Personal Data Security at Risk: WhatsApp Groups Expose Users to Scams and Unsolicited Messages
PETALING JAYA: WhatsApp groups pose a major risk to personal data security, making users vulnerable to scams and unsolicited messages by exposing their names, phone numbers, and other private details.
The Risks of WhatsApp Groups
Ian Tan, head of the School of Mathematical and Computer Sciences at Heriot-Watt University Malaysia, warns that messaging platforms like WhatsApp are among the biggest sources of data leaks, leading to spam calls, phishing attempts, and fraud. "From my perspective, a lot of information is shared when we join WhatsApp groups. In very large groups, it becomes difficult to control who might be leaking information," he said.
The Ease of Information Sharing
Tan highlights that even handing out a business card exposes personal information, making it difficult to keep phone numbers private. "Even handing out a business card exposes this information. To address this, alternative methods should be explored to eventually replace phone numbers as a form of identification to enhance privacy," he said.
The Importance of Social Media Settings
Tan also urges users to be mindful of social media settings, cautioning against publicly sharing details like birthdates. "We should disable birthday reminders, as birthdates make up the first six digits of our IC number, already revealing critical personal information," he said.
The Growing Problem of Personal Data Leaks
On March 2, digital risk management company Gogolook reported that Malaysia recorded the highest rate of personal data leaks among key Asian markets, including Taiwan, Thailand, Japan, South Korea, Hong Kong, and the Philippines. The report also found that scam calls in Malaysia surged by 82.81% last year, further highlighting the urgent need for stronger data protection measures.
Cybersecurity Measures
Murugason Thangaratnam, CEO of cybersecurity company NovemCS, emphasizes the importance of building digital literacy and following best practices to prevent scams. "Users should avoid clicking on suspicious links, refrain from using public WiFi for transactions, and adopt strong, unique passwords with multi-factor authentication," he said. Other safety measures include monitoring accounts for suspicious activity, downloading apps only from official sources, and being wary of scams like fake job offers, prize claims, and romance fraud.
Regulatory Efforts
Murugason notes that cybersecurity laws have improved, citing the recently enacted Cybersecurity Act 2024 and the passed amendments to the Personal Data Protection Act (PDPA). "The amended PDPA introduces key changes, including stricter penalties, mandatory data breach notifications, the right to data portability, and the appointment of data protection officers, aligning it with international standards," he said.
The Ongoing Challenge
However, Tan warns that while these updates are a step forward, they may not be enough to keep up with rapidly evolving cyber threats. "The thing is, scammers with malicious intent are very creative, sometimes moving faster than the law, which makes it quite difficult. Laws can’t always anticipate or cover everything that will happen in the future, which will continue to be a challenge," he said.
Conclusion
In conclusion, WhatsApp groups pose a significant risk to personal data security, and users must take steps to protect themselves from scams and unsolicited messages. By being mindful of social media settings, following best practices, and staying informed about regulatory efforts, individuals can reduce their risk of falling victim to cyber threats.
FAQs
Q: How can I protect my personal data on WhatsApp?
A: You can hide your phone number from members other than admins in community groups, but not in regular chat groups. Be cautious of sharing personal details and consider disabling birthday reminders.
Q: What are some common scams?
A: Scammers may use fake job offers, prize claims, and romance fraud to steal your personal information. Be wary of suspicious links and never share sensitive information with unknown individuals.
Q: How can I improve my digital literacy?
A: Build your knowledge of online safety and security best practices, and stay up-to-date on regulatory efforts to protect your personal data.