"Rushing money? Just use xxx"" to borrow money without asking for people, really borrowed! Thanks xxx for lending me 200,000 "" borrowed 3 times all successfully! I got 160,000 "... The Internet platform is full of various online loan advertisements. Users with loan needs are asked to click on the agreements to proceed to the next step after clicking on the ads, and for the agreements with dense text, some users may not look closely, but many "catty" are hidden in them.
Nandu reporter recently found that many online lending platforms require users to agree and authorize them to share users' personal information with partners, and there are 1859 partners on the platform, including corporate management, real estate intermediaries, automobile sales, car rental, media and other companies.
Nandu reporter noted that on March 14, the Banking and Insurance Regulatory Commission issued the "Tips on Vigilance against The Risks of Excessive Lending Marketing Inducement", which particularly emphasized the problem of excessive collection of personal information and infringement of consumers' personal information security rights. The CBRC reminds consumers to carefully read the terms of the contract, not to sign and authorize at will, and to pay attention to keeping important personal documents, account passwords, verification codes, face recognition and other information.
Measured:
The online lending platform requires one-click authorization to share personal information with 1859 companies
Recently, Nandu reporters randomly tested more than a dozen online lending platforms and found that after clicking through advertisements to enter the page, the platform will generally use eye-catching large numbers to publicize the maximum amount of borrowing. If you want to carry out the next step, you need to check the "Service Agreement", "Privacy Policy" and other agreements.
After clicking on the advertisement to enter a platform called "Limei Installment", the Nandu reporter found that the top of the page declared that "the maximum amount is 500,000 yuan, and the daily interest rate of 10,000 yuan is as low as 2 yuan". To borrow money, you must first enter your mobile phone number to obtain a verification code, and check Agree to the User Registration Agreement and User Privacy Policy.
According to the platform's "User Privacy Policy", based on the needs of users with loan applications, in order to provide users with loan application matching services with lending institutions, "we need to collect, store, use and share your personal information in the process of matching services, and you agree and authorize us to collect, store, use, share, etc. of your personal information." The agreement also states that if you do not agree to any of the terms of the agreement, you will not be able to use any of the services provided by the Company under the agreement.
Nandu reporter continued to browse the agreement and found that if you want to use the loan application function, you also need users to actively fill in personal information such as name, mobile phone number, credit status, income situation, real estate information, car property information, social security and provident fund, commercial insurance and so on. At the same time, the agreement also mentions that the above information will be shared with other partners.
When the Nandu reporter opened the list of Limei installment loan partners, it was found that there were 1859 companies, in addition to some microfinance companies and insurance companies, most of them were some information technology, technology, financial services outsourcing, information consulting, and business consulting companies. In addition, it also includes enterprise management, real estate agency, automobile sales, car rental, commerce, media, electronic technology, big data and other companies.
Why are 1859 companies authorized to share personal information after one click? How do some companies such as information consultation and real estate agents in the cooperation list provide loan services? In response to these problems, Nandu reporters tried to contact the Limei staging party, and found that they did not leave a contact number, and the page showed "If you have problems or complaints, please contact the public account", but the public account left by it cannot be searched.
Tianyan's inspection shows that the official website left by Limei staging company "Xuzhou Weimeng Technology Co., Ltd." in the industrial and commercial information cannot be opened, nor has the telephone number registered. Nandu reporters tried to get in touch through the customer service mailbox they left behind, but the other party did not respond as of press time.
Subsequent:
After only one day of browsing the page, I received a sales call
Nandu reporter found in the actual test of more than a dozen lending platforms that most platforms require in relevant agreements that the user's personal information will be shared with a third party, if you do not agree with the relevant agreement, you cannot use it, and some platforms do not list the specific third-party companies that share information.
The second day after nandu reporter browsed a number of lending platforms, he received a call from a caller id selling Hong Kong, China, claiming that it was a loan platform on Alipay, with a maximum credit loan of 500,000 yuan and a monthly interest rate of 60 yuan for a loan of 10,000 yuan. The other party also said that the loan only needs to provide ID card information, and it can query the relevant credit information of the Nandu reporter, and the payment can be made as soon as half an hour.
