Truecaller explains the bug that automatically generated UPI accounts of its users in India
Truecaller last week received major backlash in India after a bug in its payments service automatically generated UPI accounts of thousands of users. Truecaller users took to social networking platforms to complain that the app had created their accounts without their permission.
This bug affected Truecaller users on Android who updated the app to its latest version. Users found out through an SMS they received saying that their registration for UPI has started. The process couldn’t be completed since the final step requires the user to enter a UPI PIN. Truecaller users took to Twitter and Google Play Store complaining about the same.
In a detailed email, Truecaller has addressed the vulnerability and how it happened. The company said that the API for registered Truecaller Pay users affected those who are not on the payments service yet.