect your checkout QR.
5 min de lecture
A step-by-step guide for merchants when a Pix payment doesn't show up: reconciliation, swapped QR codes, the customer's MED dispute, evidence and notices.
5 min de lecture
A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.
4 min de lecture
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 min de lecture
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 min de lecture
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 min de lecture
How UPI QR code and VPA scams work, what the RBI and Indian police warn about, and the practical steps that protect an online store's payment page.
4 min de lecture
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 min de lecture