Netizens found out that YouTrip could be used to reveal the full legal name of a person who uses Youtrip with a phone number.
He reported his findings online and netizens are appalled by the lack of security features..
Here is what he wrote:
I happened to use YouTrip’s send money function and was appalled to find out that the “send money to unsaved number” function easily revealed the full legal name of any individual whose phone number was registered with YouTrip. I feel that this is possibly in violation of the Personal Data Protection Act (PDPA) and can and probably would be easily abused by unethical parties.
Unlike other p2p money transaction services that allows a username to be linked to one’s registered phone number, youtrip straight up shows your full legal name.
YSK if you have an account with YouTrip your full legal name and phone number are probably on some scammer’s excel sheet ready for the next fake job, fake parcel, fake china official scam.
TLDR: Youtrip app can be exploited to show your phone number and associated full legal name. A goldmine for scammers.
Here are what netizens think:
- That is if you sent your username! Whereas on youtrip I can enter random numbers and get their associated full legal names. Pretty alarming for privacy standards in Singapore eh.
- For PayNow, by default they use your full name as nickname when you first signed up, but you can change the nickname to whatever name you want.
- No, when you send someone money via Paynow or ibanking transfer, the recipient will see your FULL legal name in their bank statement, regardless of what nickname you set. The nickname is only for a payee to set, and for the payer to see.