KRP*EXIMBAY Charge Explained: Merchants, Verification, and Disputes

A charge labeled “KRP*EXIMBAY” on your card statement is a payment processed by Eximbay, a South Korean payment gateway run by KR Partners Co., Ltd. The descriptor replaces the actual store’s name, so the charge almost always traces back to a purchase from a Korean online retailer, a K-pop merchandise or fan platform, a duty-free shop, an airline, or a hotel that uses Eximbay to handle international card payments.1Eximbay. Eximbay Global Payment Gateway

“KRP” stands for KR Partners, the corporate entity behind Eximbay; Crunchbase lists “KRP,” “KR Partners,” and “EXIMBAY” as aliases for the same organization.2Crunchbase. Eximbay Company Profile Eximbay processes payments for more than 10,000 member stores across retail, e-commerce, entertainment, aviation, and hospitality.1Eximbay. Eximbay Global Payment Gateway

Which Merchants Produce This Charge

Because Eximbay’s name sits in place of the actual seller’s, the first job is matching the charge to something you bought. Confirmed merchants and partners that route payments through Eximbay include:

How to Verify the Charge Is Yours

Think back through any recent purchases from Korean online stores, fan platforms, duty-free shops, airlines, or hotels on the card that was billed. Subscription renewals and preorder shipments are easy to forget, especially when the charge posts weeks after you ordered.

Search your email for order confirmations from Weverse Shop, duty-free retailers, or any K-pop fan service you’ve used. The transaction amount and date on the confirmation should match the KRP*EXIMBAY line on your statement. If you share the card with a family member, ask whether they placed an order.

How to Dispute a Charge You Don’t Recognize

If nothing matches, start with Eximbay. The company’s help center accepts inquiries through an online form at support.eximbay.com, and manual refund requests go to onlinesupport@eximbay.com. Include the payment date, the order number if you have one, the first and last four digits of the card, and the buyer’s email address.8Eximbay. How to Refund the Transaction Manually Refunds processed through Eximbay can take up to four weeks to appear on a card statement.9Eximbay. How to Check the Refund Transaction

If Eximbay doesn’t resolve it, or if the charge looks unauthorized, call your card issuer and dispute it. Under the U.S. Fair Credit Billing Act, you must send a written dispute to your card issuer within 60 days of the statement containing the error. The issuer has to acknowledge the complaint within 30 days and resolve it within 90 days, and you don’t have to pay the disputed amount while the investigation is pending. Federal law caps your liability for unauthorized credit card charges at $50.10Federal Trade Commission. Using Credit Cards and Disputing Charges

If you believe your card number was stolen, ask your issuer for a replacement card and consider placing a fraud alert with the major credit bureaus.11Office of the Comptroller of the Currency. Credit Card and Debit Card Fraud

Past Security Concerns

In July 2023, a wave of K-pop fans reported unauthorized charges, often appearing as purchases from a Walmart in Arkansas, on cards previously used on Weverse, b.stage, TOKTOQ, and KCON ticket sales. Many fans suspected an Eximbay data breach, though some victims said they had never used Eximbay, so the common point of compromise was never conclusively identified.7Koreaboo. K-Pop Fans Report Unexpected Fraudulent Charges on Credit Cards

On July 27, 2023, Weverse Shop removed Eximbay and Toss Pay from its available payment methods while an investigation was underway.12Weverse Shop. Notice Regarding Temporary Suspension of Payment Methods On August 7, 2023, Weverse Shop reinstated both methods, stating that an investigation by the payment gateway and related corporate bodies had concluded “no unauthorized payments were made through the payment gateway.”13Weverse Shop. Notice Regarding Reinstatement of Payment Methods Separately, an NTT DATA case study confirms that Eximbay experienced a “critical cyberincident” that prompted card brands to require a fresh PCI DSS assessment and DESV certification; the case study does not specify the date or what data was involved.14NTT. Eximbay Case Study A current KRP*EXIMBAY charge on your statement is far more likely to be a real purchase than a fraudulent one, but if nothing you’ve bought lines up with the amount, treat it as unauthorized and dispute it.