{"id":489,"date":"2026-09-23T10:03:37","date_gmt":"2026-09-23T02:03:37","guid":{"rendered":"https:\/\/sgpaynowqr.com\/blog\/?p=489"},"modified":"2026-09-23T14:45:31","modified_gmt":"2026-09-23T06:45:31","slug":"is-paynow-safe-singapore","status":"publish","type":"post","link":"https:\/\/sgpaynowqr.com\/blog\/is-paynow-safe-singapore\/","title":{"rendered":"Is PayNow Safe? What Sellers and Buyers Should Know"},"content":{"rendered":"\n

In early 2026, Singapore police issued an advisory about fake cruise packages that required PayNow payments<\/a>. Victims saw these packages on Facebook, then chatted with the scammers on WhatsApp, and paid through PayNow QR codes. At least $53,000 was lost in this scam by 40 victims.<\/p>\n\n\n\n

This begs the question, is PayNow safe?<\/p>\n\n\n\n

Yes, PayNow itself is safe.<\/strong> Nobody broke into those victims’ bank accounts. What happened was that the victims were tricked into sending the money themselves, voluntarily. And because a PayNow transfer can’t be reversed or cancelled, the risk falls on whoever pays first.<\/p>\n\n\n\n

Is PayNow Safe? How Your Money Actually Moves<\/h2>\n\n\n\n

PayNow runs on FAST, the interbank transfer system. According to ABS<\/a>, 27 banks and 6 major payment institutions take part, it’s free for retail customers, and it works 24\/7.<\/p>\n\n\n\n

A PayNow address is just a mobile number, NRIC\/FIN, UEN or virtual payment address. It points at a real bank or e-wallet account, and before you confirm, your banking app shows you the registered name behind it. ABS’s advice is simple: always verify that the recipient’s name is correct before confirming the transfer.<\/em><\/p>\n\n\n\n

That name check is the main protection PayNow gives you. It’s also why the nickname feature was switched off on 6 June 2026. The SPF’s mid-year brief<\/a> says it was dropped to prevent scammers from exploiting the nickname feature to masquerade as legitimate individuals or organisations.<\/em> We covered what that changed for sellers in PayNow nicknames have gone away<\/a>.<\/p>\n\n\n\n

Does your bank protect your PayNow transactions?<\/h2>\n\n\n\n

MAS’s E-Payments User Protection Guidelines<\/a> only protect you against unauthorised<\/strong> transactions, meaning money moved out of your account without your knowledge or consent.<\/p>\n\n\n\n

But that doesn’t cover a payment you that you are aware of and intended to make, even if it was from a scammer. So if you scanned the QR code and pressed confirm, that’s an authorised transaction, even if the seller turned out to be fake.<\/p>\n\n\n\n

The Shared Responsibility Framework<\/a>, in force since 16 December 2024, doesn’t change this. It covers phishing, where a scammer impersonates a bank or government agency and you type your banking credentials into a fake website. It doesn’t cover a transfer you chose to make.<\/p>\n\n\n\n

Your bank protects you if<\/th>Your bank does not protect you if<\/th><\/tr><\/thead>
Someone moves money out of your account without your consent<\/td>You pay a seller who never delivers<\/td><\/tr>
You enter your login on a fake bank website after a phishing message<\/td>You pay a “deposit” on a pre-order that never arrives<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

As a seller, your bank also does not protect you if you shipped out a product against a payment that never appeared in your bank account. This can happen if the seller showed you a fake screenshot of a PayNow transaction.<\/p>\n\n\n\n

The 2026 Scam Numbers<\/h2>\n\n\n\n

In the first half of 2026 there were 16,821 scam cases and S$410.6 million lost<\/a>, both down on 2025. In 80.8% of those cases, the victims made the transfer themselves. As the SPF puts it, scammers manipulated victims into making monetary transactions through deception and social engineering.<\/em><\/p>\n\n\n\n

E-commerce scams had more cases than any other scam type: 3,865, up 19.3%<\/strong>, with about S$8.3 million lost. Carousell and Telegram were where scammers most often found their victims. Pok\u00e9mon trading cards were the top item, with 605 cases, and many of those were “pre-orders” where the buyer paid a deposit for delivery months later.<\/p>\n\n\n\n

For the scams aimed at sellers, like fake refund requests and “certificate expiring” messages, see our list of 8 dangerous PayNow scams<\/a>.<\/p>\n\n\n\n

If You’re Buying: Your Money Is Gone Once You Pay<\/h2>\n\n\n\n

Check the name before you confirm.<\/strong> If you’re buying from “Scrumptious Cakes” and the app shows an individual’s name you don’t recognise, stop and ask. A business registered with a UEN shows its business name instead.<\/p>\n\n\n\n

Pay a stranger via the platform, not by PayNow.<\/strong> The SPF brief recommends marketplaces with secure in-platform payment mechanisms that release funds only after delivery is confirmed.<\/em> That’s escrow, and PayNow doesn’t have it. When you’re buying from someone you can’t verify, the platform’s checkout protects you better. When you’re paying a shop or seller you already know, PayNow is fine.<\/p>\n\n\n\n

Be careful with deposits for pre-orders.<\/strong> The Pok\u00e9mon and K-pop cases in the SPF brief followed the same pattern: pay now, delivery “months away”, and you find out when nothing arrives.<\/p>\n\n\n\n

Don’t scan QR codes sent to you in chat by a seller you don’t know.<\/strong> That’s straight from ScamShield’s e-commerce advice<\/a>. The cruise scam above ran on exactly that.<\/p>\n\n\n\n

