4 ms·
Ahhhhh I'm so glad to see that this exists. I had an "idea" of having something like this in the past, to save having to manually type bank account numbers int
by djhworld 5y ago
Ahhhhh I'm so glad to see that this exists.
I had an "idea" of having something like this in the past, to save having to manually type bank account numbers into a thing (and risk typos...), instead you just scan a QR code with the data already embedded and it's good to go.
The only thing that nagged me in the back of my head was how do you verify that the QR code hasn't been tampered with? I mean you could say the same about just plain text and someone replacing the bank account details (replacing with their own), or sticking an imposter QR code over the top and hoping people don't notice.
Does this EPC code account for tampering/misuse?
I guess you'd expect the bank to double check the payee name + bank account number and reject anything that does not match.
- kiwijamo 5y agoHere in New Zealand the payee name and the bank account number are not checked by banks for domestic electronic payments. I can only assume this is standard practice overseas as well.
- beojan 5y agoThey often are checked now in the UK, after a lot of complaints and scams.
- dhaavi 5y agoThe only "tampering protection" is the error correction by the QR code. Proper protection would need a PKI, which would make it so complex, no one would use it. You always have to bullshit check the data anyway. Payee name + bank account number are _not_ checked in Austria. I guess this is similar to other EU countries, as @kiwijamo also suggested.