QUOTE(beLIEve @ Feb 15 2022, 03:49 PM)
Before payment gateway woh. Zcity redirect to TNG to enter phone and pin right? That part can grab your phone and pin already. Apps don't show URL unlike warez.
Lazada charge directly to TNG without the needs to enter phone and pin. As long as using genuine lazada app and account not compromised, should be safe.
zcity doesnt talk directly to tng geh
they are using the traditional method
there is a hidden party/system (ipay88) to redirect payment info to tng system to login first, then authorize deduction from tng wallet.
once done, it responds back to ipay88 (silently) and update zcity of payment status (success or fail)
another method is deep-linking method, like lazada-tng whereby tng ewallet already pre-authorized and "saved" within lazada system. this is similar to saved-cc method.