Businessman taking pile of money, Indian Rupee banknotes, on his desk in a dark office

Image copyright
Getty Images

A recent cyber-attack on a nuclear power plant has sparked a debate on the country’s ability to protect itself in a cyber-war. But experts say Indians should be more worried about the vulnerability of its financial systems. The BBC’s Ayeshea Perera finds out more.

News that India’s biggest nuclear plant – the Kudankulam facility in the southern state of Tamil Nadu – had been subject to a cyber-attack made headlines across the country last month.

It sparked conversations about whether the country was “cyber-ready” and many questioned whether it would be able defend critical infrastructure from malicious digital attacks.

But there is a much bigger issue that affects millions of Indians – debit card hacks and other forms of financial fraud.

Just last month, India’s central bank asked banks to investigate a warning by the Singapore-based cyber-security firm Group-IB that the details of 1.2m debit cards were available online.

And last year hackers were able to siphon off 900m rupees ($12m; GBP9.7m) from Cosmos bank in the western city of Pune through a malware attack on one of its data suppliers.

Why is India so vulnerable?

“India’s financial systems are extremely vulnerable, because we still rely on international banking networks like Swift to make transactions. International gateways are open vectors of attack for India,” Arun Sukumar, head of the cyber initiative at the Observer Research Foundation think tank, told the BBC.

And a report by cyber-security company Symantec said India was among the top three countries in the world for phishing and malware attacks.

Image copyright
Getty Images

Although this comes down to the sheer size of India’s digital population – the population of France is added every month to the country’s internet – it is a big concern because many first-time internet users are being pushed to use digital payments.

In November 2016, for instance, when the government suddenly removed 80% of the country’s cash from the economy by saying that 1,000 and 500 rupee notes would no longer be valid, Prime Minister Narendra Modi heavily promoted digital payments as an alternative.

Mobile payment platforms – both indigenous (Paytm) and international (Google) – have since become a massive industry in India. A report by Credit-Suisse estimated that mobile payments in India would become a $1tn market by 2023. Credit and debit card payments are also popular, with an estimated 900m cards operational in India today.

“Many of the newest entrants to India’s internet – more than half the 600 million-odd total users – are from the middle or bottom of the pyramid. This means that very often, their digital literacy is low, or they are migrant labourers working in states where they are not familiar with the language. So they are very vulnerable to fraud,” technology expert Prasanto Roy told the BBC.

“And secondly, there is inadequate reporting of fraud by banks, which means sometimes consumers are not even aware of what has happened.”

What kind of fraud is happening?

Financial fraud in India takes many different forms. Some involve hackers fixing skimmers and keyboard cameras to ATMs, which duplicate the card details of unsuspecting users. Others involve calling people up and tricking them into handing over information.

Image copyright
Getty Images

“The problem is that in a digital transaction lines are blurred and confusing. In the real world there is a clear distinction between giving and receiving. But on a mobile payment platform, this is not always clear. For instance, someone trying to sell a table online might be called by someone posing as a prospective buyer, offering to make an online payment,” Mr Roy explained.

“If that person says that he or she has made a payment and tells you that you will get a code via text message to confirm the transaction, many users would think nothing of it, even if they are asked to tell that person the code. The next thing they know is that the money has been deducted from their account.”

What improvements can be made?

One problem is that the systems themselves are not secure or transparent enough. In the Cosmos fraud for instance, the software was not able to throw up red flags when so many transactions were compromised. And by the time the fraud was discovered, a huge sum of money had been lost.

Furthermore, a lack of standardisation also makes transactions confusing, especially for first-time users. ATMs for instance, come in many different forms and each payment app in the country has a different interface.

Secondly, Mr Sukumar points out that there is also a human problem. People lack even basic awareness of the dangers, leaving both themselves and sometimes entire systems at risk.

Image copyright
Getty Images

“The humans behind the keyboards also need to be very careful. The virus which affected the Kudankulam nuclear plant was apparently introduced by a staff member who plugged a USB drive into one of the computers there, which then compromised the entire plant. This could be the same of bank staff or other financial institutions,” he said.

What is the government’s role?

Mr Roy says it is for the government and institutions to provide security in financial transactions – not the end user.

“Given the rate of India’s internet growth, it is not possible to rely on just education alone. It’s not possible for everyone to keep up with the sophisticated methods of hackers, especially when they are constantly changing tactics and methods. So the onus has to be on regulators and payment firms to protect users,” he said.

The other problem is that communication between the various cyber-security organisations is just not fast enough.

