ICICI Bank app glitch exposes credit cards: What customers should do

A security glitch on ICICI Bank’s iMobile Pay app

On April 24, several ICICI Bank credit card customers complained on social media that they could view other customers' ICICI Bank credit cards on their iMobile Pay app.

Since the full card number, expiry date and CVV were visible on the app, it would be easy for someone to change the security settings and misuse another person's credit card for overseas transactions.

“It's a security glitch on ICICI Bank’s iMobile Pay app,” said Sumanta Mandal, founder of TechnoFino, a platform that reviews debit and credit cards.

What is iMobile Pay app?

iMobile Pay is ICICI Bank’s official mobile banking app which offers 400+ banking services. It is accessible to both ICICI Bank customers and non-ICICI Bank customers.

Using the app, customers can manage multiple cards, transfer funds, apply for loans, open fixed and recurring deposits and more.

Bank’s statement

Responding to queries from Moneycontrol, an ICICI Bank spokesperson said the glitch was due to 17,000 new credit cards that were issued in the past few days and erroneously mapped to wrong users.

The affected credit cards constituted about 0.1 percent of the bank’s credit card portfolio. No instance of card misuse from this set was reported, the spokesperson added.

As an immediate measure, ICICI Bank blocked these cards and is issuing new ones to the customers. The bank has also restricted access to credit card details on the iMobile Pay app for everyone.

Also read | Action on Kotak Mahindra Bank signals RBI's intent to address systemic gaps in banking, say experts

What customers should do?

Since the card was accessible to others, they could have changed the settings on the iMobile Pay app without an OTP or even an MPIN.

“The best option is to block the card and replace it - this will provide some relief,” said Mandal.

In case of any financial loss, you should reach out to the bank by calling customer care or use internet banking to block the card and make a complaint of financial loss with proof of the transaction on email/messages.

“We assure that the bank will appropriately compensate a customer in case of any financial loss,” the spokesperson from ICICI Bank said.