Tech

This Man's Bank Wanted To Read All His Emails To Approve A Credit Card

All your info are belong to us.

Posted on

On Jan. 10, Twitter user @coderzombie was applying for a credit card online when his bank sent him a link to verify his email address.

When he clicked, this is what he discovered.

Applied for @HDFC_Bank credit card. It sent me a link to "verify" my email address. The verification site needs thi… https://t.co/02qDQfOv5Z

It turns out that his bank, HDFC, used a third-party company called Verifi.Me, whose website describes it as a verification service that lets users “prove their identities and fast-track their applications.”

Here's everything that Verifi.Me collects about a user when they use the service, according to the company's privacy policy.

BuzzFeed News screenshot

That's pretty much everything important. Worse, the policy says that the company may share this information with people “who are required to know such information in order provide [services] to you."

Twitter users called out the bank for not respecting customers' privacy.

An HDFC spokesperson told BuzzFeed News the company wasn't aware of the problem.

Verifi.Me did not respond to BuzzFeed News' request for a comment.

H/T: Medianama

Pranav Dixit is a tech reporter for BuzzFeed News and is based in Delhi.

Contact Pranav Dixit at pranav.dixit@buzzfeed.com.

Got a confidential tip? Submit it here.