According to the regulations of the Central Bank, when using static barcode payment, the cumulative transaction amount of a single bank account or all payment accounts and quick payments of the same customer in a single day should not exceed 500 yuan. Upon seeing this regulation, some consumers' first reaction was to complain that the limit was too low: "From now on, you can no longer scan and pay more than 500 yuan a day. Isn't it really enough?" In fact, this is everyone's misunderstanding. Industry insiders pointed out that those restricted by the 500 yuan quota are mainly street vendors who use static codes. Most of the scanning code payments, especially for purchases with larger amounts, still use dynamic codes, that is, merchants use code scanning guns to scan purchases. or what’s going on on your phone. Judging from past consumption data, the limit of 500 yuan fully meets the needs of most consumers.

Scanning QR codes to pay will be subject to rules and regulations starting from April 1st. At the end of last year, the central bank issued the "Notice of the People's Bank of China on Issuing the "Barcode Payment Business Specifications (Trial)", which was accompanied by the "Barcode Payment Security Technical Specifications (Trial)" and "Barcode Payment Acceptance Terminal Technical Specifications (Trial)". Effective from April 1, 2018.

Follow

The daily limit for static code payment is 500 yuan

Regarding the new regulations that are about to be implemented, some consumers are worried that the limit is not enough. Industry insiders pointed out that some consumers misunderstand mainly because there is no distinction between dynamic codes and static codes. The simplest way to judge is if the consumer uses his or her mobile phone to scan the code printed on the paper provided by the merchant, it is a static code payment; if the consumer calls up the payment code on his or her mobile phone and the merchant uses a code scanner to scan the code, it is Dynamic code payment. Generally, street vendors may use static codes, but most merchants with fixed stores will choose to use dynamic codes.

According to the regulations of the Central Bank, the use of static barcodes for payment has the highest risk and the lowest risk prevention ability. It is rated D in the Central Bank's risk rating system and has the lowest limit. When using static barcode payment, the cumulative transaction amount of a single bank account or all payment accounts and quick payments of the same customer in a single day should not exceed 500 yuan.

The risk prevention capabilities of dynamic barcodes are divided into three levels: A, B, and C from high to low. The transaction verification method barcodes and payment limits corresponding to different levels are also different. The more secure the dynamic code payment, the higher the transaction limit.

Specifically, dynamic codes that use two or more valid elements including digital certificates or electronic signatures for verification have a level A risk prevention capability and can be verified by banks, payment institutions and customers. Independently agree on the daily cumulative limit through the agreement.

If two or more types of valid elements (note: such as fingerprints, passwords, etc.) are used for verification, excluding digital certificates and electronic signatures, the risk prevention capability is Level B, and the same customer is a single bank. The maximum cumulative transaction amount of an account or all payment accounts and quick payments in a single day is 5,000 yuan.

For dynamic code payments that use less than two types of valid elements for verification, the risk prevention capability is level C. The cumulative transaction amount of a single bank account or all payment accounts and quick payments of the same customer in a single day is up to 1,000 yuan.

Therefore, it is inaccurate to generally say that the daily limit of scanning code payment is 500 yuan after April 1. Because in the central bank’s new regulations, the daily limit is 500 yuan, which is only for static barcodes. If you spend more than 500 yuan, you can ask the merchant to scan the customer's Alipay or WeChat dynamic payment code with a code scanner. This way you won't be subject to the $500 limit.

Focus

Setting limits for scan-code payment is mainly for security

With the rapid popularity of scan-code payment, there are more and more fraud cases related to it. many. The most common thing is that the static code set by the merchant at the checkout counter is quietly changed by criminals. Because the pattern was complicated and difficult to distinguish carefully, even the shop owner didn't notice it. As a result, the money for the goods easily went into other people's pockets.

The relevant person in charge of the central bank said that barcode payment relies on the open Internet and non-professional equipment for transaction processing, which brings certain technical risks.

Including: visual risks, barcodes are displayed graphically in an open Internet environment, criminals can steal payment vouchers through screenshots, sneak shots, etc., and misappropriate funds within the validity period of the payment voucher; the risk of easily carrying malicious code, barcodes can not only Store payment elements and can also carry illegal links or program codes. Criminals can make Trojan viruses and phishing website links into barcodes to induce customers to scan and steal sensitive payment information; there is a risk of one-way information interaction, and barcode payment can only be implemented by the initiator or One-way information exchange by the receiver, criminals can use this weakness to implement "man-in-the-middle attack", bypass the identity authentication mechanism, causing user fund losses; the risk of low security intensity of scanning equipment, barcode payment has low equipment requirements, ordinary mobile phones Cameras, simple supermarket cash register scanners and other devices that do not have security functions such as encryption and anti-disassembly can recognize barcodes and can easily be illegally modified and used by criminals.

The person in charge explained that in order to guide banks and payment institutions to improve the security of transaction verification methods and strengthen the security protection of customer funds, there will be no setting for those with high risk prevention capabilities and safer transaction verification methods. As for the quota limit, market entities can agree on transaction limits with their customers.

Based on security factors such as anti-substitution and anti-theft, banks and payment institutions are required to implement stricter limit management measures when using static barcode payments to encourage market entities to adopt more secure dynamic barcode provision. Payment Services. According to barcode payment transaction data from major market institutions, the above quota has covered the needs of the vast majority of customers and merchants who use barcode payment.

Explanation of doubts

Why is the static code limit set at 500 yuan?

In the hierarchy classified by the central bank, static codes are the least secure and have the lowest limit, only 500 yuan. Yuan. How is this 500 yuan limit established?

Payment industry insiders said that based on existing QR code consumption data, more than 95% of consumers currently pay less than 500 yuan per day with static codes, so the vast majority of users will not be affected. "Generally, static codes are used, that is, buying a pancake and some fruits and vegetables on the street. 500 yuan is definitely enough." Taking a step back, even if you encounter fraud, the loss will be relatively limited. This limit protects users who are not very proficient in consumer use and cannot clearly identify deceptive behavior. This group of users accounts for a large number in China.

The security of static data is far lower than that of dynamic data generated in real time. The dynamic code is updated every minute and is highly secure. Experts suggest that when using barcode payment, try not to use your mobile phone to scan other people's static barcodes, but let others scan your mobile phone.