“Please WhatsApp your PAN, Aadhaar and newest financial institution assertion.” It appears like a routine request. A mortgage agent wants it. A property dealer asks for it. A resort receptionist desires it for verification.
So, you ship the paperwork. However that easy WhatsApp message can depart your most delicate personal information sitting on another person’s telephone, laptop computer or cloud backup.
And that’s the place the issue begins. The largest danger is just not at all times that somebody will intentionally misuse your information.
It’s what occurs to the paperwork after you hit “ship”. An agent or receptionist could obtain your PAN card, Aadhaar or financial institution assertion. That file may then get saved on a private system. It might even be routinely backed as much as a cloud account.
Even when the particular person is totally sincere, your paperwork may stay there for years. A future hack or compromised account may expose data that you simply thought you had shared solely as soon as.
“Folks assume they’re sending a doc to a lender or a resort, however they’re sending it to a person’s private system, utterly shedding management over their information,” stated Abhinav Parashar, Co-founder and CEO of digital belief platform Digio.
‘WhatsApping KYC Papers Can Create A Larger Knowledge Path’
There’s one other concern. The monetary sector has a big community of direct selling agents, or DSAs. These brokers assist lenders discover and onboard clients.
The issue arises when delicate KYC paperwork are collected via private telephone numbers as an alternative of an organisation’s official methods. That may take the info outdoors the corporate’s traditional cybersecurity infrastructure. It could additionally create further copies of the identical doc.
Within the mistaken palms, personal information can turn into a helpful supply of leads for unsolicited calls and messages. Within the worst instances, it could actually contribute to identification theft. The size of economic fraud in India exhibits why individuals must be cautious. The Reserve Financial institution of India’s Annual Report for 2024-25 recorded 23,953 banking fraud instances involving Rs 36,014 crore.
There Is A Safer Approach To Confirm Your Identification
The reply is to not cease sharing data altogether. Banks, lenders, resorts and different companies typically genuinely have to confirm who you might be.
The safer approach is to alter how that data is collected. Parashar believes companies ought to transfer away from merely gathering paperwork and in direction of “selective verification”.
As an alternative of asking a buyer to ship a PAN or Aadhaar copy to a person’s WhatsApp quantity, companies can use official, business-owned digital varieties.
These methods can perform automated checks. They will additionally confirm credentials via platforms similar to DigiLocker or via UIDAI’s Offline Verification In search of Entity (OVSE) framework. The important thing distinction is that the verification occurs via an organised system reasonably than via somebody’s private telephone.
What The DPDP Act Means For Your Knowledge
India’s Digital Private Knowledge Safety framework additionally places larger emphasis on how companies gather and use private data.
The essential concept is easy. Your private information must be collected for a defined purpose and dealt with responsibly. That makes the strategy of sharing essential.
If you submit data via an official enterprise portal, there’s a clearer path of who’s gathering it and why. If you ship a PDF to a private quantity, management turns into a lot more durable.
As soon as that doc is downloaded, forwarded or backed up, you’ll have little concept the place further copies exist.
What Ought to You Do Earlier than Sharing PAN Or Aadhaar?
The following time somebody asks you to WhatsApp your PAN, Aadhaar or financial institution assertion, pause for a second. Ask for an official firm hyperlink or safe document-upload portal as an alternative.
If the organisation has a verification system, use that reasonably than sending the doc to an worker’s private quantity. And if sending a doc actually can’t be averted, use a password-protected file and share the password individually.
Your PAN card, Aadhaar and financial institution assertion will not be peculiar PDFs. They comprise items of your monetary and private identification. As soon as they depart your telephone, getting them again is nearly not possible.
