On Jan. 10, Twitter user @coderzombie was applying for a credit card online when his bank sent him a link to verify his email address.
When he clicked, this is what he discovered.
It turns out that his bank, HDFC, used a third-party company called Verifi.Me, whose website describes it as a verification service that lets users “prove their identities and fast-track their applications.”
Privacy activists in India blamed the situation on the country's lack of privacy laws.
A simple Twitter search revealed that people have been struggling with HDFC Bank's blatant disregard for customers' privacy for months, with no resolution.
Verifi.Me did not respond to BuzzFeed News' request for a comment.
Pranav Dixit is a tech reporter for BuzzFeed News and is based in Delhi.
Contact Pranav Dixit at email@example.com.
Got a confidential tip? Submit it here.