Skip to content
Go to DonorCARE

Verify a receipt

The public page anyone can use to confirm a receipt you issued is genuine.

Who can see this Owner, Admin, Finance, Member, Viewer

Every receipt DonorCARE issues comes with a shareable link that shows exactly what your organization filed — anyone holding it can confirm the receipt is genuine, because it’s read live from your records, not a static file that could be edited after the fact.

A PDF on its own can be altered before it’s passed on. DonorCARE’s shareable receipt link isn’t a copy — it’s a page that reads the same donation record the PDF was built from, every time it’s opened. If a donor, an auditor, or LHDN itself needs to confirm a receipt is real, opening the link shows the same amount, donor name, receipt number and (where MyInvois is connected) e-invoice status your organization actually has on file — there is nothing to forge, because nothing is stored as a separate, editable copy.

Shareable link — the /r/ link on every receipt, available from Open Receipt Link on the donation record or in the receipt email. It’s what a donor uses to view or re-download their own receipt, and it’s the same link that works as a verification tool for anyone else you give it to.

Short code — the random code in the link. It isn’t tied to your organization’s ID or the donor’s, so a link can’t be guessed by trying nearby donations.

Do

  • Share the receipt link itself when someone needs to confirm a receipt is genuine — it shows your organization’s live record, not a copy that can drift out of date.
  • Treat the link as sensitive. It opens without a login, so anyone holding it can view the donation’s details.

Don’t

  • Post a receipt link somewhere public. It discloses the donor’s name and, for MyInvois-connected organizations, their tax identification details — treat it the way you’d treat the PDF itself.
  • Expect a separate “verify” tool distinct from the receipt page — there isn’t one. The receipt page is the verification.

A donor’s employer asks for proof a RM1,000 donation is genuine before approving a matching gift. The donor forwards their DonorCARE receipt link. The employer opens it and sees the same donor name, amount, receipt number and organization details as the emailed PDF, confirming it wasn’t altered — without needing to contact your organization at all.