Hai forumer,recently i heard info about these 2 payment gateway which is mostly used by gambling website,forex and suspicious website,they are same business activity as ipay88 and other registered & licenced payment gateway.

their operating scheme are all the same,but they are unlicensed and not register in malaysia.

im curious on how they get the API on each bank,must be some insider give the API key to access to every each bank API payment gateway.
or they just good at hacking?

every bank really need to check their banking system security to prevent such glitch and this illegal activity.

i never try their banking system i just too scared they might get our login detail by login using their system. who knows?

anyone experienced using this help2pay and trustpay88 company before? please share some thought with us.

i also share my conversation with bank negara regarding this company,still ongoing discussion and under investigate.


their website very not transparent with no company address/phone number and only deal through email :
www.help2pay.com
www.trustpay88.com


i will keep update here everytime i get feedback/reply/news/info from bank negara,sc and skmm.

This post has been edited by khazfx: Feb 19 2019, 03:40 PM


Attached thumbnail(s)


Attached File(s)
 H2P_Info_Pack.pdf ( 1.63mb ) Number of downloads: 491
 H2P_Terms_2018v1.pdf ( 60.7k ) Number of downloads: 303
 Help2Pay_Deposit_Integration_Specification_Ver_1.0.38.pdf ( 799.38k ) Number of downloads: 483
 Help2Pay_Payout_Integration_All_Currency_Ver_1.0.19.pdf ( 953.94k ) Number of downloads: 360
 Help2Pay__System_Guide_v1.0.1.pdf ( 1022.68k ) Number of downloads: 411

TS joined today and posted 2 related posts.

TS ex-employee?

Cannot use main account..
That's why open new one 😊

Anyhow its quite surprise they can operated and with link to banks too... Like TS said.. Insiders help I guess...

hi sir, of course i am not ex employee or related to them,just concern about this illegal company,nowdays many company use their service like gambling website,forex,and other unlicensed website.

i did search for this company feedback on google,none.

Thats why i opened an account and this topic to get further information about this company.

This post has been edited by khazfx: Feb 19 2019, 12:55 PM

honestly i dont have other account and never had one,previously im just a silent reader.


thanks for your thought anyway.

In the payment processing industry, there is a niche market for high-risk merchants. It is very hard for them to get a standard merchant account because of their business risks and chargeback.

Therefore, you will see the existence of high risk merchant processors that charges high discount rate.

To answer your questions.

a) Is this company regulated by BNM? No.

b) Is this a scam? Plausible if they runaway with your money one day. But it is serving a need in the industry by charging higher rate. It has a business model that sustainable.

is it safe for user to key in login details? they might get or store our username and password by using their system since the system provided is their own adjusted link and API system..possibly in future they will use our data for crime or even steal our money. we dont know how reliable this company , anytime they can runaway with our money and data.

from a perspective point of view,what penalties and offenses are imposed if the government or authorities can identify who is involved.

under what act is this offense convicted?

In normal payment gateway, you do no need to give bank login details to 3rd party. The payment processor will redirect to bank pages for processing and returns the transaction token once done.

Interestingly, what business are you in? Why do you need to use high risk merchant processor?

yes in this case we do transaction on their own link,not bank link. you can refer to my photo attached on the 1st post.


i do trade forex,i do some survey recently many forex broker start accepting this illegal payment gateway,which makes me wondering why do they use such illegal company for their payment processing.

if you do search on google "help2pay" or "help2pay forex" or "trustpay88"

you will find many gambling and some forex brokers using their service. but most are gambling companies. casino online etc.


me and other forex trader group have lodged a report to BNM, SC and SKMM so that they will investigate more about the activities of this company.

This post has been edited by khazfx: Feb 19 2019, 02:06 PM

So you are doing Forex, and your competitors are using this payment gateway. You are very worrying about their clients. So you filed a report with BNM to protect them.

How do you accepting Forex payment from your clients? Do you mind to share?

like i said,i only trade forex on several brokers and i do not own any forex company.

I hope you understand that the Forex platform you are trading right now might has higher risk than this payment gateway.

yes i do,forex and risk are common,everyone knows.

seems like you trying hard backing up this illegal payment gateway company,u do have any related with them?

i would like to focus only on the topic discussion. no offense.

thanks for your concern though.

This post has been edited by khazfx: Feb 19 2019, 02:29 PM

Disclaimer: I have no relationship with the companies.

If you look at the API, it does not request for online banking login and password. Therefore, I believe it should redirect to bank site to perform the transfer request. Our banks are using two-factor login system. Therefore, keeping your login and password is not useful.

I can go into very technical investigation here, but I don't see any possible hacking activities yet.

looks like you have a knowledge in programming? which is good and advantage for you to investigate further,you may have a look at the integration file i have attached on the 1st post.


They do not redirect to bank site,it redirect to their own link instead : https://directpay.racethewind.net


you can take a look at the photo i shared.

