实用指南诈骗与欺诈
Pix 已付款，订单仍显示待处理：怎么办
Pix 已付款但订单仍待处理：五个最常见的原因，如何通过付款凭证找出你属于哪一种，以及每种情况该怎么办，包括遇到诈骗时。
2 分钟阅读
在线支付安全
关于针对支付时刻的攻击的资讯与分析，以及应对之道。
- 诈骗与欺诈Pix
替换 Pix 二维码的病毒：在你的设备上，还是在商店里？
替换 Pix 二维码的病毒可能在你的电脑上，也可能在商店网站上。了解两者如何运作，如何找出问题所在，以及每种情况该怎么办。
2 分钟阅读
- 实用指南诈骗与欺诈
网购 Pix 付错：是失误还是诈骗？该怎么办
网购 Pix 付错，可能是你自己操作失误，也可能是商店的二维码被篡改。教你如何区分，MED 何时适用，以及设法追回款项的步骤。
2 分钟阅读
- 诈骗与欺诈实用指南
Pix 二维码被篡改：付款前如何识别，出事后怎么办
Pix 二维码被篡改怎么办：网购时如何判断二维码是否被篡改，确认付款前要在银行应用里核对什么，以及已经付款后该怎么做。
2 分钟阅读
- 结账安全PCI DSS 合规
如何监控结账页面改动：监控什么，多久一次
如何监控结账页面改动：付款页面要监控什么，多久检查一次，各种方法能发现哪类改动，以及如何设置团队真正会处理的警报。
2 分钟阅读
- 诈骗与欺诈结账安全
Pix 版 Magecart：替换二维码而非窃取银行卡的攻击
Pix 版 Magecart 如何出现：在结账页面替换二维码和 Pix Copia e Cola 的代码，与银行卡攻击有何不同，商店需要在屏幕上核对什么。
2 分钟阅读
- 诈骗与欺诈结账安全
Magecart 是什么？网店如何防范，从银行卡到 Pix
Magecart 是什么：恶意代码如何进入付款页面，有哪些标志性案例，以及保护网店银行卡、Pix 和 boleto 付款的检查清单。
2 分钟阅读
- 诈骗与欺诈新闻
亚洲二维码支付诈骗：六个市场给网店卖家的启示
PayNow、DuitNow、PromptPay、QR Ph、FPS 和 UPI 都成了二维码诈骗的目标。本文梳理常见手法、当地监管与警方建议，并附商家自查清单。
2 分钟阅读
- 诈骗与欺诈结账安全
Pix 结账诈骗：二维码如何被替换，又该如何防范
Pix 结账诈骗：正规网店的 Pix 二维码和 Pix Copia e Cola 付款码如何被替换，哪些人受影响，有哪些迹象，商家和顾客该怎么做。
2 分钟阅读
- 实用指南诈骗与欺诈
马来西亚 DuitNow QR：运作方式与防范二维码调包
了解马来西亚国家支付二维码 DuitNow QR 如何运作，以及网店应如何防止付款页面上的二维码被调包，避免顾客把钱付给骗子。
2 分钟阅读
- 实用指南诈骗与欺诈
PayNow 与 SGQR：统一二维码如何运作，风险在哪里
SGQR 如何把 PayNow 等支付方案整合成一个二维码、新加坡当局记录了哪些骗局，以及网店如何保护结账页面上的二维码。
2 分钟阅读
更多英文文章
- PCI DSS 合规实用指南
How to choose a tool for PCI DSS requirements 6.4.3 and 11.6.1
Four approaches on the market, seven questions to ask any vendor and the most common mistakes when choosing a tool for PCI DSS 6.4.3 and 11.6.1.
6 分钟阅读
- 结账安全PCI DSS 合规
Why a script inventory misses the swapped QR code
Script inventories satisfy PCI DSS, yet a swapped Pix, boleto, UPI or PromptPay QR code happens where they do not look: on the customer's screen. Here is why.
6 分钟阅读
- PCI DSS 合规实用指南
PCI DSS 6.4.3 and 11.6.1: what your payment page needs
PCI DSS requirements 6.4.3 and 11.6.1 have been mandatory since March 2025. Learn what each one asks, who must comply and how to produce the evidence.
2 分钟阅读
- 实用指南诈骗与欺诈
FPS and HKQR in Hong Kong: QR scams and good practices
How FPS and HKQR work in Hong Kong, which anti-scam protections already exist and what online merchants should do to stop QR codes being swapped at checkout.
4 分钟阅读
- 新闻实用指南
MED 2.0: the new Pix refund rules and what merchants should know
MED 2.0 traces scam money beyond the first account and, since September 1, gives 80 days to contest a refund. Here is what changes for online stores using Pix.
4 分钟阅读
- 诈骗与欺诈稳定币和加密货币
Address poisoning: lookalike addresses that fool even experts
How address poisoning plants a near-identical address in a wallet's history, what research and real cases show, and how to avoid copying the wrong one.
4 分钟阅读
- 新闻诈骗与欺诈
Procon-SP warns of scam that alters Pix QR codes at online stores
São Paulo's consumer agency warned about altered Pix QR codes in online shopping. What it said, what it means for stores and how to answer customers.
