Serious Security Glitch in ICICI Bank's iMobile Alert

[TechnoFino]

Several users have reported being able to view other customers' ICICI Bank credit cards on their iMobile app. Since the full card number, expiry date, and CVV are visible on iMobile, and one can manage international transaction settings, it's easy for someone to misuse another person's credit card for international transactions.

What can you do?
If you can't do anything, and someone has access to your card, they can change settings on iMobile without OTP or even MPIN. The best option is to block the card and replace it; this will provide some temporary relief.

Update:
It seems ICICI Bank has restricted access to credit card details on the iMobile app for everyone.

Update:
ICICI Bank response regarding the issue on mint



Update 26/04/2024:
ICICI Bank has instructed its delivery partners to immediately return all in-transit debit and credit card deliveries to the bank.

@googley :

I have access to someone else’s Amazon Pay CC due to a security glitch on the iMobile app.
Although OTP restricts domestic transactions but I can do international transactions using the details from the iMobile app.
The app even allows me to enable international transactions in case it has been disabled by the actual user.

I have already flagged this to ICICI team they are working on this on priority as multiple customers have reported this. I wanted to alert the community folks too regarding the same.

 

[brucelee]

This is a serious issue that should be reported to RBI!

 

[anantnitish]

Scary
Next level glitch hai ye toh

 

[varun__goel_]

I have access to someone else’s Amazon Pay CC due to a security glitch on the iMobile app.

Although OTP restricts domestic transactions but I can do international transactions using the details from the iMobile app.

The app even allows me to enable international transactions in case it has been disabled by the actual user.

I have already flagged this to ICICI team they are working on this on priority as multiple customers have reported this. I wanted to alert the community folks too regarding the same.

Please report this incident to RBI as well.

This is a big threat.

 

[Transpointer]

I have access to someone else’s Amazon Pay CC due to a security glitch on the iMobile app.

Although OTP restricts domestic transactions but I can do international transactions using the details from the iMobile app.

The app even allows me to enable international transactions in case it has been disabled by the actual user.

I have already flagged this to ICICI team they are working on this on priority as multiple customers have reported this. I wanted to alert the community folks too regarding the same.

What is their credit limit?

 

[sidp]

Its not limited to apay. @ak93 has access to 14 card of multiple variants. You both need to report this to rbi.

I'll be asking for replacements after few days.

 

[Das.N]

Aaj k baad mujhe theek se neend nehi aayegi, mera Amazon pay card ka limit sabse jyada hai mere portfolio me, Agar kisi aur ko ICICI issi tarah galti se access de diya, toh mein khatam 🥲

 

[timva]

Someone on Reddit posted that he's able to see 12 cards in his iMobile whereas he only owns one CC. Other 11 CCs are of some random people........ This is scary.......

 

[ak93]

Its not limited to apay. @ak93 has access to 14 card of multiple variants. You both need to report this to rbi.

I'll be asking for replacements after few days.

Yup. I will be requesting replacements as well!

 

[timva]

@googley and @ak93 Are you guys able to explore the upgrade options on other cards?

 

[Transpointer]

@googley and @ak93 Are you guys able to explore the upgrade options on other cards?

Imagine upgrading someone’s Platinum to paid plastic emeralde lol

 

[SamPtnk]

5 , 6, 7 , 8

Wah

 

[amit90]

I noticed that ICICI cards transaction are successful, even if you put wrong 3 digit cvv. I complained about this issue, Bank took this casually but unfortunately i did not follow up due to busy schedule.. Did any member face this kind of issue?

 

[timva]

I noticed that ICICI cards transaction are successful, even if you put wrong 3 digit cvv. I complained about this issue, Bank took this casually but unfortunately i did not follow up due to busy schedule.. Did any member face this kind of issue?

Iss time pe logon ko aise ideas Dena jaruri hai?

 

[SamPtnk]

I noticed that ICICI cards transaction are successful, even if you put wrong 3 digit cvv. I complained about this issue, Bank took this casually but unfortunately i did not follow up due to busy schedule.. Did any member face this kind of issue?

Its due to tokenisation
Even I put random cvv in apay page and it goes through
Fav ones are 007, 420 etc

 

[sauravkumar]

I have access to someone else’s Amazon Pay CC due to a security glitch on the iMobile app.

Although OTP restricts domestic transactions but I can do international transactions using the details from the iMobile app.

The app even allows me to enable international transactions in case it has been disabled by the actual user.

I have already flagged this to ICICI team they are working on this on priority as multiple customers have reported this. I wanted to alert the community folks too regarding the same.

Tagging our Doctor to fix it!!😂😂
@DocFixIt

Your expert advice please!!

 

[iNokia]

Tomorrow rbi action on icici bank after Kotak.

 

[varun__goel_]

I noticed that ICICI cards transaction are successful, even if you put wrong 3 digit cvv. I complained about this issue, Bank took this casually but unfortunately i did not follow up due to busy schedule.. Did any member face this kind of issue?

Is the card tokenised where you used the card?

 

[amit90]

Its due to tokenisation
Even I put random cvv in apay page and it goes through
Fav ones are 007, 420 etc

Its due to tokenisation
Even I put random cvv in apay page and it goes through
Fav ones are 007, 420 etc

So why need of CVV?

 

[#aniket]

Imagine upgrading someone’s Platinum to paid plastic emeralde lol

Imagine ye bhi karye ki, baad mein jo aayesi harakt karein uska card cancel kar de bank, dhere sara terms and conditions hai bank ke pass...