WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 2,2025

DKSsiddu.jpg

Bengaluru: 'Nati koli saaru' (country chicken curry) considered one of Chief Minister Siddaramaiah’s favourites along with steaming hot idlis was on the breakfast menu at Deputy CM D K Shivakumar’s residence on Tuesday, according to official sources.

The spread also included 'nati koli' fry, vada and pongal, among other items, they said.

In an apparent show of unity, Siddaramaiah visited Shivakumar’s residence for breakfast, just days after the two leaders shared a meal amid a simmering power tussle in the state Congress.

Siddaramaiah drove to the Deputy CM’s residence in Sadashivanagar, where he was received by Shivakumar and his brother D K Suresh, who is a former Congress MP.

Suresh and Kunigal MLA H D Ranganath, a relative of Shivakumar, joined them for breakfast, which featured a mix of vegetarian and non-vegetarian dishes.

Speaking to reporters later, Siddaramaiah said Shivakumar had invited him during his visit to the CM’s residence for breakfast on Saturday.

Asked about the difference between the two meals, the chief minister said, "At his (Shivakumar’s) house it was non-veg, while at my house it was veg. He is a vegetarian, I am a non-vegetarian. I had not prepared non-veg. I told DK to get chicken from the village as you won’t get the original in Bengaluru."

Shivakumar said he had initially invited Siddaramaiah to his residence, but the CM had suggested visiting his place first and reciprocating later. "It was a vegetarian breakfast at the CM’s house on Saturday," he noted.

"Today, I invited him (the CM) to my house. He enjoyed the breakfast, which had his Mysuru taste," Shivakumar added. At this point, Siddaramaiah remarked that Shivakumar’s wife is also from Mysuru.

Saturday’s breakfast at Siddaramaiah’s official residence, held as part of efforts by the Congress high command to ease tensions in the leadership dispute between the two, reportedly included idlis and sambar, according to official sources.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 4,2025

Udupi: A 40-year-old NRI from Udupi has reportedly lost more than Rs 12.25 lakh in an online investment scam operated through Telegram.

According to a complaint filed at the CEN police station, Leo Jerome Mendonsa, who has been working in Dubai for the past 15 years in computer accessories sales, maintains NRI accounts in Karkala and Nitte.

On November 12, 2025, Mendonsa was added to a Telegram group called Instaflow Earnings by unknown individuals. Users identified as Priya and Dipannita persuaded him to invest in “Revenue Tasks.” Initially, Mendonsa transferred Rs 1,100 multiple times and received the promised returns, encouraging him to continue.

On November 14, another user, Nishmitha Shetty, directed him to register on a website, digitvisionuoce.cc, and invest Rs 4 lakh in various shares. Over the next few days, he made multiple transfers totaling Rs 12,25,000, including Rs 50,000 via Google Pay, believing the scheme was legitimate.

After receiving the money, the alleged handlers stopped responding, and neither the invested amount nor the promised profits were returned.

The CEN police have registered a case under Sections 66(C) and 66(D) of the IT Act and Section 318(4) of the Bharatiya Nyaya Sanhita (BNS), and investigations are ongoing.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
coastaldigest.com news network
December 2,2025

karkala.jpg

Udupi, Dec 2: A wave of regional pride is sweeping through Udupi district as Shagun S Verma Hegde, a talented Class 9 student from Christ King English Medium High School, Karkala, has been named the captain of the Indian National Team for the Under-15 Girls’ Volleyball Championship.

Shagun holds the unique distinction of being the sole player from Karnataka selected to represent the country in the prestigious international tournament. The championship, organized by the School Games Federation, is scheduled to take place in Shangluo, China, from December 3 to 13, where Shagun will lead the national squad.

A Remarkable Journey to the Top

Shagun’s selection is a testament to her dedication and exceptional skill on the court. Her journey included several rigorous rounds of selection:

•    She was the only player from Udupi district to qualify for the state-level selection camp.

•    Out of eight players from Karnataka who advanced to the national selection camp in Pune, Maharashtra, Shagun was the only one to secure a place in the final national squad.

•    The national camp saw participation from approximately 200 players, which was shortlisted to 23. Shagun not only made the final cut but was also ranked as the second-best player overall, solidifying her leadership role.

Shagun, who is the daughter of Sandesh Verma and Shruthiraj of Kallotte, Karkala, has trained under experienced coaches Santosh D’Souza, Jeevan D’Silva, Jairaj Poojary, and Ramesh. Her selection as the team captain has brought profound honour to her family, school, the Udupi district, and the entire state of Karnataka.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.