[Resolved]  Cred — System Security Compromised and Fraud Transaction of 480000 rupee

I, Rajesh Joshi, a registered user using since 2018

On 22.02.2022 at around 5.30 Fraudster called me from the mobile number [protected] claiming he is from CRED Support team and he will help me getting setup in instant payment refund setup,
(I was in regular talk with CRED support team that day for one failed transaction so there was no question of doubt arise meanwhile all this)

NO OTP NO CVV, NO REMOTE ACCESS GIVEN, NO SUSPICIOUS LINK CLICK, all this happened within CRED platform only, I doubt either fraudster has access to their system or may be their own employee involved in all this, To prove this claim, I am ready to go for forensic investigation to obtain call recordings.

if any of the details I have entered, it is in CRED App Only which I felt secured app (till the time fraud happened)

I HAVE ENTERED MY DETAILS ONLY IN PAYMENT SETTING SECTION.

Fraudster had accessed my account and did a rent payment using of 48, 000 rupee through my ICICI credit card, also fraudster had applied for Credit Line with their banking partner IDFC Bank amounting to 4, 85, 000 rupee (that is huge) having sanction letter reference number 65789996.

As soon as I got hint of being trapped, I instantly "tried to contact CRED but THEY DONT HAVE CUSTOMER SUPPORT NUMBER"

I had to tweet to them multiple times and after almost 25-30 minutes I got a call from support till that time the fraudster had access to my CRED account.

I have blocked my ICICI as well LIC AXIS Credit Card, also tried to contact IDFC but it's also not worth it, had emailed as well tweeted them.

Have already logged cyber complaints, and in process of filling FIR after conclusive report from cyber cell.

Even I tweeted Cred Support tagging CEO but this guys didn't bother to reply or nor seems to be any interest on how all this happened on such a secured platform

After many followups with them they chose to remain silent, not giving any clarification on this, even I have tagged their CEO, Seniors from their Legal & Grievance Team but no one coming up and giving any statement on this matter. They have only email / social media support, And they have In-App chat but they have disabled my account so no access to contact them.

On email they are just sending robotic kind of reply or sometimes like we will help cybercell in investigation.
But not ready to accept their system security failure.
I believe they are not concerned about their milions o[censored]ser.

Now who is liable for this transaction of 48000 + Service charge ?

I repeated No information Shared with anyone. so in reply to this complaint dont says the same thing again and come up with the solution and bear the charges.