ICICI Bank’s iMobile app glitch: Lender blocks 17,000 new credit cards incorrectly mapped to wrong users

KV Prasad Jun 13, 2022, 06:35 AM IST (Published)

Listen to the Article (6 Minutes)

ICICI Bank on Thursday (April 25) issued a statement in response to concerns raised regarding a security flaw in the bank’s iMobile app. The bank’s spokesperson assured prompt action to rectify the situation.

“It has come to our notice that about 17,000 new credit cards issued in the past few days were erroneously mapped in our digital channels to wrong users, constituting approximately 0.1% of the bank’s credit card portfolio,” the spokesperson stated.

“As an immediate measure, we have blocked these cards and are issuing new ones to the customers. We regret the inconvenience caused,” he said.

The spokesperson further clarified that no instances of misuse of cards from this set have been reported.

However, the bank affirmed its commitment to compensating customers in the event of any financial loss arising from the error.

This announcement follows recent reports of a security glitch in the iMobile app, where users were able to access other customers’ credit card details.

One Reddit user flagged a situation where another user’s Amazon Pay credit card details were mistakenly displayed.

Additionally, users reported successful ICICI card transactions despite entering incorrect three-digit CVVs.

Sumantha Mandal, Founder of TechnoFino and CreditPedia, reiterated concerns about the security breach on platform X.

He stated that this error allowed users to access other customers’ credit card details, including sensitive information such as full card numbers, expiry dates, and CVVs.

‼️ Serious Security Glitch in ICICI Bank’s iMobile Alert!!!
Several users have reported being able to view other customers’ ICICI Bank credit cards on their iMobile app. Since the full card number, expiry date, and CVV are visible on iMobile, and one can manage international…

— Sumanta Mandal (@karna_ocw) April 25, 2024

Mandal also shared screenshots from concerned users.

Full Details & Discussions with some screenshots: https://t.co/xH3CTRHtjk

— Sumanta Mandal (@karna_ocw) April 25, 2024

In one of the shared screenshots, a user highlighted that despite OTP restrictions for domestic transactions, he was able to perform international transactions using the details obtained from the iMobile app.

Elon Musk forms several ‘X Holdings’ companies to fund potential Twitter buyout

3 Mins Read

Thursday’s filing dispelled some doubts, though Musk still has work to do. He and his advisers will spend the coming days vetting potential investors for the equity portion of his offer, according to people familiar with the matter

KV Prasad Journo follow politics, process in Parliament and US Congress. Former Congressional APSA-Fulbright Fellow