When the Nandu reporter asked how to get my mobile phone number, the other party said, "You go to browse the page, generally you will use your mobile phone number to get a verification code, and then you can test the quota, we have a phone number." Nandu reporter then repeatedly stressed with the other party that he had not entered the mobile phone number on his platform to obtain a verification code, and the salesman said that this was the number issued by the company, "I don't know where it came from." However, after the Nandu reporter hung up the phone, he did not query a platform claimed by the other party on Alipay.
In fact, the infringement of consumers' personal information security by online lending business has attracted the attention of regulatory authorities.
On March 14, the China Banking and Insurance Regulatory Commission (CBIRC) issued the Risk Tips on Vigilance against Excessive Lending Marketing Inducements, which particularly emphasizes the problem of excessive collection of personal information and infringement of consumers' personal information security rights.
The CBRC said that some financial institutions and Internet platforms do not protect consumers' personal information in place when carrying out relevant business or cooperative business, such as obtaining authorization by default consent, general authorization, etc.; using personal information for purposes other than credit card business and consumer credit business without consumer consent or against consumer wishes; improperly obtaining consumer external information. The above excessive collection or use of consumers' personal information infringes on consumers' right to personal information security.
The CBRC reminds consumers to carefully read the terms of the contract, not to sign and authorize at will, and to pay attention to keeping important personal documents, account passwords, verification codes, face recognition and other information. Do not arbitrarily entrust others to sign agreements, authorize others to handle financial business, and avoid giving criminals an opportunity to take advantage of them. Once it is discovered that the infringement of one's own lawful rights and interests is discovered, it is necessary to promptly choose a legal channel to safeguard rights.
behind:
The express delivery industry is also one of the "hardest hit areas" of personal information leakage
In recent years, the issue of personal information security has repeatedly attracted attention. On December 16, 2021, the Consumer Rights and Interests Protection Bureau of the China Banking and Insurance Regulatory Commission issued a circular on Huaxia Bank's blocking of consumer rights and interests, pointing out that Huaxia Bank illegally queried, stored, transmitted and used personal customer information, infringing on consumers' right to information security.
It was mentioned in the circular that Huaxia Bank had illegally inquired about personal customer transaction information, stored and transmitted personal customer information in violation of regulations, and there was a risk of information leakage. Huaxia Bank illegally stored a large amount of personal customer information in public Internet computers and public office computers. When carrying out the Internet loan business, personal customer information is transmitted to the partners through the Internet mailbox, and the data interaction is not fully controlled by the system. The above personal customer information includes name, ID number, telephone number, mailing address, bank account number, credit history, real estate information, etc.
The circular said that Huaxia Bank also used personal customer information in violation of regulations. From January 2019 to March 2021, Huaxia Bank's credit card center called 19,900 customers who had cancelled their credit card accounts to market insurance products, and some customers repeatedly explicitly refused to call, and the bank continued to telemarket to them.
In addition, the express delivery industry is also one of the "hardest hit areas" of personal information leakage. Nandu previously reported that in November 2020, some media exposed that criminals colluded with a number of "internal ghosts" of Yuantong Express to steal citizens' personal information through paid rental of Yuantong employee system accounts, and then sold citizens' personal information to different downstream criminal personnel, and 400,000 pieces of citizens' personal information were leaked.
As early as 2012, there were media reports that the information of the express bill numbers of many courier companies, including Shentong, Yuantong, Zhongtong and so on, was widely leaked, and the single number was put on the Internet for public sale, with prices ranging from 0.4 to 2 yuan.
Nandu reporter learned that in addition to the "internal ghost" leak, consumer privacy is stolen in the way that face sheets are photographed, system software vulnerabilities and plug-ins. Nandu reporter investigation found that the courier bill trading business is prevalent on the Internet, and a courier with complete personal information can be bought for 1 yuan.
"This studio has long been sincere in selling real-time face sheets (photo 1 yuan, document 2 yuan, 50 yuan), Nandu reporter found a post selling express face sheets on a social platform, and got in touch with the other party. "The photos are not done, and now they are all in the form of documents." The seller said. Subsequently, it sent an Excel document containing more than 2,000 express delivery information to Nandu reporters for "test use".
Nandu reporter saw in the document that each piece of information contains the courier number, the recipient's name, mobile phone number, delivery address and sender's name. Among them, from the name point of view, the sender is mostly a merchant, and the recipient is located throughout the country.
