WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 23,2026

Karnataka Governor Thaawarchand Gehlot read only three lines from the 122-paragraph address prepared by the Congress-led state government while addressing the joint session of the Legislature on Thursday, effectively bypassing large sections critical of the BJP-led Union government.

The omitted portions of the customary Governor’s address outlined what the state government described as a “suppressive situation in economic and policy matters” under India’s federal framework. The speech also sharply criticised the Centre’s move to replace the Mahatma Gandhi National Rural Employment Guarantee Act (MGNREGA) with the Viksit Bharat–Guarantee for Rozgar and Ajeevika Mission (Gramin) Act, commonly referred to as the VB-GRAM (G) Act.

Governor Gehlot had earlier conveyed his objection to several paragraphs that were explicitly critical of the Union government. On Thursday, he confined himself to the opening lines — “I extend a warm welcome to all of you to the joint session of the State legislature. I am extremely pleased to address this august House” — before jumping directly to the concluding sentence of the final paragraph.

He ended the address by reading the last line of paragraph 122: “Overall, my government is firmly committed to doubling the pace of the State’s economic, social and physical development. Jai Hind — Jai Karnataka.”

According to the prepared speech, the Karnataka government demanded the scrapping of the VB-GRAM (G) Act, describing it as “contractor-centric” and detrimental to rural livelihoods, and called for the full restoration of MGNREGA. The state government argued that the new law undermines decentralisation, weakens labour protections, and centralises decision-making in violation of constitutional norms.

Key points from the unread sections of the speech:

•    Karnataka facing a “suppressive” economic and policy environment within the federal system

•    Repeal of MGNREGA described as a blow to rural livelihoods

•    VB-GRAM (G) Act accused of protecting corporate and contractor interests

•    New law alleged to weaken decentralised governance

•    Decision-making said to be imposed by the Centre without consulting states

•    Rights of Adivasis, women, backward classes and agrarian communities curtailed

•    Labourers allegedly placed under contractor control

•    States facing mounting fiscal stress due to central policies

•    VB-GRAM (G) Act accused of enabling large-scale corruption

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 20,2026

iran.jpg

Iranian security and intelligence forces have captured more than 470 individuals in three provinces, identified as key figures behind the recent wave of violent unrest and terrorist activities linked to foreign-backed networks.

The Intelligence Ministry's provincial office in Khorasan Razavi announced on Monday the arrest of 192 armed terrorists, identified as the main agents behind recent riots in the region. 

According to an official statement, the detainees were involved in the killing of several security personnel and civilians, setting fire to mosques, public service facilities, and buses, as well as attacks on military and law enforcement centers.

The seized items from the group include several bulletproof vests, Kalashnikov rifles, hunting weapons, Winchester rifles, and various cold weapons such as daggers, swords, brass knuckles, tactical knives, crossbows, and chains.

Evidence indicates that some of the individuals were tied to hostile movements and terrorist organizations, with links overseas. Others were identified as members of violent criminal gangs, actively taking part in the unrest alongside their associates.

Simultaneously, in the western province of Lorestan, the IRGC announced the arrest of 134 individuals as the main leaders and influential field agents of a US-Israeli terrorist network.

The IRGC statement stated that these individuals formed terrorist cells during the recent unrest, committing "Daesh-like" acts.

They wounded security forces with firearms and cold weapons, and burned and destroyed public and private properties, including mosques, shops, banks, and private and public vehicles.

In the northwestern province of Zanjan, the police reported detaining 150 people identified as principal leaders and agents behind recent riots.

Authorities noted that these individuals were responsible for destroying public and private property and intentionally setting fire to vehicles in the province's squares.

Their crimes include shedding the blood of innocent people, destroying public and private property, attempting to enter military sites, disrupting public order, and spreading terror among citizens.

A variety of cold weapons were reportedly seized from the detainees.

What began late last month as peaceful protests over economic hardship across Iran turned violent after public statements by US and Israeli regime figures encouraged vandalism and disorder.

During the unrest, foreign-backed mercenaries rampaged through cities, killing security forces and civilians and damaging public property.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 19,2026

trump.jpg

Donald Trump has linked his repeated threats to seize Greenland to his failure to win the Nobel Peace Prize, in a letter to Norwegian Prime Minister Jonas Gahr Støre.

The authenticity of the letter, in which Trump says he no longer feels obligated to “think purely of peace,” was confirmed by Støre to the Norwegian newspaper VG.

“Considering your country decided not to give me the Nobel Peace Prize for having stopped eight wars plus, I no longer feel an obligation to think purely of peace,” Trump wrote, adding he can now “think about what is good and proper for the United States.”

Støre said Trump’s letter was in response to a short message he had sent earlier, on behalf of himself and Finland’s President Alexander Stubb.

Trump has escalated rhetoric toward Greenland, a self-governing Danish territory, insisting the US will take control “one way or the other.” Over the weekend, he tweeted: “Now it is time, and it will be done!!!”

On Saturday, Trump threatened a 10% tariff on imports from Denmark, Norway, Sweden, France, Germany, the UK, the Netherlands, and Finland from 1 February until the US is allowed to purchase the island. EU diplomats met for emergency talks on possible retaliatory tariffs and sanctions.

In his letter, Trump argued Denmark “cannot protect” Greenland from Russia or China, questioning Danish ownership: “There are no written documents; it’s only that a boat landed there hundreds of years ago.” He added that NATO should support the US, claiming the world is “not secure unless we have complete and total control of Greenland.”

Trump’s stance has unsettled the EU and NATO, as he refused to rule out military action to take control of the mineral-rich island.

The Nobel Peace Prize is awarded by the independent Norwegian Nobel Committee, not the government. Trump had campaigned for last year’s prize, which went to Venezuelan opposition leader María Corina Machado, who dedicated her award to him.

Støre reiterated that the Nobel Prize decision rests solely with the committee.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.