Telegram bot sells Indian citizens' Aadhaar, PAN and other details for as low as Rs 99; sparks privacy concerns

A recent investigation has uncovered a troubling Telegram bot that is allegedly selling sensitive personal information of Indian citizens, including Aadhaar numbers, PAN card details, voter IDs, and residential addresses, for as little as ₹99. This bot operates openly on the Telegram platform, allowing users to access comprehensive personal profiles by simply entering a mobile number. The bot’s functionality is alarming: within seconds of inputting a 10-digit number, it generates a detailed profile that includes the individual’s full name, father’s name, alternative phone numbers, and both current and previous addresses. Pricing begins at ₹99 for a single request and can escalate to ₹4,999 for bulk or unlimited monthly access. To verify the bot’s claims, the publication conducted tests using mobile numbers from its editorial team. The results were strikingly accurate and up to date, with some data being only three to four years old. While the source of this leaked data is not clearly identified, it is suspected to stem from prior data breaches involving telecom providers, fintech companies, and public utilities. Although Telegram bots can be created for various benign purposes, this specific instance highlights a disturbing trend where encrypted messaging apps are being exploited to disseminate personal data without adequate oversight. The identity of the bot's creator remains unknown to prevent potential misuse, yet its easy accessibility raises significant concerns. Experts caution that such tools can facilitate identity theft, SIM swapping, fraudulent KYC verifications, harassment, and loan scams. With personal information so readily available, malicious entities can easily impersonate victims or unlawfully access financial services. This situation brings to mind a massive data breach reported earlier this year, during which over 16 billion passwords and login credentials were discovered online, illustrating the growing myth of privacy in today’s digital landscape. The ongoing existence of such bots, alongside the lack of enforcement measures, prompts serious questions regarding data protection and accountability on platforms like Telegram. Despite previous warnings about the app's use for piracy and unauthorized services, regulatory action remains weak. This incident emphasizes the urgent need for stricter regulations on digital data and more responsible platform moderation. Until such measures are implemented, individuals must navigate a perilous digital environment where their personal information can be traded for the cost of a cup of coffee.