PETALING JAYA: Former deputy international trade and industry minister Ong Kian Ming has urged Malaysians to register their Padu account immediately due to cybersecurity concerns.

“Please register your PADU account at http://padu.gov.my immediately. If not, anyone with your IC and postcode of your IC address can register your IC on your behalf since registration is b4 the eKYC approval which takes 3 days. It will be a hassle to get back your account!”, Ong claimed in a post on X (formerly Twitter).

To register for a Padu account, members of the public need to provide their full name along with an NRIC number and matching postcode. They also need to provide a valid cellphone number to receive an OTP (one-time passcode).

The process also requires users to perform an eKYC step to verify their account. However, based on LifestyleTech’s checks, users can skip the eKYC step and the account will be created under the person's NRIC number.

LifestyleTech also found that users can receive the OTP through any phone number keyed into the form.

In a follow-up post Ong, who is also the former Bangi MP, added: “Padu sending you your OTP immediately after registration is not the problem here. Anyone with access to the electoral roll (for e.g.) or any database with names, IC Nos and Addresses, can key in any phone no for the OTP to be sent to and register a ton of PADU accounts.”

The website will subsequently prevent users from creating a new account based on their already-registered IC number.

Ong’s post has received more than 92,300 views since it was posted at 2.47pm today. Other X users have tagged Economy Minister Rafizi Ramli to look into the issue as his ministry is spearheading the initiative.

Padu was launched today for users to update their personal details and receive access to targeted government subsidies.

Malaysians have until March 31 to register.

https://www.thestar.com.my/tech/tech-news/2...-your-knowledge

Fark no

the fuck?
give your data first so that others can't give it for you?

Scam

So... Gomen didn't think of this loophole before they launch the program?

Sound bodoh

fear mongering nih..

so, ada issue la this workflow or system ... takmo aku

Instead of asking the government to look into the matter urgently you are asking the people to quickly register instead? OKM you must be out of your freaking mind.

This post has been edited by TOMEI-R: Jan 2 2024, 06:01 PM

no

just book your ic number in their system first, decide later

after you register, you do not need to key in anything yet unless you want to

macam register an account using your ic number je

no harm done

do it quickly so that some other sohai won't use your ic number to do it

Cannot register means cannot get targeted subsidy. Itu la cara scammer kerajaan.

Kejap better still, targeted subsidy will enter into an account bearing someone else's name. Mantap.

This post has been edited by Roman Catholic: Jan 2 2024, 06:07 PM

wtf is this? they should look into this loophole la. urging people to register is not the solution. bodo betui

How?? Page cannot be loaded

No subsidy for you pasal cannot load.

No need to give out your IC picture first. Just register your IC number first so you have control over your IC. It's possible for another person who knows your IC number to register an account under your IC.

No info needs to be given into the system other than your phone number and email address, since the system already knows everything else about you.

Source: I just pre-registered without uploading my IC.

So if register then can see other peoples income?

Normally when there's a breach of database, government agency should rectify it before asking user to put their data in.

Never know there is a better way to it, which if there's a breach of database, user SHOULD put in their data immediately

Such enlightenment

😆😆😆

SUS AS HECK!!!

OKM is bodo. Nuff said.

Such jarring security flaw can overlook.