Secure Payment Confirmation (SPC) is a web payment standard that asks the user to explicitly approve a transaction after the browser has shown the exact payment details, such as the merchant, amount, and often the payment origin. The approval is cryptographically bound to that specific payment request, so the confirmation is not just a generic login or one-click authorization.
This matters because attackers often try to abuse payment flows by changing destination details, exploiting session hijacks, or tricking a user into approving something different from what they intended. SPC helps defend against those attacks by making the payment context visible and by tying consent to the transaction data that was displayed. In practice, browsers, payment providers, and merchants must validate the ceremony carefully; if they accept a confirmation without checking the correct origin or amount, the protection weakens. SPC is therefore a control for precise, phishing-resistant payment approval, not a replacement for broader fraud detection.