Alipay makes QR code transactions more secure
Updated 10:50, 28-Jun-2018
[]

By CGTN’s Xu Xinchen

Alipay payment Quick Response (QR) codes can only be used for offline payments from Monday. Alipay says separating the QR codes for payments and receipts will enhance the safety of all transactions on the application.
CFP Photo

CFP Photo

Previously, Alipay payment QR codes could be used for both payments and receipts. After updating to the latest version, there is a note above the payment QR codes reading "this function can only be used to pay vendors face-to-face."
While a QR code contains all bank card and password information, it gives high-tech criminals a way to get hold of users' financial details. ‍
Now, the new way to receive money from others is to generate a new QR code from another sub-menu. A new code is generated for each transaction, but only valid for one minute.
The new procedures not only separate the QR codes for payments and receipts, but in addition screenshots of all QR codes are forbidden. And a warning will pop up if the users try to take a screenshot.
CFP Photo

CFP Photo

Some users see no influence from the change and others accept any change aimed at improving security. “I use mobile payments for shopping and paying for ‍small payments, so I don't have to bother with the change. I worry about the security issue, but I think as long as I'm careful I will be fine,” said one user.
Wu Dawei, executive director of Finance Service Risk Management at Ernst & Young Global Ltd, thinks the new procedures will enhance users’ confidence in payment security.
“From the customer's perspective, there's a big difference in security depending on who initiates the transaction. The separation of the receipt from the payment function will be welcomed more by consumers than by the smaller vendors,” Wu says.
CFP Photo

CFP Photo

China's central bank banned mobile payments via QR Codes once three years ago due to security concerns. Soon after that, both Alipay and WeChat Wallet began the long journey to making their apps more secure.
By issuing two separate codes, Alipay's users will be able to decide whether the transaction is legitimate before finalizing it.