Beware: Using Fingerprint for Apps? Your Bank Account is at Risk, Scammers Target Mobile Banking Users

In recent times, the convenience of unlocking mobile apps with fingerprints has become a norm for many users. However, this convenience has been exploited by cybercriminals in a sophisticated scam aimed at draining bank accounts. The scam, which recently unfolded in Bihar, involves the illicit withdrawal of funds without the need for a One Time Password (OTP). Criminals obtained Aadhaar biometric data, typically sourced from government websites hosting land records. This data, including fingerprints, was cloned to create fake biometrics, enabling unauthorised access to bank accounts directly from mobile banking apps.

Traditionally, bank transactions require an OTP for verification. However, in this new wave of cybercrime observed in Purnia district, Bihar, perpetrators bypassed this security layer altogether. Victims remained unaware of the theft until it was too late, as transactions were executed seamlessly using Aadhaar-based Payment Systems (AePS).

Commenting on the issue, Haryana IPS officer Pankaj Jain highlighted the severity of the situation in a Twitter video, confirming the arrest of eight individuals involved in the scam and hinting at a larger network.

Watch the video here:

The breach underscores vulnerabilities in government websites housing sensitive Aadhaar data, prompting concerns over data security nationwide. Experts caution against solely relying on biometric authentication for accessing sensitive applications, advocating for a multi-layered security approach involving passwords and other safeguards.

Authorities urge anyone affected by such scams to promptly report incidents through the National Cyber Crime Reporting Portal. As investigations continue, there is a pressing call for enhanced security measures by banks and government agencies to prevent similar breaches in other regions.

Stay vigilant and prioritise security when accessing financial apps to mitigate risks associated with these evolving cyber threats.