The Computer Emergency Response Team (Cert), who are the frontline defenders of India’s digital infrastructure, are sometimes too slow to respond to reported threats.

But India is already aware of this. The country is formulating a national cyber-security policy for 2020 and officials have identified six critical areas where policy needs to be where special attention is needed. Finance security is one of these areas.

Ideally, says Mr Roy, the Certs being planned for the six critical areas should communicate with each other, with oversight from a coordinator.

It is only then that India will be able to effectively respond to the risks that come with moving to a largely cashless economy.

0 comments

You must be logged in to post a comment.

  • "Budva da bude perspektivnije i bolje društvo"
    on 26/05/2024 at 19:06

    Potpredsjednica Demokrata i druga na izbornoj listi Dragana Kažanegra Stanišić iskoristila je danas svoje biračko pravo u Pržnu, pozivajući građane Budve da učine isto.

  • "OSI onemogućeno samostalno ostvarivanje biračkog prava"
    on 26/05/2024 at 13:53

    Niti jedno od svih 28 posmatranih biračkih mjesta u Budvi nije u potpunosti pristupačno osobama oštećenog vida što znači da na biračkom mjestu nije dostupan šablon za glasanje koji je izrađen u tamnoj boji od čvršćeg, postojanog materijala sa prorezima gdje su brojevi izbornih lista, te da etison trake nijesu pravilno postavljene, saopštio je izvršni direktor NVO Savez slijepih Crne Gore Goran Macanović.

  • "Ne odustajemo od programa Evropa Sad 2"
    on 25/05/2024 at 18:10

    PES sigurno neće povlačiti predloge čiji je idejni tvorac i autor, a neće odustajati ni od ekonomskog programa Evropa Sad 2, koji je osnova za bolji život i ekonomski prosperitet svih naših građana, poručio je poslanik Pokreta Evropa sad (PES) Darko Dragović.

  • PES neće povući iz procedure rezoluciju o Jasenovcu
    on 25/05/2024 at 17:10

    Poslanički klub PES je podržao rezoluciju o Jasenovcu i neće je povlačiti iz skupštinske procedure, kategoričan je generalni sekretar Pokreta Evropa sad Boris Pejović.

  • Reakcija Kneževića očekivana, dogovoriti brzu rekonstrukciju Vlade
    on 25/05/2024 at 15:05

    Odluka Demokratske narodne partije (DNP) o suspenziji dalje podrške Vladi Milojka Spajića do ispunjena njihovih zahtjeva za politikologa Vladmira Pavićevića je očekivana. Kao najbolji način da se izađe iz nastale situacije vidi dogovor i relativno brzu rekonstrukciju Vlade.

  • "Politički odgovorno da DNP i NSD prekinu podršku Vladi"
    on 25/05/2024 at 14:31

    Nakon izglasavanja Rezolucije o Srebrenici postalo je jasno da Pokret Evropa sad (PES) baštini sve političke prioritete Demokratske partije socijalista (DPS) i politički je odgovorno da Demokratska narodna partija (DNP) i Nova srpska demokratija (NSD) prekinu podršku Vladi i da se organizuju vanredni parlamentarni izbori, poručio je lider Pokreta za promjene (PzP) Nebojša Medojević.

  • DNP: Suspenzija podrške Vladi do ispunjenja zahtjeva
    on 25/05/2024 at 11:28

    Predsjedništvo Demokratske narodne partije (DNP) najoštrije je osudilo odluku Vlade Crne Gore da u Generalnoj Skupštini UN–a glasa za Rezoluciju o genocidu u Srebrenici i zato jednoglasno donijelo odluku o suspenziji podrške Vladi Milojka Spajića do ispunjenja zahtjeva a saopštili su i da neće podržati rekonstrukciju Vlade najavljenu za jun mjesec.

  • Nastavak podrške SAD od vitalnog značaja za stabilnost Crne Gore
    on 25/05/2024 at 10:28

    Nastavak podrške SAD od vitalnog značaja za bezbjednost i stabilnost Crne Gore, kazao je ministar pravde Andrej Milović.

  • "Spajić pokazao da će opet prevariti srazmjerne penzionere"
    on 24/05/2024 at 20:41

    Iako je najavio povećanje minimalnih penzija za srazmjerne penzionere, odbijanjem predloga poslanika Građanskog pokreta URA kojim je predviđeno povećanje i srazmjernih penzija na 450 eura, Spajić i njegova Vlada su pokazali da će opet prevariti korisnike srazmjernih penzija, kazao je šef poslaničkog kluba Građanskog pokreta URA Miloš Konatar.

