One Click, One Risk: How Safe Are Digital Zakat Transactions?

By Muhammad Afiq Mohd Asri

The first of two reports in this series examines digital zakat payments, which have robust security features, but risks of fraud such as manipulating users through phishing, links and fake websites, QR codes and impersonation of official channels still need to be addressed.

KOTA BHARU, Aug 14 (Bernama) -- In this digital era, almost everything can be done at one’s fingertips, including fulfilling the obligation to pay zakat, the third pillar of Islam.

Through digital channels, zakat payments can be made quickly without having to visit zakat collection centres, which would naturally involve additional cost and time.

In the Federal Territory, for example, Pusat Pungutan Zakat-MAIWP (PPZ-MAIWP) provides various digital payment channels, including the PPZ-MAIWP Portal, Digital Zakat Counter (KZD), internet banking, e-Wallets and online portals, as well as e-Mandate and auto-debit.

Although the variety of channels gives payers more options to fulfil their obligation, security aspects must also be given due attention in tandem with the growth of such digital transactions.

As payment transactions become increasingly easy to carry out via smartphones and online platforms, what risks might payers face, and to what extent can they identify whether their transactions are truly secure?

Users must not only ensure that the payment amount entered is correct, but also make sure they are accessing a legitimate payment channel rather than fake links or websites and manipulated QR codes.

RISK OF USER VULNERABILITIES BEING EXPLOITED

Universiti Kebangsaan Malaysia (UKM) Centre for Cyber Security, Faculty of Information Science and Technology lecturer Assoc Prof Dr Masnizah Mohd said digital zakat payments were generally safe if carried out through official platforms and channels with good security controls.

She said technologies such as data encryption, identity verification and transaction monitoring could help protect users’ information and money.

She added that scams that exploited human negligence, including through phishing, fake links and websites as well as impersonation of zakat institutions, also needed to be monitored.

“Users must ensure that payments are made through official channels, while zakat institutions must continue to strengthen the monitoring and detection of suspicious transactions.

“Awareness, education and vigilance are important mechanisms in protecting users from becoming victims,” she told Bernama recently.

Masnizah, who is also the Deputy Director (Strategy and Applications) of the Digital Technology Centre (DigitalUKM), UKM, said among the social media platforms posing risks were WhatsApp, SMS, e-mail or social media accounts being used to send links or QR codes that appeared to be official payment channels.

She said users who accessed such links could be directed to fake websites resembling official sites to steal banking information, passwords or authentication codes, while QR codes could direct payments to recipient accounts that did not belong to zakat institutions.

“Users should not assess the security of a link, website or QR code based solely on its appearance. The payment channel must be verified through official sources before any transaction is made,” she said.

Masnizah said zakat payment platforms should also have layered defences, including data encryption, robust identity verification, transaction authentication, access controls and real-time transaction monitoring.

She said payment systems should enable users to check the recipient’s name and transaction amount before final approval to ensure that the approved transaction was as intended.

“If the recipient’s (of the zakat payment) name or amount does not match, the transaction should be cancelled. This approach is safer because users are not merely confirming that the transaction is taking place, but can ensure what they are actually approving,” she said.

Users should also check the website address, recipient’s name, amount and payment channel before clicking the “pay” button, she said, adding that they should prioritise direct access to the official website of the zakat institution instead of using links received through messages or social media.

USERS WANT CONVENIENCE, SECURITY REMAINS A PRIORITY

For zakat payer Mohd Aliff Ashraf Ismail, 35, the variety of digital payment channels provided by PPZ-MAIWP, including the PPZ-MAIWP Portal, internet banking and e-Wallets, makes it easier for him to choose a suitable method to fulfil his zakat obligation without having to visit a physical counter.

He said the convenience made payment transactions faster and more flexible as they could be carried out at any time, but security aspects still needed to be given attention, particularly when ensuring that transactions were made through official channels and checking payment details before confirmation.

“The convenience of digital payments must be accompanied by user awareness to avoid rushing into transactions, especially when receiving payment links or information from sources whose authenticity cannot be verified,” he said.

Another zakat payer, Siti Khadijah Afiyah Muhammad Syafiq, 29, said the convenience of the PPZ-MAIWP Portal and various digital payment channels enabled her to pay zakat more easily via her smartphone.

She said options such as internet banking and e-Wallets provided flexibility for users, particularly young people who were already accustomed to conducting financial transactions online.

However, she said the convenience needed to be used with caution as users must ensure that the platform being used was an official channel, and be wary of links, QR codes, or payment instructions received from unknown parties.

She said confidence in paying zakat digitally depended not only on the convenience provided, but also on ensuring that the personal information of zakat payers was protected.

-- BERNAMA