中国支付清算协会：杜绝默认开通“免密支付” ，提供一键取消功能

Core Viewpoint - The rapid development and widespread application of mobile payment technology have led to the rise of "no-password payment" services, which simplify payment processes and enhance user experience. However, there are concerns regarding security management among payment service providers and users' awareness of security risks [3]. Group 1: Recommendations for Payment Service Providers - Payment service providers should strengthen the security management of "no-password payment" services by ensuring proper authorization management and confirming users' true intentions during the activation process [4]. - It is essential to enhance merchant risk management by setting reasonable limits on "no-password payment" services based on the merchant's business conditions and risk information [5]. - Providers should improve transaction monitoring to prevent financial loss risks by utilizing risk models and big data analysis to identify and address unusual transaction patterns [5]. Group 2: User Awareness and Protection - Users are encouraged to enhance their security awareness by implementing measures such as enabling two-factor authentication and regularly changing passwords [7]. - Users should be vigilant about marketing traps and avoid saving payment information on public devices to improve risk identification capabilities [7]. - Regular checks on "no-password payment" agreements and prompt actions to freeze or close accounts upon detecting anomalies are recommended for users [7].