Mobile & Social E-Commerce: Apps, Payments, Viral Growth & Security

Core Concepts: Definitions and How They Work

1. Mobile E-Commerce (M-Commerce)

Definition: Buying/selling goods/services via mobile devices (smartphones, tablets) using apps, mobile-optimized websites, or SMS-based transactions.

How it works:

• Mobile Apps: Dedicated apps (e.g., Daraz, Pathao) or browser-based m-commerce sites (e.g., Daraz.mobi).
• Mobile Payments: QR codes, mobile wallets (eSewa, Khalti), UPI (India), or bank transfers.
• Push Notifications: Real-time alerts for discounts, abandoned carts, or order updates.
• Augmented Reality (AR): Virtual try-ons (e.g., Ray-Ban app) or 3D product previews.

Worked Example: Pathao’s Order Queue Pathao uses a priority-based queue system for ride requests:

1. User opens the app → location shared via GPS.
2. Nearest driver with an available bike is matched (algorithm considers distance, driver rating, and surge pricing).
3. If no driver accepts, the request waits in a FIFO queue until the next driver picks it up.
4. Payment is processed via Khalti/eSewa before the ride starts (non-repudiation: both parties can’t deny the transaction).

flowchart TD
    A["User opens Pathao app"] --> B["GPS location shared"]
    B --> C["Driver matching algorithm"]
    C --> D["Driver accepts/rejects"]
    D -->|"Accept"| E["Order confirmed\nPayment via Khalti"]
    D -->|"Reject"| F["Queue for next driver"]
    E --> G["Ride starts"]
    F --> G

2. Social E-Commerce (S-Commerce)

Definition: Integration of social media platforms (Facebook, Instagram, TikTok) into the e-commerce funnel—from discovery to purchase—using features like:

• Shoppable Posts: Tags/products in images/videos (e.g., Instagram Shopping).
• Live Shopping: Real-time product demos (e.g., TikTok Live, Taobao Live in China).
• User-Generated Content (UGC): Reviews, unboxings, or influencer endorsements.
• Social Proof: Likes, shares, and comments as trust signals.

How it works:

1. Discovery: User sees a product in a Reel/Story (e.g., a Nepali fashion brand on Instagram).
2. Engagement: Likes/comments trigger algorithmic promotion.
3. Conversion: Clicking the "Shop Now" tag takes them to the product page (hosted on Shopify or WooCommerce).
4. Post-Purchase: User shares their purchase (e.g., "Just got my Daraz order! #Unboxing") → free marketing.

Real-World Tie-In: TikTok Shop in Nepal TikTok Shop (launched in Nepal in 2023) uses:

• Live Streaming: Influencers like @NepaliFashionista demo products in real time, with viewers buying via in-app checkout.
• Social Proof: "Sold out!" badges appear when a product reaches a threshold (e.g., 100 units).
• Microtransactions: Viewers can tip creators (via TikTok Coins) to unlock exclusive discounts.

Key Technologies and Tools

3. Mobile Payment Systems in Nepal

Worked Example: eSewa Transaction Flow

1. User selects a product on Daraz → clicks "Pay with eSewa."
2. eSewa app opens → user enters amount and selects bank account.
3. OTP sent to registered phone → user enters OTP.
4. Transaction hashed (encrypted) and sent to Daraz’s server.
5. Daraz confirms payment → order is processed.

sequenceDiagram
    participant User
    participant Daraz
    participant eSewa
    participant Bank
    User->>Daraz: Selects product, clicks "Pay with eSewa"
    Daraz->>eSewa: Sends payment request (₹500)
    eSewa->>User: Displays amount + bank list
    User->>eSewa: Selects bank, enters OTP
    eSewa->>Bank: Requests fund transfer
    Bank-->>eSewa: Returns OTP (via SMS)
    eSewa->>Daraz: Sends hashed transaction ID
    Daraz->>User: Confirms order (SMS + app notification)

4. Social Media Marketing Strategies

A. Viral Marketing

Definition: Exponential growth of content through sharing (e.g., challenges, memes, or referral bonuses). How it works:

1. Trigger: A compelling hook (e.g., "Tag 3 friends to get 20% off").
2. Transmission: Users share to unlock rewards (e.g., Khalti’s "Invite & Earn" program).
3. Amplification: Platform algorithms boost high-engagement posts.

Example: Daraz’s "Daraz Days"

• Strategy: Limited-time flash sales with countdown timers.
• Viral Element: Users share screenshots of "Sold Out!" alerts.
• Result: 300% increase in app downloads during sales.

B. Influencer Marketing

Definition: Partnering with micro/macro-influencers to promote products. Types in Nepal:

Worked Example: Khalti’s Referral Program

1. Influencer posts: "Use my Khalti referral code KHALTI50 to get ₹50!"
2. New users register via the code → both user and influencer get ₹50 credited.
3. Tracking: Khalti’s backend logs referrals via unique URLs (e.g., khalti.com/ref/KHALTI50).