  • "Vlada posvećena izgradnji ekonomskog, društvenog, političkog i kulturnog ambijenta"
    on 24/05/2024 at 20:09

    Vlada Crne Gore posvećena je izgradnji ekonomskog, društvenog, političkog i kulturnog ambijenta koji će omogućiti da se mladi ljudi koji se obrazuju u inostranstvu vrate u Crnu Goru, kako bi u u svojoj zemlji nastavili da rade i stvaraju. To je poručio ministar vanjskih poslova Filip Ivanović na panel diskusiji „Upoznajmo Evropsku uniju iz perspektive Erasmus plus korisnika“.

  • Mujović sjutra u radnoj posjeti Trebinju
    on 26/05/2024 at 20:04

    Ministar energetike i rudarstva Saša Mujović, boraviće sjutra u radnoj posjeti Trebinju, na poziv kolege iz Republike Srpske, Petra Đokića.

  • ASP: Ministarstvo energetike već dvije godine krši zakon
    on 26/05/2024 at 14:25

    Ministarstvo energetike i rudarstva već pune dvije godine krši Zakon o energetici i ne donosi Nacionalni klimatski i energetski plan, kao strateški dokument iz ove oblasti, dok zapisnici sa sjednica radne grupe zadužene za njegovu izradu pokazuju da se budući rad Termoelektrane (TE) Pljevlja prikazuje kao jedno od ključnih pitanja, jer se mora planirati postepeno ukidanje proizvodnje električne energije na ugalj, ocijenili su u NVO Akcija za socijalnu pravdu.

  • Fabrika peleta i briketa - kratko poslovanje, prazni pogoni i oštećeni radnici
    on 26/05/2024 at 09:12

    Vijest da će se u Pljevljima proizvoditi pelet i briketi od uglja optimistično je, prije nešto više od godinu, dočekana u tom gradu. Pogoni su, međutim, radili svega nekoliko mjeseci.

  • U ICT oblasti radi 9,8 miliona stručnjaka širom EU
    on 25/05/2024 at 20:50

    U oblasti informacione i komunikacione tehnologije (ICT) širom Evropske unije u prošloj godini radilo je 9,8 miliona stručnjaka, objavio je Eurostat.

  • Peranović: Ne planira se povećanje opšte stope PDV-a
    on 25/05/2024 at 14:17

    VD direktora Poreske uprave Sava Laketić naglasio je značaj računovodstveno-revizorske profesije u implementaciji poreskih propisa, poručujući da se intezivno radi na reforemi sveobuhvatnog poreskog sistema. On je to kazao na zatvaranju Simpozijuma Računovođa i revizora, koji je minula tri dana održan u Ulcinju.

  • Likvidna aktiva banaka u februaru 1,49 milijardi eura
    on 25/05/2024 at 13:19

    Likvidna aktiva banaka u februaru je iznosila 1,49 milijardi eura, što je 2,69 odsto manje nego u januaru.

  • Kvadrat stana skuplji za 630, plate veće 315 eura
    on 25/05/2024 at 11:13

    Od prvog kvartala 2019. godine do aprila ove godine prosječna tržišna cijena metra kvadratnog stana u novogradnji u Crnoj Gori porasla je za skoro 630 eura, pokazuje zvanična statistika.

  • Spajić: Trajekt Crna Gora – Italija kreće 3. jula
    on 25/05/2024 at 08:47

    Trajekt Crna Gora – Italija kreće 3. jula, najavio je premijer Milojko Spajić.

  • Reformom upisa radnog staža uštedjela bi i država i privreda
    on 25/05/2024 at 08:46

    Privredna komore Crne Gore organizovala je studijsku posjetu institucijama u Srbiji, a cilj posjete bilo je upoznavanje sa reformom upisa radnog staža koja je sprovedena u toj susjednoj državi.

  • Za 11 bivših "dakićevaca" po 2.000 eura
    on 25/05/2024 at 06:32

    Ustavni sud Crne Gore donio je Odluku kojom obavezuje Ministarstvo finansija da bivšim radnicima fabrike "Radoje Dakić" isplati po dvije hiljade eura na ime nematerijalne štete zbog povrede prava iz člana 32. Ustava i člana 6. stav 1. evropske Konvencije. To se navodi u informaciji koju je Vlada usvojila na jučerašnjoj sjednici u vezi izvršenja odluke Ustavnog suda od 24. oktobra 2023. godine.