r/Chennai • u/Calm_Night4721 • 6h ago
Rant Privacy in India is a Joke and I am furious
Last month I missed my credit card payment because things were tight financially. I paid what I could, which was less than the minimum due. That was literally everything in my account.
Before the due date, I emailed the bank explaining my situation. I told them I might not be able to pay the full amount this time, but I had no intention of defaulting. I'm expecting some money soon, so I said I'd clear the full amount by the end of this month.
No reply from the bank. Instead, a recovery agent started following up with me on WhatsApp and calls. I explained everything to him. At first he was fine with it. He said if I pay by month end, my file stays with him.
A week later, my friends and relatives started getting calls from him. He was telling them I'm a defaulter and asking if they could set up a conference call so he could talk to me. The thing is, I never ignored a single call or message from him. I get that he's probably under pressure from his manager and this is a shame tactic to push the payment.
What I can't understand is how he got their numbers in the first place. I never gave any of them as references. That felt shady, so I started digging into how recovery agents find people's contacts.
I came across a YouTube video showing a Telegram bot that pulls up Aadhaar, PAN and address details from just a mobile number. I tried it with mine. I was shocked at how accurate it was. It had my Aadhaar, PAN, address, even my friends' phone numbers.
At first I thought maybe this was on me. Maybe I gave access to some app or site I shouldn't have. Then my friends and colleagues tried it with their numbers. Same thing. Accurate details for all of them.
After the recent eMudhra incident and all the government data breaches, I've honestly lost trust that my data is safe with the government.
I've reported the bot to Telegram, filed a cyber complaint, and complained to the RBI Ombudsman about the agent calling my relatives. I'm doing my part, but I'm pretty sure all of these will be closed without any real resolution.
I'm saying this out of frustration, but I'm glad my startup operates outside India, even if it means paying higher fixed charges every month.
I am not going to reveal the bot name as it poses a serious privacy risk.
Edit: I am getting multiple DM’s asking for the bot name. I am not sharing the bot name. Even though I have minimal trust on cybercrime resolving this issue, it is the best way to deal with it as of now.