實用指南詐騙與欺詐
已付 Pix，訂單仍然待處理：應該怎樣做
已付 Pix 但訂單仍待處理：五個最常見的原因，如何從付款收據找出你屬於哪一種，以及每種情況的處理方法，包括遇上詐騙時。
2 分鐘閱讀
網上付款安全
針對付款一刻的攻擊資訊與分析，以及應對方法。
- 詐騙與欺詐Pix
調包 Pix QR Code 的病毒：在你的裝置還是在網店？
調包 Pix QR Code 的病毒，可能在你的電腦，也可能在網店網站。了解兩者如何運作、如何找出問題所在，以及每種情況的處理方法。
2 分鐘閱讀
- 實用指南詐騙與欺詐
網購 Pix 付錯款：是失誤還是詐騙？應該怎樣做
網購 Pix 付錯款，可能是你自己出錯，也可能是網店的 QR Code 被竄改。教你如何分辨、MED 何時適用，以及嘗試取回款項的步驟。
2 分鐘閱讀
- 詐騙與欺詐實用指南
Pix QR Code 被竄改：付款前如何分辨，出事後怎樣做
網購時如何分辨 Pix QR Code 是否被竄改，確認付款前要在銀行 App 核對甚麼，以及已經付款後應該怎樣做。
2 分鐘閱讀
- 結賬安全PCI DSS 合規
如何監察結帳頁變更：監察甚麼、何時監察
如何監察結帳頁變更：付款頁面要監察甚麼、多久一次、哪種方法看得到哪類變更，以及如何設置團隊真正會處理的警報。
2 分鐘閱讀
- 詐騙與欺詐結賬安全
Pix 版 Magecart：調包 QR Code 而非盜取信用卡的攻擊
Magecart 如何延伸到 Pix：在結帳頁調包 QR Code 和 Copia e Cola 的程式碼，與信用卡攻擊有何不同，以及網店要在螢幕上核對甚麼。
2 分鐘閱讀
- 詐騙與欺詐結賬安全
Magecart 是甚麼？網店如何防範，由信用卡到 Pix
Magecart 是甚麼、惡意程式碼如何進入付款頁面、幾宗標誌性案例，以及保護網店信用卡、Pix 和 boleto 付款的檢查清單。
2 分鐘閱讀
- 詐騙與欺詐新聞
亞洲二維碼支付騙案：六個市場給網店商戶的啟示
轉數快、PayNow、DuitNow、PromptPay、QR Ph 和 UPI 都成了二維碼騙案的目標。本文整理常見手法、當地監管機構與警方的建議，並附商戶自查清單。
2 分鐘閱讀
- 詐騙與欺詐結賬安全
Pix 結帳詐騙：QR Code 怎樣被調包，如何防範
Pix 結帳詐騙如何在正規網店調包 QR Code 和 Pix Copia e Cola，誰會受影響、有哪些跡象，以及商戶和顧客應該怎樣做。
2 分鐘閱讀
- 實用指南詐騙與欺詐
轉數快與 HKQR：香港二維碼騙案與網店防範要點
了解轉數快及 HKQR 如何運作、香港現有的防騙措施，以及網店應如何防止付款頁面上的二維碼被調包，在買家確認付款前堵截騙徒。
2 分鐘閱讀
更多英文文章
- PCI DSS 合規實用指南
How to choose a tool for PCI DSS requirements 6.4.3 and 11.6.1
Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.
6 分鐘閱讀
- 結賬安全PCI DSS 合規
Why a script inventory misses the swapped QR code
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 分鐘閱讀
- PCI DSS 合規實用指南
PCI DSS 6.4.3 and 11.6.1: what your payment page needs
PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.
2 分鐘閱讀
- 新聞實用指南
MED 2.0: the new Pix refund rules and what merchants should know
MED 2.0 traces scam money beyond the first account and, since September 1, gives 80 days to contest a refund. Here is what changes for online stores using Pix.
4 分鐘閱讀
- 詐騙與欺詐穩定幣及加密貨幣
Address poisoning: lookalike addresses that fool even experts
How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.
