Security
Designed so there's less to steal.
The safest data is data you never hold. Qrisp never touches card numbers, bank logins or your money.
Approved in the customer's bank
Every payment is approved inside the customer's own banking app, protected by their bank's login and security checks. Qrisp never sees their banking password.
Money never sits with us
Funds move directly from the customer's bank account to yours through a licensed payments partner. There's no Qrisp balance to hack and no payout to redirect.
Verified business names
We verify every business's ABN and bank account before it can take payments. Customers see the verified name at checkout and in their bank app before they approve.
One-time, expiring codes
Sale codes lock the amount, work once and expire after 15 minutes. Invoice codes expire on the date you choose.
Typo-proof codes
Each code includes a check character, so a mistyped or altered code is rejected instead of paying the wrong business.
Switch off instantly
Lost a printed code, or think one's been tampered with? Switch it off from your dashboard and it stops working straight away.
Spotting a fake QR code
Scammers sometimes stick their own code over a real one. Three checks stop it:
- The page you land on starts with qrisp.com.au.
- The business name on screen matches the business you're paying.
- Your bank shows the same name before you approve. If anything looks wrong, don't approve, and tell the business.
Merchants: check your printed codes regularly, and switch off any code that looks tampered with.
How we protect your account
- All traffic is encrypted with TLS, and the site enforces HTTPS.
- Passwords are stored as salted scrypt hashes and never in plain text. Two-factor sign-in arrives before launch.
- Business verification and anti-money-laundering checks follow AUSTRAC requirements.
- Your data is kept in Australia wherever our providers allow it.
Found a security issue? Email security@qrisp.com.au. We'll respond within two business days.