jeeva

@jeevakan2

Ronaldo | Real Madrid | Cricket 🏏 | Strength …

Tiruppur, India

Joined January 2014

811 Following

112 Followers

889 Posts

jeevakan2 retweeted

Hari Selvan Radhakrishnan

@hstradeschool

about 1 year ago

Our friend Surendhar Kuppusamy (@beingsurendar) has been a victim of major financial fraud, losing ₹1,08,000 in an unauthorized @CRED_club linked transaction, and the system’s security has completely failed to prevent it—even though an OTP was sent and his card was blocked immediately . Incident Details - On October 3, 2025, Surendhar received an SMS with an OTP for a transaction of ₹1,08,000 . - Seconds later, at 9:15 AM, another SMS confirmed that ₹1,08,000 was debited from his HDFC account (card \*6061) via “Dreamplug Paytech Solu” . - The HDFC debit card was blocked right after the transaction . - The transaction was marked as a POS (Point-of-Sale) transaction—a process that should require the physical card . - Surendhar had previously given Account Aggregator (AA) consent to Dreamplug Advisory Solutions (CRED group) to analyze spending, raising questions about data vulnerability . Critical Security Questions - How did @CRED_club’s system process a POS transaction of ₹1,08,000 without the card physically present? - Is the AA data linking with Dreamplug making user accounts more vulnerable to fraud? - Why did standard bank and app controls fail to stop this massive unauthorized activity? Action Taken - Cyber crime complaint filed: 32910250061819 . - HDFC Bank complaint registered: 00625276002991 . - CRED support ticket raised: #21948188 (filed by a concerned friend) . Urgent Call for Action @kunalb11 This is a serious breach that demands immediate attention and a full refund. Everyone with CRED, Dreamplug, or linked accounts—please check recent transactions and bank statements now . Guys Please share and RETWEET to support Surendhar and protect others from similar fraud. #CREDsecurity #BankingSecurity #CyberCrime #FinancialFraud #CRED @CRED_club @kunalb11 @RBI @HDFC_Bank @Ministry_of_Finance @nsitharamanoffc

$hstradeschool's tweet photo. Our friend Surendhar Kuppusamy (@beingsurendar) has been a victim of major financial fraud, losing ₹1,08,000 in an unauthorized @CRED_club linked transaction, and the system’s security has completely failed to prevent it—even though an OTP was sent and his card was blocked immediately . Incident Details - On October 3, 2025, Surendhar received an SMS with an OTP for a transaction of ₹1,08,000 . - Seconds later, at 9:15 AM, another SMS confirmed that ₹1,08,000 was debited from his HDFC account (card \*6061) via “Dreamplug Paytech Solu” . - The HDFC debit card was blocked right after the transaction . - The transaction was marked as a POS (Point-of-Sale) transaction—a process that should require the physical card . - Surendhar had previously given Account Aggregator (AA) consent to Dreamplug Advisory Solutions (CRED group) to analyze spending, raising questions about data vulnerability . Critical Security Questions - How did @CRED_club’s system process a POS transaction of ₹1,08,000 without the card physically present? - Is the AA data linking with Dreamplug making user accounts more vulnerable to fraud? - Why did standard bank and app controls fail to stop this massive unauthorized activity? Action Taken - Cyber crime complaint filed: 32910250061819 . - HDFC Bank complaint registered: 00625276002991 . - CRED support ticket raised: #21948188 (filed by a concerned friend) . Urgent Call for Action @kunalb11 This is a serious breach that demands immediate attention and a full refund. Everyone with CRED, Dreamplug, or linked accounts—please check recent transactions and bank statements now . Guys Please share and RETWEET to support Surendhar and protect others from similar fraud. #CREDsecurity #BankingSecurity #CyberCrime #FinancialFraud #CRED @CRED_club @kunalb11 @RBI @HDFC_Bank @Ministry_of_Finance @nsitharamanoffc$