4 分钟阅读
- 实用指南诈骗与欺诈
QR Ph in the Philippines: the national QR and online store scams
How QR Ph, the Philippines' national QR standard, works, which scams target online stores and buyers, and what merchants can do to stop swapped codes.
4 分钟阅读
- 结账安全PCI DSS 合规
Do gateway-hosted card fields solve everything?
Card fields hosted by your payment provider shrink PCI DSS scope, but the page around them can still be tampered with. Where the risk remains and what to do.
4 分钟阅读
- PCI DSS 合规实用指南
Pix security rules: the central bank's part and the merchant's
Limits, MED, DICT and bank duties protect accounts and transfers. The store's own payment page sits outside those rules and stays the merchant's job.
4 分钟阅读
- 实用指南诈骗与欺诈
Transferencias 3.0: Argentina's interoperable QR and tampering
How Argentina's Transferencias 3.0 interoperable QR code works, why a tampered code is paid by any wallet, and what online merchants should do about it.
4 分钟阅读
- 实用指南Boleto
DDA and payee checks: best practices for issuing boletos
How DDA and payee verification help buyers spot a swapped boleto, and what online stores that issue boletos must do for these checks to actually work.
4 分钟阅读
- 实用指南Pix
Contactless Pix and no-typing payments: the new risks
What Brazil's Central Bank launched with the journey without redirection, what biometric Pix changes at online checkout and which safeguards merchants need now.
4 分钟阅读
- 诈骗与欺诈实用指南
PromptPay QR scams: best practices for online stores in Thailand
How the PromptPay QR scams flagged by Thai police work, and the best practices that stop the QR code on an online store's checkout from being swapped.
4 分钟阅读
- 结账安全PCI DSS 合规
Third-party scripts on the payment page: what PCI DSS requires
How to inventory, authorize and monitor third-party scripts at checkout under PCI DSS requirements 6.4.3 and 11.6.1, and the mistakes that leave stores exposed.
4 分钟阅读
- 实用指南结账安全
Pix Automático: what to check on the authorization screen
How Brazil's Pix Automático works under Central Bank rules, where the authorization screen's risks lie and what merchants and customers should check first.
5 分钟阅读
- 实用指南结账安全
CoDi in Mexico: how QR payment requests work and what to watch
How Banco de México's CoDi works, why a payment request tampered with on the page is paid instantly, and what online merchants should check at checkout.
4 分钟阅读
- 诈骗与欺诈结账安全
Crypto wallet address swaps: the scam with no chargeback
How wallet addresses get swapped on the payer's device or on the payment page itself, why crypto payments can't be reversed and what merchants should check.
4 分钟阅读
- 诈骗与欺诈Pix
Extensions and malware that swap Pix on the customer's computer
How malware and browser extensions swap the Pix key or payment code on the buyer's computer, and why the online store still loses the sale and takes the blame.
4 分钟阅读
- 实用指南诈骗与欺诈
Customer paid by Pix but the order didn't go through: what to do
A step-by-step guide for merchants when a Pix payment doesn't show up: reconciliation, swapped QR codes, the customer's MED dispute, evidence and notices.
5 分钟阅读
- 诈骗与欺诈结账安全
Fake payment form at checkout: how to spot and block it
How a fake card form laid over a store's checkout works, the warning signs that your store has been hit, and the practical steps that block the scam in time.
4 分钟阅读
- 实用指南Pix
Pix security checklist for online stores
A practical Pix security checklist for online stores: charge configuration, checkout monitoring, customer communication and what to do when an incident happens.
4 分钟阅读
- 诈骗与欺诈结账安全
Tampered boleto: how the payment line is swapped on screen
How the scam swaps a boleto's payment line and barcode on screen, and what stores and customers check before paying so the money does not go to the wrong payee.
4 分钟阅读
- 诈骗与欺诈结账安全
Compromised plugins and scripts: the way into Pix checkout fraud
How compromised plugins, themes and third-party scripts let criminals swap Pix QR codes and steal card data in legitimate stores, and how to reduce exposure.
4 分钟阅读
- 实用指南结账安全
Static vs dynamic Pix QR codes: what changes at checkout
The difference between static and dynamic Pix QR codes, where each appears in e-commerce, and why neither one alone stops a QR code swap at checkout.
4 分钟阅读
- 诈骗与欺诈实用指南
UPI QR code and VPA scams: how online merchants stay protected
How UPI QR code and VPA scams work, what the RBI and Indian police warn about, and the practical steps that protect an online store's payment page.
4 分钟阅读
- 诈骗与欺诈结账安全
Card data theft at checkout: how the copying happens
How hidden code on a payment page copies card number, expiry date and security code as the customer types, with real cases and what merchants can do about it.
4 分钟阅读
- 诈骗与欺诈结账安全
Tampered Pix copy-and-paste codes: how the swap works
How the Pix Copia e Cola code gets swapped between the store page and the banking app, and what online stores and shoppers can do to stop the diversion.
4 分钟阅读