Recently, users in Shaanxi, Guangdong, Gansu and other places reported that their personal Meituan accounts were stolen in bulk from other places without their knowledge or operation, and were used to purchase multiple group buying coupons. The stolen funds were deducted from Meituan’s monthly payment, and some users lost thousands of yuan.
On July 28, according to Red Star News, based on the information provided by the damaged users, the reporter contacted Meituan customer service. The customer service stated that the coupon code had been written off and could not be refunded. If you need to know the background details of the stolen order, you need to obtain it through judicial verification procedures. Currently, some users have called the police.
Meituan customer service responded that after a review of the platform's backend, it was determined that many abnormal transactions may have been caused by Trojan viruses being implanted in users' mobile devices. Because the mobile phones accidentally clicked on malicious links and were infected with the virus, the mobile phones were remotely controlled to bypass regular account verification and risk control monitoring mechanisms, simulating normal user operations to complete the entire process of order placement and write-off, making it difficult for the platform's regular risk control system to identify and intercept.
Mr. Guo from Henan Province was stolen and swiped about 4,000 yuan. He told Red Star News that his mobile phone had a black screen and was shut down and restarted. Another Mr. Ling from Foshan, Guangdong who had his phone stolen also said that his phone once clicked into the app and got stuck, then the screen went black and he tried again.
As of now, the Meituan platform has not issued an announcement regarding this batch of fraudulent transactions. Regarding the relevant situation, Meituan customer service responded to Jiemian News. The specific situation requires internal confirmation before replying.
According to reports from multiple victims, fraud incidents mostly occurred in the early morning and late at night. The stolen funds were paid through Meituan Monthly Payment, and the users involved had all activated the platform’s password-free payment function for small amounts of less than 500 yuan. The stolen orders are various types of catering and leisure group purchase coupons, and they are quickly canceled and used by stores in other places after the order is placed. Many users woke up the next day and received repayment bill text messages, only to discover abnormal consumption in their accounts.
Recently, rights protection orders related to Black Cat Complaint Platform have also continued to surge. On July 29, Jiemian News reporter inquired about Black Cat’s complaints and found that a consumer filed a complaint on July 25, saying that his Meituan monthly payment was stolen for an amount of 2,473.53 yuan on July 21, 2026. The stolen monthly payment was seen to be consumed by buying meal coupons, and he was in Gansu. When it was stolen, Meituan did not send a short message reminder.
Another consumer complained on July 20 that at about 5 a.m. on July 15, 2026, Meituan Monthly Pay was stolen for 3,522 yuan. There was no personal operation in the process. Meituan Monthly Pay defaulted that the criminals continued to steal 8 bills, resulting in a loss of 3,522 yuan.
Interface News inquired about Meituan's official public service agreement, which stipulates the rights and responsibilities of secret-free payment. The small-amount secret-free payment service independently opened by the user is a payment method actively authorized by the user, and the platform completes the compliant transaction in accordance with the authorization. Users should properly keep important information such as their login account name, password, mobile phone dynamic verification code bound to the designated payment account, and personal identity information, and not disclose it to any third party. If you find that others have used or misappropriated your information, please contact Meituan customer service immediately.
Many users stated in their complaints that they never leaked their account passwords, never lent equipment, and maintained account security operations in a standardized manner, but they suddenly experienced abnormal consumption. However, some victim users confirmed that they have recently clicked on unknown and strange links pushed by text messages and social platforms.
Network security experts said that the skimming incident exposed common security risks in the use of mobile payments. Unknown and unknown links are the main transmission carriers of Trojan viruses and phishing programs. After users click on them, they can easily cause the device to be remotely controlled and leak account and payment-related private information. The opening of small-amount password-free payments and monthly overdraft functions has significantly lowered the operating threshold for fraudulent transactions. Criminals can quickly complete multiple small-amount purchases in batches, avoid platform risk control warnings, and ultimately cause large property losses to users.
The majority of Internet users need to increase their awareness of mobile payment security, and resolutely not click on unknown links in text messages, WeChat groups, and unfamiliar private messages, and do not download informal channel applications at will. When using various daily services and payment platforms, you can turn off the small password-free payment function as needed, check bills and login device records regularly, and log in to unfamiliar login devices in a timely manner. Once abnormal account consumption, remote login, etc. are discovered, the account must be frozen as soon as possible, order screenshots, login logs and other evidence must be retained, the police must be promptly called, and the platform customer service must be contacted for filing.