Former minister warns ‘anyone with your IC and postcode’ can register your Padu account without your knowledge (Updated)


To register for a Padu account, users need to provide their full name along with an NRIC number and matching postcode. Users also need to provide a valid cellphone number to receive an OTP (one-time passcode). — CHRISTOPHER FAM/The Star

Update: Economy Minister Rafizi Ramli has responded to Ong’s post on X, stating that one’s Padu account registration will only be finalised once the eKYC process (involving the uploading of the applicant’s selfie and photo of their NRIC) is completed.

He reiterated that until the eKYC process is completed, the account registration would remain incomplete and invalid.

Rafizi also refuted Ong’s claim that eKYC approval would take three days, saying that although that duration was the stated market standard for eKYC systems, thus far it had taken less than five minutes to verify the eKYC for users registering for their Padu accounts.

He added that should users encounter the issue of their Padu account having been registered by someone else, they can make use of the Helpdesk (online, Call Centre or physical counters) to address the issue.

PETALING JAYA: Former deputy international trade and industry minister Ong Kian Ming has urged Malaysians to register their Padu account immediately due to cybersecurity concerns.

“Please register your PADU account at http://padu.gov.my immediately. If not, anyone with your IC and postcode of your IC address can register your IC on your behalf since registration is b4 the eKYC approval which takes 3 days. It will be a hassle to get back your account!”, Ong claimed in a post on X (formerly Twitter).

To register for a Padu account, members of the public need to provide their full name along with an NRIC number and matching postcode. They also need to provide a valid cellphone number to receive an OTP (one-time passcode).

The process also requires users to perform an eKYC step to verify their account. However, based on LifestyleTech’s checks, users can skip the eKYC step and the account will be created under the person's NRIC number.

LifestyleTech also found that users can receive the OTP through any phone number keyed into the form.

In a follow-up post Ong, who is also the former Bangi MP, added: “Padu sending you your OTP immediately after registration is not the problem here. Anyone with access to the electoral roll (for e.g.) or any database with names, IC Nos and Addresses, can key in any phone no for the OTP to be sent to and register a ton of PADU accounts.”

The website will subsequently prevent users from creating a new account based on their already-registered IC number.

Ong’s post has received more than 92,300 views since it was posted at 2.47pm today. Other X users have tagged Economy Minister Rafizi Ramli to look into the issue as his ministry is spearheading the initiative.

Padu was launched today for users to update their personal details and receive access to targeted government subsidies.

Malaysians have until March 31 to register.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!

   

Next In Tech News

Crypto company Tether invests $200 million in brain-chip maker Blackrock Neurotech
EU to probe Meta over handling of Russian disinformation, FT reports
US man charged with sex-related crimes, used Instagram to lure teens
Apple's iPadOS subject to tough EU tech rules, EU says
TikTok creators fear economic blow of US ban
OpenAI to use FT content for training AI models in latest media tie-up
ChatGPT faces Austria complaint for ‘uncorrectable errors’
Social media platform X back up after outages, Downdetector shows
Sleeping Amazon driver’s fatal crash into teacher was preventable, US lawsuit says
Elon Musk’s China trip pays off with key self-driving hurdles cleared

Others Also Read