Telegram Bot Selling Personal Data of Indian Citizens

A recent investigation has uncovered a Telegram bot that allegedly offers sensitive personal information of Indian citizens, including Aadhaar numbers, PAN card details, voter IDs, and home addresses, for prices as low as ₹99. This bot operates openly on Telegram, enabling users to obtain comprehensive personal profiles solely by entering a mobile number.

Functionality of the Telegram Bot

First reported by Digit, this Telegram bot lets users input a 10-digit mobile number and receive a detailed dossier almost instantly. The dossier contains the individual’s full name, father’s name, alternative phone numbers, current and past addresses, and identity document details. The pricing structure for accessing this information begins at ₹99 per request, escalating to ₹4,999 for bulk purchases or unlimited monthly access.

Verification of the Data

To test the bot’s claims, the publication used mobile numbers from its own editorial team. The results were not only precise but also current, with some data being just three to four years old. The source of the leaked information remains unclear but is suspected to stem from prior data breaches involving telecom companies, fintech platforms, and public utilities.

Concerns Over Data Privacy

Bots are commonplace on Telegram and can be created by anyone, often for innocuous functions such as automating responses or facilitating payment systems. However, this particular bot reflects a troubling trend where encrypted messaging platforms are leveraged to disseminate personal data with minimal regulation.

While the identity of the bot’s creator remains undisclosed to prevent exploitation, the ease of access raises significant concerns. Experts caution that such tools might facilitate identity theft, SIM swapping, fraudulent KYC verifications, harassment, and loan scams. With personal information readily accessible, malicious entities can misuse this data to impersonate individuals or gain illegal entry to financial services.

Reminder of Previous Data Breaches

In light of these revelations, it is inevitable to recall the massive data breach earlier this year, which saw over 16 billion passwords and login credentials being circulated online. This grim scenario underlines the alarming reality that privacy is increasingly becoming an illusion in today’s digital landscape.

Urgent Need for Data Protection

The persistent presence of such bots, along with insufficient enforcement actions, prompts critical discussions regarding data protection and accountability on platforms like Telegram. Despite prior concerns about the app being utilised for illicit activities, regulatory actions remain limited.

Ways to Protect Your Personal Information

• Lock your Aadhaar through the UIDAI website.
• Avoid engaging with unverified applications and websites.
• Refrain from sharing OTPs or any personal information over phone calls.
• Be vigilant about suspicious SIM port or KYC requests.
• Regularly audit and minimise your digital presence.
• Report any incidents through 1930 or cybercrime.gov.in.

This situation highlights the pressing requirement for stricter digital data regulations and a more responsible approach to platform moderation. Until that happens, citizens must navigate an environment where their identities can be traded for the price of a simple cup of coffee.