4 分鐘閱讀
- 新聞詐騙與欺詐
Procon-SP warns of scam that alters Pix QR codes at online stores
São Paulo's consumer agency warned about altered Pix QR codes in online shopping. What it said, what it means for stores and how to answer customers.
4 分鐘閱讀
- 實用指南詐騙與欺詐
QR Ph in the Philippines: the national QR and online store scams
How QR Ph, the Philippines' national QR standard, works, which scams target online stores and buyers, and what merchants can do to stop swapped codes.
4 分鐘閱讀
- 結賬安全PCI DSS 合規
Do gateway-hosted card fields solve everything?
Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.
4 分鐘閱讀
- PCI DSS 合規實用指南
Pix security rules: the central bank's part and the merchant's
Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.
4 分鐘閱讀
- 實用指南詐騙與欺詐
Transferencias 3.0: Argentina's interoperable QR and tampering
How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.
4 分鐘閱讀
- 實用指南Boleto
DDA and payee checks: best practices for issuing boletos
How DDA and payee verification help buyers spot a swapped boleto, and what online stores that issue boletos must do for these checks to actually work.
4 分鐘閱讀
- 實用指南詐騙與欺詐
DuitNow QR in Malaysia: how it works and how to stop QR swaps
How DuitNow QR, Malaysia's national payment QR standard, works, and what online stores should do to keep the QR code at checkout from being swapped.
4 分鐘閱讀
- 實用指南Pix
Contactless Pix and no-typing payments: the new risks
What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.
4 分鐘閱讀
- 詐騙與欺詐實用指南
PromptPay QR scams: best practices for online stores in Thailand
How the PromptPay QR scams flagged by Thai police work, and the best practices that stop the QR code on an online store's checkout from being swapped.
4 分鐘閱讀
- 結賬安全PCI DSS 合規
Third-party scripts on the payment page: what PCI DSS requires
How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.
4 分鐘閱讀
- 實用指南結賬安全
Pix Automático: what to check on the authorization screen
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 分鐘閱讀
- 實用指南結賬安全
CoDi in Mexico: how QR payment requests work and what to watch
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 分鐘閱讀
- 詐騙與欺詐結賬安全
Crypto wallet address swaps: the scam with no chargeback
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 分鐘閱讀
- 詐騙與欺詐Pix
Extensions and malware that swap Pix on the customer's computer
How malware and browser extensions swap the Pix key or payment code on the buyer's computer, and why the online store still loses the sale and takes the blame.
4 分鐘閱讀
- 實用指南詐騙與欺詐
PayNow and SGQR: how the unified QR works and where the risks are
How SGQR brings PayNow and other schemes into one QR code in Singapore, which scams the authorities have documented and how to protect your checkout QR.
5 分鐘閱讀
- 實用指南詐騙與欺詐
Customer paid by Pix but the order didn't go through: what to do
A step-by-step guide for merchants when a Pix payment doesn't show up: reconciliation, swapped QR codes, the customer's MED dispute, evidence and notices.
5 分鐘閱讀
- 詐騙與欺詐結賬安全
Fake payment form at checkout: how to spot and block it
How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.
4 分鐘閱讀
- 實用指南Pix
Pix security checklist for online stores
A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.
4 分鐘閱讀
- 詐騙與欺詐結賬安全
Tampered boleto: how the payment line is swapped on screen
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 分鐘閱讀
- 詐騙與欺詐結賬安全
Compromised plugins and scripts: the way into Pix checkout fraud
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 分鐘閱讀
- 實用指南結賬安全
Static vs dynamic Pix QR codes: what changes at checkout
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 分鐘閱讀
- 詐騙與欺詐實用指南
UPI QR code and VPA scams: how online merchants stay protected
How UPI QR code and VPA scams work, what the RBI and Indian police warn about, and the practical steps that protect an online store's payment page.
4 分鐘閱讀
- 詐騙與欺詐結賬安全
Card data theft at checkout: how the copying happens
How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.
4 分鐘閱讀
- 詐騙與欺詐結賬安全
Tampered Pix copy-and-paste codes: how the swap works
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 分鐘閱讀