Payment apps and mini programs run by six licensed payment institutions make up 17 of the 41 apps and SDKs named on October 29 by the Shanghai Communications Administration (上海市通信管理局) in its seventh 2026 batch of notices on apps that infringe user rights. The firms are Fulinmen, 99Bill, Allinpay, SandPay, Shanghai Dianyin and Fuiou.
Fulinmen had the most entries, six WeChat mini programs for merchant collection, checkout and ordering, cited for not stating personal data rules and for failing to handle complaints. All four 99Bill apps were cited for complaint handling. Allinpay also had four, with problems that include collecting personal data beyond scope and demanding phone permissions repeatedly. SandPay’s card purchase service was cited for illegal data collection, Shanghai Dianyin’s for complaints, and a Fuiou ordering mini program for data collection and hard account cancellation.
Each firm must fix the problems, run a self-assessment and file a report within five working days. The regulator removed 46 apps that missed earlier deadlines in June and nine more in August after failed rechecks. On October 30, Mpaypass reported, the People’s Bank of China (PBOC) approved a new controlling shareholder for Fulinmen after a court-supervised restructuring, along with a new Chinese name, 上海富临门支付.
Why it matters: These apps are the merchant-facing front end of card and QR code acquirers, so the data at stake covers merchants as well as their customers. Complaint handling, cited for three of the six firms, has become a frequent ground in these notices, according to Mpaypass. For Fulinmen, the notice lands as its new owner takes over, with its payment licence valid only until December 21, 2026.
Sources: 移动支付网 Mpaypass, October 30, 2026, and 移动支付网 Mpaypass, October 31, 2026; 上海证券报 Shanghai Securities News, October 30, 2026 (Chinese-language sources, translated)
Image: Harald Groven, CC BY-SA 2.0, via Wikimedia Commons
