laitimes

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

Text: Long wind

According to the 49th Statistical Report on the Development of China's Internet Network, as of December 2021, 654,000 new 5G base stations have been added throughout the year, and the total number of 5G base stations built and opened is 1.425 million. At the same time, the total number of mobile phone base stations in the mainland will also exceed 10 million.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

Under the construction of such a powerful base station, the development of mobile payment in today's society in the mainland is self-evident. The penetration rate of mobile payment among mobile phone users is as high as 90.8%, especially in first-tier cities, which has reached 94.0%, and second- and third-tier cities are 91.4% and 89.2% respectively.

In fact, the existing infrastructure is relatively perfect, but there are still some deficiencies and areas that need to be improved outside of payment. One is the security of payments and the credit behind payments, and the other is the convenience and efficiency of payments. In the case of Alipay and WeChat, the number of users has already exceeded 1 billion, and small vendors in the streets and alleys are using the personal collection codes of these two. However, after March 1, the personal collection code cannot be used for business collections?

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

On October 13, 2021, according to a series of management requirements put forward by the central bank for mobile payment, QR code payment was also included in the supervision. It indicates that the use of personal collection codes will be implemented from March 1, 2022. At the same time, many people say that from March 1, the personal collection codes of WeChat and Alipay will not be used.

In addition, data from the past four years will be tracked, and the larger amount will also be subject to a 4.5% tax retroactive payment, as well as late fees and fines.

In fact, this is a misreading of the announcement. The regulations indicate that for individuals with obvious business activity characteristics, bar code payment and collection service institutions should provide special merchant collection bar codes. The point is, this does not mean "one size fits all", but only requires the use of personal and merchant collection codes separately.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

In this regard, WeChat and Alipay also responded in a timely manner, and tracking down personal data for nearly 4 years is a rumor. According to the latest news, small street vendors do not have to worry, and even the personal collection code that is being used does not need to be reprinted, and the original collection code can be used directly.

On the evening of February 22, the China Payment and Clearing Association issued an announcement on optimizing the bar code payment service, announcing that the current "personal collection code" will not be closed or deactivated, and the newly established "personal operation collection code" service will not be reduced, the experience will not change, and more efficient transaction reconciliation and other services can be enjoyed.

For small traders, there is no need to judge whether they are in line with the nature of their business.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

WeChat and Alipay also said that after March 1, the personal collection code can continue to be used, and there is no need to reprint the personal collection code. Alipay also said that it can be upgraded to a "personal operation collection code" and invited in combination with the user's collection characteristics. So what are the benefits of using a "personal business collection code"?

On the one hand, you can use credit cards to pay, but also can get value-added services such as transaction reconciliation, account management and specific marketing; on the other hand, you can better prevent and control transaction risks and more effectively protect the safety of user funds.

However, when we scan the code to pay, we still need to enter the password, and this scanning gun like the supermarket can directly sweep the money away, which can't help but make people have a question, is this scanning code checkout really safe? What if the swipe is stolen?

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

In fact, the reason why the code scanner can achieve payment without a password is because our mobile phone has turned on the password-free payment function, and the first time we use WeChat and Alipay payment code, it will prompt to open. Therefore, when checking out at the supermarket, we only need to show the QR code to deduct the fee directly, which is also for the convenience and efficiency of payment.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

We only need to perform a few simple steps on the mobile to reset the relevant functions of the mobile.

For WeChat users, find "Wallet" in the WeChat Payment management interface, then find "Security Lock" and set the gesture password to unlock. In this way, to open the "receive and pay" function of WeChat, you need to enter the gesture password, even if others get our mobile phones, there will be no risk of theft.

For Alipay users, first open your own Alipay and click "My". There is a gear-like pattern in the upper right corner of the Alipay page, namely "Settings", look for "Payment Settings" in the settings, select "Password-free Payment/Automatic Debit", you can make relevant settings to enhance the security of payment.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

In fact, this kind of password-free payment also has a maximum amount, that is, the one-time collection amount of the code sweeping gun shall not exceed 1,000 yuan. If this number is exceeded, we will be asked if there is a risk and we must enter the password to pay. If you pay a person frequently, you will also be asked if you accumulate a certain amount, or there is a certain degree of security.

Code sweepers are not accessible to anyone. Users need to submit an application to Alipay or WeChat, conduct various information verification and security assessments, and only by reviewing and signing the payment agreement can they use the code scanner to scan the code to collect, which is why only some large shopping malls and supermarkets have a code scanner.

Are there vulnerabilities in WeChat and Alipay? Obviously there is a password, why can the supermarket scan code gun still sweep away the money?

Even if "password-free payment" is very convenient, as long as it involves "property security", it is still necessary to pay more attention. For some users who do not know how to close, especially elderly users, it is more important to pay attention. Payment is a double-edged sword, while new things such as takeaway, online shopping, and express delivery make our lives more convenient, safety is also a top priority. Do you trust "password-free payment"?

Read on