Payment safety is mostly a verification routine: identify the real payee, check the amount and currency, understand what you are buying, and authorize once. Never share a login password, payment PIN, SMS or issuer code, or screenshot of a live payment code.
An urgent message saying that your wallet must be “verified,” “unlocked,” or “refunded” is not proof of a real problem. Open the official app independently or use a verified publisher or issuer contact. If a transaction is unauthorized or the account may be compromised, act promptly through those official security channels.
Check Five Things Before Authorizing
- Payee: Does the displayed merchant or person match the intended recipient?
- Amount: Is the number correct, including decimal placement and currency?
- Purpose: Does it correspond to the actual product, ride, booking, or bill?
- Funding source: Is the intended card or wallet balance selected?
- Control: Are you still inside the official app and approving your own transaction?
Pause when any answer is unclear. A cashier waiting for confirmation is not a reason to skip the check.
Merchant QR and Personal Collection Codes
Both merchant and personal collection codes can appear in ordinary commerce. The code type alone does not establish whether a transaction is safe or unsafe.
When you scan:
- compare the displayed payee with the business or person in front of you
- ask who should receive the money when the name is unexpected
- enter the amount only after confirming who is responsible for it
- show the completion screen without handing over an unlocked phone
- keep the receipt or order record for an important purchase
Do not scan a substitute code sent later in chat merely because someone says the first payment failed. Check the first status and the order through the original platform.
Protect One-Time Codes and Payment Credentials
Alipay’s security guidance warns that a mobile verification code is as sensitive as a password and says its staff will not ask users for passwords or verification codes. Apply the same conservative rule to every financial account:
- do not read an SMS or issuer code to a caller
- do not forward a verification screenshot
- do not type a code into a page reached through an unsolicited message
- do not reveal the wallet password or payment PIN to a helper
- do not let another person enroll their device as your trusted device
A real support process can direct you to a secure flow without asking you to transfer control of the account.
Urgent “Support” and Refund Messages
Treat an unsolicited message with caution when it claims:
- the wallet will be frozen unless you verify immediately
- a payment refund requires a new transfer first
- a courier, hotel, ride, or ticket cannot proceed unless you pay through a different personal code
- an account error can be fixed by screen sharing or remote-control software
- the sender needs a card photo, passport image, password, or one-time code in chat
Do not argue with the sender. Close the message, open the original booking or wallet independently, and contact the merchant, platform, wallet, or issuer through the official app or website.
Respond to an In-App Risk Warning
Tencent reports that Weixin Pay can display transaction risk warnings and activate an anti-fraud customer-service assistant when its system detects potential risk. A warning is a reason to stop and review the transaction, not an obstacle to bypass.
When a wallet displays a warning:
- Stop authorizing the payment.
- Read the payee, amount, and stated risk.
- Verify the purchase through a separate, trusted channel.
- Use the wallet’s official support or reporting route.
- Do not switch to another code supplied by the same unknown party.
Never follow a stranger’s instructions to disable a security control.
Avoid Duplicate-Payment Confusion
An unclear payment can become a loss when it is repeated without checking.
If the screen times out or the cashier sees no confirmation:
- check whether the wallet says failed, pending, or completed
- ask the merchant to search its transaction record
- save the amount, time, payee, and reference
- explain a pending first attempt before paying another way
- keep the second receipt
See Payment Failed: What to Do for the full resolution order.
Ride, Taxi, and Informal-Service Payments
Before paying for a ride or informal service:
- confirm the vehicle, destination, agreed service, and charge basis
- compare the in-app fare or meter with the requested amount when applicable
- pay through the original booking flow when that is the agreed method
- request a receipt or preserve the app order
- do not scan an unrelated code to “release” a refund or resolve a complaint
An unexpected amount may be an error, policy charge, or misconduct; ask for an itemized explanation before labeling it.
If the Phone or Account May Be Compromised
From a trusted device or phone:
- Contact the mobile carrier when the SIM or phone is lost.
- Use the wallet’s official lost-device or security process.
- Contact the card issuers and follow their block or monitoring advice.
- Change exposed passwords through official sites or apps.
- Review recent transactions and preserve unfamiliar entries.
- Report unauthorized payments through the wallet and issuer’s formal dispute channels.
- Make a police report when required for safety, investigation, or insurance documentation.
Do not post full transaction records or identity documents publicly while asking for help.
Document a Disputed Payment
Keep:
- wallet transaction ID
- merchant or payee name
- amount, currency, and time
- order, invoice, or receipt
- relevant messages without editing them
- wallet and issuer responses
- dates and references for every complaint
Use accurate language: distinguish unauthorized, duplicate, wrong amount, non-delivery, refund pending, and ordinary issuer decline. Different problems follow different processes.
Payment-Safety Checklist
- Payee, amount, currency, and purpose are checked before authorization.
- Passwords, PINs, one-time codes, and live payment codes remain private.
- Unsolicited support links are ignored in favor of official channels.
- In-app risk warnings are not bypassed.
- Pending payments are checked before another method is used.
- Important purchases have an order or receipt.
- Wallet and issuer security contacts are saved outside the account.
- A lost phone or unauthorized transaction has a prepared response path.