This post has been edited by khazfx: Feb 19 2019, 03:15 PM


Attached thumbnail(s)

Since you have lodged a report to BNM, why don't let them investigate on the matter.

Out of my curiosity, do you have the screenshot for 2nd and 3rd steps?

This post has been edited by mas1900: Feb 19 2019, 03:22 PM

nope,i do not trust the system enough to key in my bank login details there.

i open this thread to seek for any opinion or anyone who have experienced using their system before.

or maybe can share other info about this company.

This post has been edited by khazfx: Feb 20 2019, 07:38 PM

if it based on the url shown, it illegal. you cannot login from their site and redirect to bank. your account info will be expose. Each bank will their own page to go to so you can login to your account.

most likely yes,maybe they do this manually on bank website using customer details?

i assume that once customer logged in through their system (https://directpay.racethewind.net), their system or bot will trigger and go through the bank website and logging in using customer login details provided.

from what i read, it also take time around 3-5 minutes before customer receive the TAC number. make sense they keep customer login details in order to manually login and request the TAC number then proceed with the next stage like normal banking do.

based n my experience, when the customer want to pay by online banking, we can simply redirect to the bank login page together with the buy list item ( it done using ssl and some java server from eCommerce server to the banking server). so the customer can login to their account and proceed on payment... that feel more secured than you enter you login data into website and then they redirect for TAC. It maybe the site can collect customer login and password account..

that is the worst case scenario.

they might use customer data for crime or even steal customer money when they wanted to.

government or BNM should eradicate such activities as soon as possible before it getting worst IMO.

Based on the image, it seems to be Fxx forex broker, not sure your reporting to authority is a wise move. So far heard no or little negative comments on them. Hope your effort would not trigger the authority freeze their account and stuck them into no way, which eventually existing users will be in trouble. You may said you are helping, else you are leading users to black hole. But to be self protect, its your right to justify before depositing. Let us know your update on your investigation. Thanks

This post has been edited by fairylord: Feb 21 2019, 08:48 AM

yeap you are right. but i think since it online, better report also with KKMM (The Ministry of Communications and Multimedia) since it online... since maybe the operated outside malaysia..

But I think consumer must extra careful nowaday..

This post has been edited by vistro: Feb 21 2019, 02:58 PM

The goal does not justify the way.

however,what they do is totally wrong and illegal,users should be aware that they should not use unlicensed system such as help2pay and trustpay88. otherwise they will face the consequences of losing money and the account is frozen by the bank.

we do not know whether they are storing or stealing data of every customer who has been using their system, in addition they violate the banking act in malaysia

Yah,will do update here everytime i get info from BNM,SC and SKMM. Thank you

i did sent to skmm too.

hope to get their response as soon as possible

Please do not login using this site for any transaction. It is not the bank website. There is someone who retrieve your detail and login to the particular banks. You are sharing your login details with them. The only thing they dont have is the mobile phone for the TAC.

Couldnt agree more!

Hi guys. Any update on this?

was trying to invest in eToro, when topup, it links to this website, what's funny is I tried to search for the website in google, end up saw this post.

--

This post has been edited by jeevanpillai: May 14 2023, 10:19 AM

Are u sure this Is scam payment platform? Seems many forex and gambling websites use this as a way to transact. I googled and doesn’t seem to have any good or bad reviews on them.

I'm using eToro and have made deposits using 2 methods, Local Online Banking and Credit/Debit Card.

I find that the Local Online Banking option has better exchange rates (USDMYR), around 1% to 1.5% cheaper, compared to the Credit/Debit Card.

Choosing this option will redirect you to the https://directpay.racethewind.net page.

You are then required to provide your bank's username/password. There are instances that you'll need to give your answers to your security questions as well.

You'll then receive an SMS to enter your OTP. Whole process takes around 1 to 2 minutes.

You may find this unsettling because of the obvious security issues. First thing banks tell you not to provide -> username, password, security answers/questions.

Also, the receiver name won't be "eToro" on your transaction receipts. Go figure.

There is also a chance that your deposit will not be immediately reflected on your eToro account.
Good thing customer service is responsive and have resolved every issue I had, just as long as you present the transaction receipts.

Credit/Debit Card is definitely more convenient and funds are reflected immediately, without compromising any of your online banking information.
You just need to enter your card details, similar to paying in Shopee/Lazada.

And this time, "eToro" will be reflected in your transactions.

My workaround for the Local Online Banking, is to change my bank's password, immediately, each and every time after making a transaction, successful or not.
And when they do ask for the security answers/questions, I also change it after.

I find comfort that passwords, security answers/questions, and mobile numbers (not visible) can't be changed without the OTP.
Also, I'm not using my "main" bank account for this.

Giving answers to security questions sounds like a big no-no. Usually security questions are only needed for password change/account verification stuff etc.