Security risks high in mobile payment systems: study

April 11, 2017

Bengaluru, Apr 11: Mobile phone-based wallets and payment apps gaining popularity in India are highly vulnerable to breach of confidentiality, according to a study.

mobilepayment
The risk is high in all systems except one, according to the Centre for Software and IT Management at the Indian Institute of Management-Bangalore, which conducted the study.

Led by Prof Rahul De of the centre, the study assessed mobile wallets such as Paytm and Freecharge, apps linking to bank accounts such as BHIM (Bharat Interface for Money) and PhonePe, bank apps for account holders, and USSD (Unstructured Supplementary Service Data), a protocol used by GSM phones to communicate with commuters. It found USSD the least vulnerable. The researchers evaluated the systems using risk management principles enunciated by the Basel Committee on Banking Supervision and the RBI.

Security risks are highest when a user misplaces a phone, allowing access to records of previous transactions, the study concluded. Paytm enjoying access to one-time passwords sent by banks is a potential risk, the study warned.

Observing that Paytm and Freecharge do not log the user out automatically, the study said this leaves room for unauthorised usage. The wallets allow third-party vendors like Uber and Big Basket to deduct money from an account without explicitly seeking the user’s consent, the study said.

The government-launched app BHIM takes up to two minutes to confirm a successful transaction. For a failed transaction, it takes up to 10 hours to notify the user, according to the findings.

“However, even while we were conducting the study, we observed that the features of the apps and services were constantly evolving and changing,” De said in a statement. The evaluation was based on a study conducted between December 16 and January 17.

“It is likely some of the concerns presented in this report have been addressed, and perhaps new concerns have emerged,” he said.

Deepak Abbot, senior vice president, Paytm, responded to the study, saying, “We do not store any confidential data, including SMSes sent by banks, from the user’s device.”

He advised users to activate the app lock feature, and cited enhanced user experience to defend the absence of automatic locking. Paytm allows transactions without OTP only in the case of two companies, Zomato and Uber, and they are “responsible companies”, he said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 15,2025

Mangaluru, Dec 15: Educational institutions in Mangaluru that rely on the popular Mangala Stadium for their annual sports events are bracing for an inconvenience as the city's key sporting venue is set to close its gates for a significant upgrade. The stadium is expected to be unavailable for approximately two months starting from January 15, 2026.

The closure is necessitated by a proposed overhaul of the stadium's facilities, with a special focus on upgrading the synthetic track. Pradeep Dsouza, Assistant Director of the District of Youth Empowerment and Sports (DYES), Dakshina Kannada, confirmed the development.

"Experts have visited the stadium, conducted a thorough inspection, and have given the go-ahead for a complete makeover," Dsouza stated. "Funds have been allocated for the project, and we are currently awaiting the final green signal from state officials to commence the work. We anticipate that the work will likely begin in the second week of January. Consequently, we have stopped renting out the stadium to colleges and other organizations in preparation for the upgrade."

The timing presents a logistical challenge for colleges, as many schools have already concluded their sports meets.

"Colleges will now be organizing their events and will need to find alternative locations to host their sports meets," Dsouza added. He suggested a few potential venues, including the Dakshina Kannada police ground, University College grounds, Panambur grounds, Swaraj Maidan in Moodbidri, and the Mangalore University sports grounds in Konaje.

However, many institutions note that finding a comparable venue will be difficult. While the DK police ground and University College grounds are closer to the city center, they do not possess the extensive facilities and infrastructure offered by Mangala Stadium.

Dr. P Dayananda Pai - P Satisha Govt First Grade College, Carstreet, is one such institution dependent on the stadium. Principal Jayakar Bhandary expressed hope for a swift completion of the work. "We expect the work to be completed at the earliest. If not, we will be forced to look for other venues to host the sports day for our students," Bhandary said, highlighting the pressing need for the city's main sporting facility.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 19,2025

Mangaluru: Public transport in Mangaluru is set for a state-led transformation as the government moves to deploy 100 new electric govt buses to replace unreliable private services. The initiative aims to provide a dependable alternative to private operators who have been frequently "cutting trips," leaving thousands of commuters stranded.

The announcement was made by Deputy Commissioner and MCC Administrator Darshan HV during a public phone-in session. The move specifically targets routes where private bus service has become erratic, ensuring that citizens no longer have to rely on a fluctuating private sector for their daily commute.

Restoring the Govt Presence

The transport crisis was brought to the forefront by Ramayya, a resident of Bajal, who highlighted a growing trend of private buses skipping morning and night trips. With the previous KSRTC (govt) services discontinued, residents have been left without a fallback option.

To fix this, the DC confirmed that the PM-eBus Sewa Scheme will bring 100 government-owned electric buses to the city:

•    Phased Deployment: The first 50 of the new 100 government buses are scheduled to arrive by March 2026.

•    State Infrastructure: Two new government depots, including one at Mudipu, are being prepared for operations.

•    Recruitment: The state has already begun training a new batch of government bus drivers to ensure the fleet is operational the moment it arrives.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 15,2025

Mangaluru police have arrested a 27-year-old NRI on his return from Saudi Arabia in connection with an Instagram post allegedly containing derogatory and provocative remarks about the Hindu religion, officials said on Monday.

The accused, Abdul Khader Nehad, a resident of Ulaibettu in Mangaluru, was working in Saudi Arabia when the post was uploaded, police said.

A suo motu case was registered at the Bajpe police station on October 11 after an allegedly offensive post circulated from the Instagram account ‘team_sdpi_2025’. Police said the content was flagged for being provocative and derogatory in nature.

During the investigation, technical analysis traced the Instagram post to Nehad, who was residing abroad at the time, a senior police officer said. Based on these findings, a Look Out Circular (LOC) was issued against him.

On December 14, Nehad arrived from Saudi Arabia at Calicut International Airport in Kerala, where he was taken into custody on arrival. Police said further investigation is underway.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.