Look at a printed QR code before you scan it.<\/strong> The CSA and SPF joint advisory<\/a> warns about QR code swaps, where a business’s code is tampered with to redirect payments. Its advice is to avoid a code that looks pasted over, and to check the amount and recipient name before confirming.<\/p>\n\n\n\n

If You’re Selling: A Screenshot Is Not Payment<\/h2>\n\n\n\n

Sellers get scammed too. The SPF brief describes victims who did not receive payment after delivering the goods or services to scammers pretending to be buyers<\/em>, sometimes with fake screenshots as “proof of payment”<\/em>.<\/p>\n\n\n\n

Check your bank app before anything ships.<\/strong> ScamShield’s advice for sellers is to verify that payment has been received before delivering any goods or services<\/em>. Your banking app’s transaction history is the only proof. We cover the habit of matching every payment in 7 PayNow mistakes that cost businesses money<\/a>.<\/p>\n\n\n\n

Take payment to a UEN.<\/strong> When a buyer scans a UEN PayNow code, they see your registered business name, not your personal name. It looks legitimate to them, and the name matches the shop they think they’re paying. If you’re still on your mobile number, here’s what a UEN PayNow QR is and how to get one<\/a>, and what customers see when they scan a mobile-number QR<\/a>.<\/p>\n\n\n\n

Send a fixed amount with a reference.<\/strong> A QR code from our PayNow QR generator<\/a> carries the amount and the order reference, and the customer can’t edit either. So the payment lands as $48.00 against order 1031, which is easy to match. For WhatsApp orders, a WhatsApp PayNow link<\/a> does the same thing in one tap. For larger orders, use the invoice generator<\/a>.<\/p>\n\n\n\n

Check your stall’s QR code.<\/strong> If you put a printed code on a counter at a market or pop-up, look at it at the start of each day. A sticker pasted over it is the swap the CSA advisory describes, and your customers are paying someone else.<\/p>\n\n\n\n

If you sell online, our WooCommerce plugin<\/a> puts a fixed-amount QR with the order number on the checkout page. You then confirm the payment in your bank app before marking the order paid. The condominium fraud case<\/a> shows why payments should go to a business account and not a personal one.<\/p>\n\n\n\n

PayNow vs Card: Who Carries the Risk<\/h2>\n\n\n\n

Card payments give the buyer a way back. Under the card schemes’ dispute rules, the buyer’s bank can reverse a charge against the merchant, including for non-delivery<\/a>, if the buyer shows the agreed delivery date and that they told the merchant. PayNow has no equivalent.<\/p>\n\n\n\n

Question<\/th>PayNow<\/th>Credit or debit card<\/th><\/tr><\/thead>
Can the buyer reverse it through their bank if goods don’t arrive?<\/td>No, it counts as an authorised transaction<\/td>Yes, through a chargeback<\/td><\/tr>
How long a dispute takes<\/td>No dispute process<\/td>About 4 to 12 weeks (ABS)<\/td><\/tr>
When the seller’s money is final<\/td>When it lands in the account<\/td>It can still be reversed by a chargeback<\/td><\/tr>
Main risk for the buyer<\/td>Paying a fake seller<\/td>Having to prove non-delivery to the bank<\/td><\/tr>
Main risk for the seller<\/td>Shipping against a fake screenshot<\/td>A chargeback after the goods have gone<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

So PayNow suits sellers well: the money that lands is final, which is part of why selling with zero payment fees<\/a> is possible. For buyers, it’s safe when you know who you’re paying, and a bad idea when you don’t.<\/p>\n\n\n\n

If a payment went to the wrong person by mistake, that’s a different problem, and we cover it in common reasons for “PayNow rejected”<\/a>.<\/p>\n\n\n\n

A Quick Checklist<\/h2>\n\n\n\n

Buying:<\/strong><\/p>\n\n\n\n

    \n
  • The name in your banking app matches who you think you’re paying.<\/li>\n\n\n\n
  • You’re buying from a stranger? Use the platform’s checkout, not PayNow.<\/li>\n\n\n\n
  • No QR codes from sellers you don’t know in chat, and no big deposits for goods months away.<\/li>\n<\/ul>\n\n\n\n

    Selling:<\/strong><\/p>\n\n\n\n

      \n
    • The money is in your bank app before the goods go out. Screenshots don’t count.<\/li>\n\n\n\n
    • Your QR code is on a UEN, with a fixed amount and a reference.<\/li>\n\n\n\n
    • Printed codes get checked daily.<\/li>\n<\/ul>\n\n\n\n

      PayNow itself is safe. The problems start when someone pays a person they can’t verify.<\/p>\n","protected":false},"excerpt":{"rendered":"

      Is PayNow safe? The system is, but a PayNow transfer can’t be pulled back. What that means for buyers paying strangers and sellers shipping orders, with 2026 SPF figures.<\/p>\n","protected":false},"author":1,"featured_media":492,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,27],"tags":[29,10,44,28,48],"class_list":["post-489","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-questions","category-security","tag-fraud","tag-payment","tag-paynow","tag-scams","tag-singapore"],"_links":{"self":[{"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/posts\/489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/comments?post=489"}],"version-history":[{"count":6,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions"}],"predecessor-version":[{"id":496,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions\/496"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/media\/492"}],"wp:attachment":[{"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/media?parent=489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/categories?post=489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sgpaynowqr.com\/blog\/wp-json\/wp\/v2\/tags?post=489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}