事关“免密支付” ，中国支付清算协会发声

Core Viewpoint - The rapid development and widespread application of mobile payment technology have led to the rise of "no-password payment" services, which simplify payment processes and enhance user experience. However, there are concerns regarding security management among payment service providers and users' awareness of security risks [2][3]. Group 1: Recommendations for Payment Service Providers - Payment service providers should strengthen security management for "no-password payment" services by ensuring proper authorization management and confirming users' true intentions during the activation process [2]. - It is essential to enhance merchant risk management by setting reasonable limits on "no-password payment" services based on the merchant's business conditions and risk information [3]. - Continuous monitoring of transaction processes is necessary to prevent financial loss risks, utilizing risk models and big data analysis to identify and verify unusual transaction patterns [3]. Group 2: User Awareness and Protection - Users are encouraged to enhance their security awareness by implementing measures such as enabling two-factor authentication and regularly changing passwords [6]. - Users should improve their risk identification capabilities, remain vigilant against marketing traps, and avoid storing payment information on public devices [6]. - Regular checks on "no-password payment" agreements and prompt actions to freeze or close accounts upon detecting anomalies are recommended [6].