Hackers are bypassing KYC through API hijacks, CERT-In warns fintechs and NBFCs

Access the original advisory on KYC bypassing here: [ CERT-In | Machine readable format ] The Indian Computer Emergency Response Team (CERT-In) and its finance-related cybersecurity arm CSIRT-Fin have warned the non-banking financial companies (NBFCs), digital lending platforms, fintech firms, payment service providers and wallet operators about coordinated cyber attack campaigns that are resulting in the unauthorised fund transfers. It also noted that these attacks may have used AI tooling for