Bug In Truecaller App Automatically Enrolled Users For UPI Services
Truecaller, a widely used mobile application to screen callers and block spammers, has rolled-back its latest app update after discovering a bug which automatically enrolled customers for its payment service.
Late Monday evening, several users of the application took to social media platforms to complain about the latest update of the Trucaller app, which led to unauthorised access to other apps available on the user's phone.
The complaints alleged that the bug had prompted an unauthorised encrypted SMS to be sent from the user's phone to an unknown number for registration with truecaller's payment service. While users were registered with the UPI-based payment service, no actual transactions took place.
The bug, however, prompted concerns among users and forced the company to withdraw the update.
In a statement issued on social media platform Twitter, Truecaller said that “it had discovered a bug in the latest update of Truecaller the payments feature (India only), which automatically triggered a registration post updating to the version.” The company added that it has discontinued this version of the app so that no other users are affected, further stating that they have already rolled out a fix in a new version.
“For the users already affected, the new version with the update will be available shortly. In the meantime, users can choose to manually deregister their UPI ID from the banking/payment settings,” the statement said.
July 30, 2019UPI is built and managed by the National Payments Corporation of India, which has already shut down any new customer on-boarding through Truecaller.
Dilip Asbe, managing director and chief executive officer at NPCI, said, “there was an issue in the app observed today. We have been updated that last night's migration had resulted in a bug in the workflow. We understand that it has been fixed and till then user on-boarding has been stopped in this app.” Asbe further said that NPCI will take action if Truecaller is found to be non-compliant with the security, encryption and developer standards that have been prescribed by the NPCI.
The issue, according to Asbe, is limited only to enrollment to the UPI service without consent. Even if customers are enrolled to the service without their consent, no actual transactions can take place without the mandatory two-factor authentication, he said.
-
Signature Play: The Classic Cocktail Is Dead. Or Is It?
Classic cocktails are disappearing from India's cocktail menus. But they're still being ordered, taught to bartenders and borrowed from. So, who's really having the last drink?
-
A New Samvat Wishlist: Inclusive Prosperity And Human Development
India has strengthened its economic foundations through infrastructure, digital access and enterprise. Its next growth chapter must deepen productivity, create better livelihoods and widen participation in prosperity.
-
Love, Sex Aur Dhokha: The Audacious Plot To Spy On Jensen Huang
A Taipei dinner, a Singapore chip buyer and a suspected Chinese asset: inside the alleged spy operation that got close to NVIDIA's Jensen Huang.
-
Ten Things I Learnt This Samvat
Patience can be a trap. Cheap stocks can stay cheap. Leverage can wipe you out. What did Samvat 2082 teach us? Niraj Shah writes on 10 lessons from the year gone by.
-
Talking Points This Week: Tech Nerves, FII Buying, And A Faraway Banking Shock
The global markets are not shining this Diwali. The exception in the large markets is, India.
-
Midterm Rally Lasted A Day. The Hard Reality Of A Divided US May Last Two Years | Opinion
Between a contested AI boom, a debt ceiling that arrives in 2027 and a president with every incentive to act alone, the next two years may prove more volatile than the first day's rally suggests.
-
Blue Wave Will Derail the AI Trade but Won't Dismantle the AI Era | Unhedged Position
The Democrats' sweep of the US Congress will see politics collide with economic forces both over the long and short term.
-
It's Time To Take The GST Council's Bet On Trust Global
Payment records can prove India's services exports, and clear, proportionate rules can bring foreign digital sellers into the tax net.
-
Opinion | India at 38: From Innovation Overperformer to Innovation Powerhouse
India now has 453 VC-backed deep science startups, 18 of them late-stage, after 117 percent growth since 2020. Laurus Labs, at USD 9.3 billion, is the most valuable deep science company in any middle-income economy outside China.