The Nandu reporter randomly selected several courier numbers for inquiry and found that it was indeed a valid single number. According to the inquiry website, these single numbers are from Yunda Express, and the relevant express mail has been signed for shortly before.
According to the seller, these express delivery information comes from various courier companies, historical information is 1 yuan each, and real-time information is 2 yuan each. Asked how this information was obtained, the other party said that "you don't care about the channel, it will be safe." It also said that "customers" need to get hundreds, thousands, to tens of thousands of pieces of information from them every day.
The sale and purchase of personal information has formed a black industrial chain. The relevant person in charge of the Shanghai Municipal Public Security Bureau once introduced to the Nandu reporter that hackers or ghosts steal information, middlemen obtain a large amount of information from their hands and establish databases, and information users buy information from their hands for accurate marketing, and even for downstream crimes such as fraud and extortion. In addition to hacking attacks, many industries, including the logistics industry, are the "hardest hit areas" of information leakage, and some practitioners regard personal information as commercial information for illegal trading, and illegally obtain and sell citizens' personal information shows a professional trend.
precedent:
There have been gangs that obtained 400,000 pieces of personal information of loan applicants, involving hundreds of millions of yuan
In addition to receiving harassing phone calls from unbearably disturbed personal information, personal information leakage may also be at risk of telecommunications network fraud.
Nandu previously reported that in accordance with the deployment of the national public security organs' "Yunjian-2020" operation to combat loan-type telecommunications network fraud clusters, at 10:00 a.m. on July 8, 2020, under the unified command of the Ministry of Public Security, the public security organs of 15 provinces, autonomous regions, and municipalities such as Beijing, Hebei, Shanghai, and Jiangsu carried out centralized network collection operations, and severely cracked down on illegal network promotion gangs that provided services for loan-type telecommunications network fraud crimes in accordance with the law. As of 16:00 on the 8th, a total of 57 illegal network promotion gangs had been destroyed, more than 460 suspects had been arrested, and the network collection operation had achieved phased results.
Since 2020, there have been many cases of loan-based telecommunications network fraud on the grounds of paying handling fees and security deposits. In their work, the public security organs have found that the key to the fact that criminals can carry out accurate fraud against victims lies in the fact that some illegal network promotion gangs have sold a large number of citizens' personal information with loan intentions.
Nandu reporter learned that in the case detected by the public security organs in Suzhou, Jiangsu Province, the illegal network promotion gang obtained 400,000 pieces of personal information of loan applicants and sold them to telecommunications network fraudsters at prices ranging from 30 to 50 yuan each, with 4,700 victims and 110 million yuan involved.
After preliminary investigation, illegal network promotion gangs usually point the spearhead at people with clear loan intentions, and analyze their loan intentions according to their browsing and search records on the Internet, mobile PHONE APP, etc., especially the search for keywords such as "loan" and "fast payment" and the residence time of related loan pages, so as to accurately push a large number of false loan advertisements.
On this basis, criminals trick people with loan intentions into filling in personal information such as names, ID card numbers, and mobile phone numbers on the false loan advertisement page, and then sell the illegally collected personal information to telecommunications network fraud gangs and become fraud accomplices.
From the illegal collection of citizens' personal information to the completion of the process of trafficking, some illegal gangs are responsible for forging or renting formal business licenses, financial licenses, corporate domain names, public accounts, etc.; some are responsible for renting servers and developing false loan advertising pages or mobile phone Apps; some are responsible for placing false loan advertisements; some are responsible for reselling citizens' personal information layer by layer to telecommunications fraudsters.
A relevant responsible person of the Ministry of Public Security said that public security organs throughout the country will maintain a high-pressure and severe crackdown on such criminal activities, work with relevant departments to strengthen supervision and rectification, resolutely eradicate criminal gangs that provide all kinds of illegal services for telecommunications fraud, and earnestly safeguard the people's property safety and legitimate rights and interests. The public security organs are warning the personnel who provide all kinds of illegal services for telecommunications fraud not to have any luck and voluntarily surrender from the precipice. At the same time, the broad masses of the people are reminded to enhance their awareness of prevention, not to credulously believe in false loan propaganda such as collateral-free, no handling fees, and first pay money and then lend, so as to prevent being deceived.