Verdict
shopeepay.co.id appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Marketing and product information page for ShopeePay Indonesia describing consumer e-wallet features, merchant solutions (QRIS), credit and loan products, integration with SeaBank, and security/compliance claims. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 9.0 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: 3 to 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website presents itself as the Indonesian ShopeePay platform, offering consumer e-wallet payments and transfers, QRIS merchant payments, financial services, merchant onboarding, and related banking and protection products.
Scam/Impersonation Risk
No phishing, blacklist, malware, or identity-contradiction indicators were observed. The site’s content is coherent with a corporate e-wallet and payment-service model, and its clean external reputation, established domain tenure, and substantial traffic footprint support an apparently legitimate assessment. An automated brand-similarity signal associated with another Shopee-branded domain was not corroborated by the page content, which specifically describes ShopeePay Indonesia; observed behavior also showed no login form, hidden sensitive form, wallet connection, cloaking, or clipboard-hijacking activity.
- The homepage describes ShopeePay consumer payments, QRIS transactions, merchant services, transfers, and financial features; the page-level assessment recorded no red flags.
- External reputation checks recorded 0 malicious and 0 suspicious detections, with no confirmed phishing or blacklist finding.
- The domain was registered on 2017-07-31 and is approximately 9.04 years old; registrar: PT Digital Registra Indonesia.
- The site has a Tranco traffic rank of 20650 and is within the global top 1 million.
Regulatory Verification Notes
The site presents security and compliance claims, including Bank Indonesia supervision and ISO 27001, but those claims should be treated as on-site representations rather than independently verified regulatory evidence. The homepage and navigation expose merchant, user-support, company-information, and contact pathways, while the supplied content does not provide a license number or independently confirmed registration detail. This is a verification and disclosure matter, not evidence of a scam. The financial-service scope warrants particular attention to the legal basis and applicable terms for SPayLater installment credit, SPinjam loans, SeaBank integration, insurance, and investment-related offerings.
- The homepage identifies the service as an e-wallet and merchant-payment platform and links to “Tentang Kami,” user help, merchant help, and contact functions.
- The page content states that ShopeePay operates under Bank Indonesia supervision and references ISO 27001 security compliance.
- The site advertises SPayLater with instalments of up to 24 months and SPinjam loans up to Rp100 million with terms up to 24 months.
What to Verify Next
Before credential or payment interactions, an independent check should confirm the relevant legal entity, applicable Bank Indonesia authorization, and the terms governing the intended service. Merchant users should independently review settlement, dispute, refund, and account-recovery procedures, while consumer users should confirm lending, insurance, and payment-protection terms through official channels reached independently of the page. Contact and support channels should also be confirmed through an established offline or independently sourced route.
- The homepage provides separate merchant registration, merchant guidance, user-support, and contact pathways.
- The site combines payment, credit, banking-integration, insurance, and investment-related offerings, creating a need to match each service to its applicable terms and authorization.
- The site’s transport encryption is currently valid, supporting secure channel verification during independent checks.
Summary Verdict
The overall posture is high trust and low risk, and the available evidence is consistent with an established, apparently legitimate website. The real-world operator identity remains independently unverified, so the trust conclusion should not be treated as proof of legal ownership or corporate control.
Infrastructure Integrity
The site resolves to infrastructure operated by SHOPEE-AS - SHOPEE SINGAPORE PRIVATE LIMITED in Singapore, with a single likely origin identified and no detected CDN edge. This identifiable hosting arrangement and trusted provider context are mitigating technical signals, but they do not independently prove site ownership or legitimacy.
- Hosted on AS138341 (SHOPEE-AS - SHOPEE SINGAPORE PRIVATE LIMITED, SG), registered through APNIC.
- The site resolves to 147.136.145.195 in Singapore; infrastructure analysis identified 1 unique IP and 1 likely origin IP.
- TLS certificate issuer: YR1; validation level: DV; valid to 2026-10-05T11:05:17+00:00.
Closing Assessment
Ordinary use may proceed within normal account, payment, and merchant-control safeguards, with independent confirmation of merchant identity, applicable terms, and payment protections completed before credentials or funds are committed.
Written analysis generated 2026-08-12 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of shopeepay.co.id.
- The request stayed on shopeepay.co.id. It was not redirected to another domain. Clear
- Registration is published under PT Digital Registra Indonesia. Clear
- DNS for this domain is served by awsdns-17.org, across 4 name servers. Noted
- The registration is paid up to 2027-07-31. Noted
- It is hosted on SHOPEE-AS, from a server in SG. Noted
Domain intelligence
| Registrar | PT Digital Registra Indonesia |
|---|---|
| Hosting | SHOPEE-AS - SHOPEE SINGAPORE PRIVATE LIMITED, SG |
| Country | SG |
| Server IP | 147.136.145.195 |
| Name servers | ns-1167.awsdns-17.org, ns-2022.awsdns-60.co.uk, ns-326.awsdns-40.com, ns-574.awsdns-07.net |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-05 |
| Domain age | 9.04 years (continuous registration) |
| Domain expiry | 2027-07-31 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about shopeepay.co.id at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.