Security and Challenges

5. Security Threats in Mobile/Social E-Commerce

Worked Example: OTP Hijacking on Pathao

1. User receives OTP for a ₹1,000 ride.
2. Malware on their phone logs the OTP and sends it to a hacker.
3. Hacker uses the OTP to cancel the ride and request a refund to their own Khalti account.
4. Result: User loses ₹1,000, and Pathao’s fraud team flags the account.

Solution: Pathao now uses OTP masking (shows only the last 2 digits) + biometric re-authentication for high-value rides.

6. Legal and Ethical Considerations

• GDPR vs. Nepal’s Data Privacy Law (2018):
  • Nepal’s law requires explicit consent for data collection (e.g., Daraz must ask users to opt-in for marketing emails).
  • Penalty: Up to ₹500,000 or 2 years in prison for unauthorized data sharing.
• Consumer Protection:
  • Right to Cancel: Nepal’s Consumer Protection Act (2018) allows 7-day returns for online purchases (unless the product is digital).
  • Dispute Resolution: Ncell’s eCommerce portal uses Nepal Telecom’s Ombudsman for payment disputes.

Worked Example: Daraz’s Return Policy

1. User buys a phone case → receives a damaged item.
2. Step 1: User uploads photos/videos of the damage to Daraz’s app.
3. Step 2: Daraz’s AI checks for policy violations (e.g., "used as excuse").
4. Step 3: If valid, Daraz issues a refund via Khalti within 3 days.

flowchart LR
    A["User reports issue"] --> B["AI checks evidence"]
    B -->|"Valid"| C["Refund approved"]
    B -->|"Invalid"| D["Case escalated to human review"]
    C --> E["Khalti refund processed"]
    D --> F["Manual review\n(24–48 hours)"]

In the Real World

1. Pathao’s Dynamic Pricing

   • Idea Used: Surge pricing algorithm (like Uber).
   • How: During peak hours (e.g., 7–9 PM in Kathmandu), Pathao increases fares by 20–50% to balance supply-demand.
   • Impact: Reduces wait times by 40% and incentivizes drivers to work during shortages.

2. Khalti’s "Pay with a Wave"

   • Idea Used: NFC (Near Field Communication) for contactless payments.
   • How: Users tap their Khalti card on a merchant’s NFC-enabled terminal (e.g., at a café in Thamel).
   • Security: Uses tokenization (replaces card details with a unique code per transaction).

3. Daraz’s "Daraz Cash" Loyalty Program

   • Idea Used: Gamification + Recommender Systems.
   • How:
     • Users earn "Daraz Cash" for every ₹100 spent.
     • The app suggests products based on past purchases (e.g., "You bought a phone case; here’s a screen protector!").
   • Result: 30% increase in repeat purchases.

Exam Tip

What Examiners Love to Test

1. Differentiate M-Commerce vs. S-Commerce:

   • M-Commerce: Focuses on transactions (e.g., mobile wallets, QR codes).
   • S-Commerce: Focuses on social interaction (e.g., live streams, UGC).
   • Exam Trick: Ask for one example of each (e.g., Pathao for m-commerce, TikTok Shop for s-commerce).

2. Security Threats:

   • Always link threats to real Nepalese examples (e.g., "Phishing via fake eSewa apps").
   • Mitigation is a must—don’t just list threats.

3. Mobile Payment Flows:

   • Draw a sequence diagram (like the eSewa example above) for any payment system question.
   • Highlight OTP, encryption, and non-repudiation.

4. Viral Marketing:

   • Explain the 3-step process (Trigger → Transmission → Amplification).
   • Use Daraz Days or Khalti’s referral program as examples.

5. Legal Frameworks:

   • Mention Nepal’s Data Privacy Law (2018) and Consumer Protection Act (2018).
   • For disputes, name Ncell’s Ombudsman or Daraz’s AI review system.

Common Mistakes to Avoid

• Vague Examples: Don’t say "WhatsApp is used for payments"—specify WhatsApp Pay (India) or WhatsApp Business API.
• Ignoring Nepal Context: Examiners expect local examples (e.g., Khalti, Daraz, Ncell).
• Overlooking Security: Always pair a threat with a mitigation strategy.
• Confusing SEO with Social Commerce: SEO is for search engines; social commerce is for platforms like Instagram.

Pro Tip: For short-answer questions, use the PEEL method:

• Point: State the key idea (e.g., "Mobile wallets improve transaction speed").
• Example: Give a Nepal-specific case (e.g., "Khalti processes 50% of Daraz payments").
• Explanation: How it works (e.g., "Users link bank accounts to Khalti via OTP").
• Link: Connect to a broader concept (e.g., "This reduces cash dependency, aligning with Nepal’s digital economy goals").