"Brush a brush" into "sweep", in the consumer pay habits quietly changed, phishing, Trojan virus and false refund is gradually become the mobile payment domain three fraud "trap."
China UnionPay 29th released the "2014 Mobile internet Payment Security Survey report," showed that in 44,000 valid questionnaires, more than 60% of the respondents had used mobile phone to complete the payment, of which, 42%-month mobile payments accounted for more than half of the total online payment.
However, with the rapid growth of mobile payment users, mobile trading terminals are becoming the key targets of criminals, and the risk is rising rapidly. The report showed that 10% of respondents had been cheated by online trading, up 4% from 2013.
Experts, the current use of WiFi to pay the security of the network has become a user's heart misfortune, some criminals can be tampered with DNS and other means to the user's access to jump to the phishing website, but also to intercept the user net Silver password.
At the same time, the public network of receivers greatly increased the software download the import risk. "Although two-dimensional code is just a way to read information, it is also easy to implant Trojans," said Wang, director of China UnionPay's Risk Monitoring service center. ”
Experts suggest that two-dimensional code does not have security features, as long as there are two-dimensional code generation software can be produced, mobile phone once poisoned, criminals can take the opportunity to steal the phone card number, authentication code and other information.
Tencent Mobile Security Laboratory released data showed that the first half of infected mobile phone payment virus users reached 6.934 million, which can intercept and forward users to pay SMS authentication code of the mobile virus increased massively, payment-type virus presents a variety of characteristics of the development trend of integration. In addition, UnionPay data show that the current mobile phone dynamic Verification code acceptance is getting higher, 64% of respondents use mobile phone dynamic verification code to complete the transaction. But at the same time, with refunds and other excuses to cheat mobile phone dynamic verification code is also significantly increased, the number of respondents to such fraud accounted for up to 21%.
China UnionPay Risk Control Department general manager Shaohan introduced, from the fraud loss to see small, because less than 500 yuan fraud cases can not reach the amount of public security case, consumers encounter such problems rights and hardships.
Experts suggest that in the process of payment, cardholders should take good care of personal information and bank account information, do not trust the "low-cost" Site and mail, SMS, chat tools sent to the link, and pay attention to protect mobile phone devices such as security.
All parties in the payment industry should increase the risk control research and security cooperation of mobile payment, perfect the laws and regulations of mobile payment, and jointly build the safe payment ecological environment. "Shaohan said.