Some consumers have reported unauthorized charges on their mobile accounts—how can the risks associated with “password-free payments” be mitigated?

  Recently, Mr. Yang, a consumer in Shanxi, woke up one morning to discover that his WeChat and Alipay accounts had inexplicably incurred seven charges around 3 a.m., totaling 4,526 yuan. According to the transaction records, these seven payments were first credited to his Apple ID and then used to purchase game items 13 times within a mobile game. However, Mr. Yang has never played this particular game, leading him to suspect that his account was hacked and that the perpetrator exploited password‑free payment to siphon off the funds.

  Mr. Yang’s experience is far from an isolated case. Recently, the China Consumers Association has received a series of complaints from consumers alleging that their account funds were fraudulently debited due to the “password-free payment” feature. Their WeChat or Alipay accounts have inexplicably incurred multiple unauthorized charges of varying amounts, with many victims finding that the stolen funds were used to purchase in-game items or virtual currency.

  In the digital economy era, “password‑free payment” has become a popular choice for many. This so‑called “password‑free payment” (i.e., payment without requiring a password) is a feature introduced by some payment platforms and apps to enhance convenience. Once enabled, users can have transactions below a certain threshold automatically debited. However, if this feature is exploited by criminals, it can pose serious security risks. Therefore, consumers should exercise caution when using their mobile phones’ “password‑free payment” function during online shopping, to avoid financial losses resulting from overly broad account access.

   Why does “password-free payment” easily become a loophole for fraudulent transactions?

  First, the risk escalates dramatically when a mobile phone is lost or an account is compromised. If someone gains access to your account or device, they can use “password‑free payments” to make purchases or subscribe to virtual services without requiring secondary verification. Second, small, password‑free transactions can accumulate into substantial losses. Although some platforms impose a per‑transaction limit on password‑free spending, frequent, low‑value fraudulent charges over a short period can still result in significant financial harm. Third, such fraud is highly concealed and difficult to detect promptly. Fraudulent transactions are often carried out through virtual services linked to payment platforms—such as game top-ups or app subscriptions—or during late‑night hours when the user is asleep, so by the time the consumer notices, multiple charges have already been processed.

   How can we proactively mitigate related risks?

  First, avoid enabling “password‑free payments” unless absolutely necessary. Consumers should prioritize disabling this feature, verify whether their Alipay, WeChat, or bank cards are linked, and revoke the “password‑free payment” permission. If you wish to retain certain password‑free services, consider configuring them separately. In addition, regularly review your authorized apps and remove payment permissions for third‑party applications that you rarely use or no longer trust. Second, strengthen account security. For example, create strong, complex passwords and change them periodically. Avoid simple passwords such as birthdays or consecutive numbers, and enable two‑factor authentication to prevent unauthorized access. Furthermore, disable unnecessary payment permissions; for instance, iPhone users who do not need to make in‑app purchases through their accounts can turn off the corresponding feature. Also, exercise caution when using public Wi‑Fi and refrain from conducting payment transactions on unsecured networks to guard against phishing attacks or data interception. Third, develop a habit of regular account reconciliation. Consumers should promptly check transaction notifications, monitor deduction SMS messages sent by Alipay, WeChat, or their banks, and immediately investigate any unfamiliar charges. Regularly review subscription services and cancel automatic renewal plans that are no longer needed.

   How can you respond quickly after your card has been fraudulently charged?

  An official from the China Consumers Association stated that if consumers detect unusual transactions on their accounts, they should first immediately freeze the payment channel and, through bank customer service or via Alipay or WeChat, urgently freeze any linked accounts to prevent further deductions. Next, they should gather evidence and file a complaint: retain screenshots of fraudulent transaction records, note the transaction times, and report the incident to the payment platform. If the amount of loss is substantial, consumers should promptly file a police report and cooperate by providing relevant supporting documentation.

  An official from the China Consumers Association cautioned that the convenience of mobile payments should not come at the expense of security. Consumers are urged to remain vigilant, proactively manage their payment permissions, and avoid overlooking potential risks in pursuit of ease. In the event of a consumer dispute, rights can be protected through platforms such as the “National Consumer Association Smart 315” system. (Reporter: Qi Zhiming)

[Editor-in-charge: Wu Jingze]

Source: People’s Daily