Former minister warns ‘anyone with your IC and postcode’ can register your Padu account without your knowledge (Updated)


To register for a Padu account, users need to provide their full name along with an NRIC number and matching postcode. Users also need to provide a valid cellphone number to receive an OTP (one-time passcode). — CHRISTOPHER FAM/The Star

Update: Economy Minister Rafizi Ramli has responded to Ong’s post on X, stating that one’s Padu account registration will only be finalised once the eKYC process (involving the uploading of the applicant’s selfie and photo of their NRIC) is completed.

He reiterated that until the eKYC process is completed, the account registration would remain incomplete and invalid.

Rafizi also refuted Ong’s claim that eKYC approval would take three days, saying that although that duration was the stated market standard for eKYC systems, thus far it had taken less than five minutes to verify the eKYC for users registering for their Padu accounts.

He added that should users encounter the issue of their Padu account having been registered by someone else, they can make use of the Helpdesk (online, Call Centre or physical counters) to address the issue.

PETALING JAYA: Former deputy international trade and industry minister Ong Kian Ming has urged Malaysians to register their Padu account immediately due to cybersecurity concerns.

“Please register your PADU account at http://padu.gov.my immediately. If not, anyone with your IC and postcode of your IC address can register your IC on your behalf since registration is b4 the eKYC approval which takes 3 days. It will be a hassle to get back your account!”, Ong claimed in a post on X (formerly Twitter).

To register for a Padu account, members of the public need to provide their full name along with an NRIC number and matching postcode. They also need to provide a valid cellphone number to receive an OTP (one-time passcode).

The process also requires users to perform an eKYC step to verify their account. However, based on LifestyleTech’s checks, users can skip the eKYC step and the account will be created under the person's NRIC number.

LifestyleTech also found that users can receive the OTP through any phone number keyed into the form.

In a follow-up post Ong, who is also the former Bangi MP, added: “Padu sending you your OTP immediately after registration is not the problem here. Anyone with access to the electoral roll (for e.g.) or any database with names, IC Nos and Addresses, can key in any phone no for the OTP to be sent to and register a ton of PADU accounts.”

The website will subsequently prevent users from creating a new account based on their already-registered IC number.

Ong’s post has received more than 92,300 views since it was posted at 2.47pm today. Other X users have tagged Economy Minister Rafizi Ramli to look into the issue as his ministry is spearheading the initiative.

Padu was launched today for users to update their personal details and receive access to targeted government subsidies.

Malaysians have until March 31 to register.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!

   

Next In Tech News

Opinion: How safe are driverless cars in China? I rode in some to see.
China is testing more driverless cars than any other country
Nasa accidentally broadcasts simulation of distressed astronauts on space station
Japan enacts law ensuring access to third-party apps
Amazon, Vrio to launch satellite internet in South America, competing with Starlink
Fired SpaceX workers sue Elon Musk over workplace abuses
Google partners with Nevada utility for geothermal to power data centers
Thefts of charging cables pose yet another obstacle to appeal of electric vehicles
Earn less but get help from AI: The writer’s choice?
Samsung offers plan to speed up delivery of AI chips

Others Also Read