Monitoring your payment page (skimmers and PCI DSS 4.0)
How the edge keeps track of which scripts belong on your checkout page, what to do when you get an alert and when to block unknown scripts.
1 min read · updated 12 Oct 2026
Skimmers are small scripts that hackers place on a checkout page to read card details. As a shop owner, you don't see anything. That is why the PCI DSS 4.0 payment standard requires webshops to keep track of which scripts run on their payment pages.
How it works
The edge recognises your checkout, cart and payment pages and keeps a list of all scripts that load there. The first time, this is the baseline. If a script from a new domain is added later, you get an email and it appears under New on your payment page.
Got an alert?
- Do you recognise it (for example a new plugin or tracking you added yourself)? Click I know this, approve.
- Don't recognise it? Have it checked right away and send us a message.
Scripts from Mollie, Stripe, Adyen, PayPal and Klarna are always allowed.
Block unknown scripts
Do you want only approved scripts to run on your payment page? Then turn on Block unknown scripts on payment pages. Do this only after monitoring for a week, so everything that belongs there has already been approved.
