Berita dan analisis tentang serangan yang menyasarkan saat pembayaran, dan apa yang perlu dilakukan.
Pix sudah dibayar tetapi pesanan masih tertunda: lima punca paling biasa, cara mengenal pasti punca anda melalui bukti pembayaran dan tindakan bagi setiap kes.
4 minit bacaan
Virus yang menukar kod QR Pix mungkin ada dalam komputer anda atau di laman web kedai. Cara setiap satu bertindak, cara mencari puncanya dan tindakannya.
4 minit bacaan
Pix salah semasa membeli dalam talian mungkin silap anda atau kod QR diubah di kedai. Cara membezakannya, bila MED terpakai dan langkah mendapatkan semula wang.
4 minit bacaan
Cara tahu jika kod QR Pix telah diubah semasa membeli dalam talian, apa yang perlu disemak dalam aplikasi bank dan apa perlu dibuat jika sudah membayar.
4 minit bacaan
Cara memantau perubahan pada checkout: apa yang dipantau, berapa kerap, kaedah yang mengesan setiap perubahan dan cara membina amaran yang dilayan pasukan.
5 minit bacaan
Cara Magecart sampai ke Pix: kod yang menukar kod QR dan Copia e Cola di checkout, apa bezanya dengan kad dan apa yang perlu disemak kedai pada skrin.
4 minit bacaan
Apa itu Magecart, cara kod masuk ke halaman pembayaran, kes yang membentuk isu ini dan senarai semak untuk melindungi e-dagang pada kad, Pix dan boleto.
5 minit bacaan
DuitNow, PayNow, PromptPay, QR Ph, FPS dan UPI kini menjadi sasaran penipuan kod QR. Corak berulang, nasihat pihak berkuasa dan senarai semak untuk peniaga.
6 minit bacaan
Penipuan Pix di checkout: cara kod QR dan Copia e Cola ditukar di kedai yang sah, siapa terjejas, tanda amaran dan apa yang perlu dibuat peniaga dan pelanggan.
4 minit bacaan
Cara DuitNow QR, standard QR pembayaran kebangsaan Malaysia, berfungsi dan langkah kedai dalam talian bagi mengelakkan kod QR di checkout ditukar.
4 minit bacaan
Cara SGQR menghimpunkan PayNow dan skim lain dalam satu kod QR di Singapura, penipuan yang direkodkan pihak berkuasa dan cara melindungi kod QR di checkout.
4 minit bacaan
Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.
6 minit bacaan
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 minit bacaan
PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.
2 minit bacaan
How FPS and HKQR work in Hong Kong, which anti-scam protections already exist and what online merchants should do to stop QR codes being swapped at checkout.
4 minit bacaan
MED 2.0 traces scam money beyond the first account and, since September 1, gives 80 days to contest a refund. Here is what changes for online stores using Pix.
4 minit bacaan
How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.
4 minit bacaan
São Paulo's consumer agency warned about altered Pix QR codes in online shopping. What it said, what it means for stores and how to answer customers.
4 minit bacaan
How QR Ph, the Philippines' national QR standard, works, which scams target online stores and buyers, and what merchants can do to stop swapped codes.
4 minit bacaan
Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.
4 minit bacaan
Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.
4 minit bacaan
How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.
4 minit bacaan
How DDA and payee verification help buyers spot a swapped boleto, and what online stores that issue boletos must do for these checks to actually work.
4 minit bacaan
What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.
4 minit bacaan
How the PromptPay QR scams flagged by Thai police work, and the best practices that stop the QR code on an online store's checkout from being swapped.
4 minit bacaan
How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.
4 minit bacaan
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 minit bacaan
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 minit bacaan
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 minit bacaan
How malware and browser extensions swap the Pix key or payment code on the buyer's computer, and why the online store still loses the sale and takes the blame.
4 minit bacaan
A step-by-step guide for merchants when a Pix payment doesn't show up: reconciliation, swapped QR codes, the customer's MED dispute, evidence and notices.
5 minit bacaan
How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.
4 minit bacaan
A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.
4 minit bacaan
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 minit bacaan
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 minit bacaan
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 minit bacaan
How UPI QR code and VPA scams work, what the RBI and Indian police warn about, and the practical steps that protect an online store's payment page.
4 minit bacaan
How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.
4 minit bacaan
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 minit bacaan