Fraud Prevention With Branta
Paying With and Without Branta
Payments sent from a Branta integrated wallet are checked automatically. Customers automatically see the name and branding of the business they are paying when they scan the invoice.
With Branta
Scan the invoice
-Red.png){kind=small}
Peony LaneCheck who they're paying
Peony LanePay
Without Branta
Scan the invoice
Check who they're paying
Pay
Verifying From a Web Checkout
Not every payment is sent from a Branta integrated wallet, but Branta still works. Customers can click to verify the address in their browser when paying a Branta enabled business.
With Branta
Invoice generated
Peony LaneClick to verify
Pay from your phone
Without Branta
Invoice generated
Pay from your phone
Man-in-the-Middle Scenario
An attacker who can reach an invoice can change the address on it. Nothing looks wrong to the customer — the amount and the sender are unchanged, and only the destination has moved.
Without Branta
Business
Sends invoice
Attacker
Tampers invoice
Customer
Pays tampered invoice
Attacker
Receives the money
With Branta
Business
Sends invoice
Attacker
Tampers invoice
Branta
Displays counterparty info
Customer
Does not pay the tampered invoice
Whitelisting vs. Branta
A whitelist answers “was this address correct?” once, on the day it was approved. Branta answers “is this address correct?” every time an invoice is created.
Whitelisted Address
Whitelist
Address approved once, after review
Attacker
Gains control of the approved address
Customer
Pays it — the address still matches the list
Attacker
Receives the money
With Branta
Business
Creates invoice
Branta
Verifies the address as the invoice is created
Customer
Pays the verified address
Business
Receives the money