Dear Team,
I am writing to raise a serious concern regarding a potential data breach on your platform which led to an attempt of financial fraud. I believe my personal information was leaked immediately after I submitted an enquiry for a personal loan on paisabazaar official website.
Here is a detailed account of what transpired:
I registered on your website from my personal laptop to inquire about a personal loan for my cousin.
Within 5 minutes, I received a call from someone [[protected]] claiming to be from Paisabazaar. He mentioned my recent loan enquiry and sounded convincing.
Shortly after, I was contacted on WhatsApp by another individual named Abhishek [[protected]], claiming to be the caller’s colleague. He asked for personal details, including PAN and Aadhaar, via WhatsApp chat and calls.
Upon asking for official verification and process clarity, he claimed to be processing the loan through IDFC First Bank. He refused to communicate via email and insisted on WhatsApp only.
When I noticed a suspicious URL in the "consent link" he shared with my cousin, I raised several red flags and asked for official credentials.
The person then became verbally abusive and used derogatory language, which further confirmed the fraudulent intent.
I immediately reported this to the Paisabazaar customer care. The representative mentioned that these individuals were former employees who left around 6 months ago.
My questions and concerns are as follows:
If they are ex-employees, how do they still have real-time access to fresh user enquiries?
How did they know that I had just submitted a loan request with such immediacy?
Why is Paisabazaar not ensuring the revocation of access for ex-staff members and securing user data?
If strict data security measures are in place, how is it possible that my contact details were leaked to fraudsters?
This is not just a case of fraud but a data privacy violation that could result in financial losses and identity theft. I request that Paisabazaar:
Conduct an urgent internal audit to investigate this data leakage.
Share an explanation and action taken report with me regarding this incident.
Take stronger measures to protect the data o[censored]sers and ensure no other customers fall victim to such frauds.
I hope you take this concern with the seriousness and urgency it demands—not just for me, but for the safety of all users on your platform.
Sincerely,
Hari Pasupuleti
[protected]
hari.b.[protected]@gmail.com
Date of Loan Enquiry: 28th March 2024, Friday.
Was this information helpful?
Post your Comment