India launches AI-driven consumer protection initiatives

The Indian government has launched several initiatives to strengthen consumer protection, focusing on leveraging technology and enhancing online safety. Key developments include the introduction of the AI-enabled National Consumer Helpline, the e-Maap Portal, and the Jago Grahak Jago mobile application, all designed to expedite the resolution of consumer complaints and empower citizens to make informed choices.

The government of India also highlighted the significant progress made through the three-tier consumer court system, resolving thousands of disputes this year. In the realm of e-commerce, major platforms like Reliance Retail, Tata Sons, and Zomato pledged to enhance online shopping security, reflecting the government’s commitment to ensuring consumer confidence in the digital marketplace.

The e-Daakhil Portal has been expanded nationwide, achieving 100% adoption in states like Karnataka, Punjab, and Rajasthan, making it easier for consumers to file complaints online. The Consumer Protection Authority (CCPA) is also drafting new guidelines to regulate surrogate advertising and has already taken action against 13 companies for non-compliance with existing rules.

The importance of these initiatives was underscored at the National Consumer Day event, where key officials, including Minister of State for Consumer Affairs B L Verma and TRAI Chairman Anil Kumar Lahoti, were present. The event highlighted the government’s ongoing efforts to foster a safer and more transparent consumer environment, especially in the rapidly evolving digital landscape.

Google Maps timeline shifts to local storage

Google is introducing major updates to its Maps Timeline feature, shifting towards enhanced privacy by storing location history locally on users’ devices. This change means that any unbacked location history data will be automatically deleted after three months unless users take action to save it. Notifications regarding the update will provide a six-month window to back up data, urging users to preserve personal memories or valuable travel records before permanent deletion.

To save Timeline data, users can utilise Google’s export tools on their devices or through the web. This process allows users to maintain access to their past location history while ensuring it remains private and under their control. However, some users have reported unexpected deletions, emphasising the importance of regular backups to avoid data loss.

These updates are part of the US-based tech giant’s broader efforts to address privacy concerns by limiting the storage of sensitive data on its servers. While this move enhances data security, users are encouraged to take proactive steps to back up important information, explore privacy features like incognito mode, and consider additional tools such as VPNs to protect their online activity.

Vietnam enacts strict internet rules targeting social media and gaming

Vietnam’s new internet law, known as ‘Decree 147,’ came into effect Wednesday, requiring platforms like Facebook and TikTok to verify user identities and share data with authorities upon request. Critics view the move as a crackdown on freedom of expression, with activists warning it will stifle dissent and blur the lines between legal and illegal online activity. Under the rules, tech companies must store verified information alongside users’ names and dates of birth and remove government-designated “illegal” content within 24 hours.

The decree also impacts the booming social commerce sector by allowing only verified accounts to livestream. Additionally, it imposes restrictions on gaming for minors, limiting sessions to one hour and a maximum of 180 minutes daily. Vietnam, with over 65 million Facebook users and a growing gaming population, may see significant disruptions in online behaviour and businesses.

Critics liken the law to China’s tight internet controls. Activists and content creators have expressed fear of persecution, citing recent examples like the 12-year prison sentence for a YouTuber critical of the government. Despite the sweeping measures, some local businesses and gamers remain sceptical about enforcement, suggesting a wait-and-see approach to the decree’s real-world impact.

Ignoring router updates puts millions at risk

A recent survey by Broadband Genie reveals worrying gaps in how users secure their home routers, leaving millions vulnerable to cyberattacks. Over half of respondents admitted they have never adjusted factory settings, while a staggering 86% have never changed the default administrator password, a critical oversight that invites hackers to exploit networks.

Neglecting router security extends to Wi-Fi passwords, with 72% never updating them, and 89% failing to install firmware updates. Default network names, which can expose vulnerabilities, also remain unchanged in most households. With an average home hosting numerous connected devices, failing to monitor network activity adds to the risks.

Experts stress the importance of simple measures like changing passwords, renaming networks, and keeping firmware up to date. Educating users about the dangers of default settings is essential to combat growing cyber threats targeting connected devices.

Mexican cartel scams timeshare owners

The FBI is warning timeshare owners about a telemarketing scam linked to the Jalisco New Generation Cartel, one of Mexico’s most dangerous criminal groups. This sophisticated operation targets individuals, particularly older adults, with offers to buy their timeshares at inflated prices. Victims are tricked into paying fees for taxes, processing, or other fabricated expenses, often losing tens of thousands of dollars.

The scam employs advanced tactics, including impersonation of legitimate businesses and government agencies, as well as the use of fraudulent websites. Call centres operated by the cartel facilitate these schemes, preying on vulnerable individuals while funding broader criminal activities, including drug trafficking. The scammers often re-victimise those they have already defrauded by promising to recover losses in exchange for additional payments.

To avoid falling prey to such fraud, experts advise verifying buyers and companies, avoiding upfront fees, and consulting professionals before proceeding with transactions. Reporting suspicious activity to the authorities is critical in combating these scams and protecting others.

Google counters US push to sell Chrome

Google has proposed a legal alternative to a United States Department of Justice recommendation to dismantle its Chrome browser. Instead, the company suggests barring itself from using app licensing agreements to secure default software positions.

The proposal follows a landmark ruling declaring Google a monopoly. The government seeks stronger measures, including a ban on exclusive deals ensuring Google’s dominance on smartphones and other devices.

Judge Amit Mehta’s decision on antitrust remedies is expected to influence the tech industry. Google plans to appeal any adverse ruling.

Walmart and Branch Messenger sued over alleged illegal payment practices

The Consumer Financial Protection Bureau (CFPB) has filed a lawsuit against Walmart and payroll service Branch Messenger, accusing them of forcing gig workers into unauthorised payment systems with excessive fees. The lawsuit alleges that Walmart opened direct deposit accounts for Spark delivery drivers without consent, using their social security numbers. These accounts imposed transaction fees of at least $2.99 per payment and offered no alternative payment methods, despite repeated promises of same-day payments since 2021.

CFPB Director Rohit Chopra criticised Walmart for allegedly exploiting more than a million delivery drivers, stating that companies cannot compel workers to accept payment methods that reduce their earnings. The lawsuit, filed in the United States District Court for Minnesota, seeks to hold both companies accountable for what the agency calls deceptive and abusive practices. Spark drivers had long raised concerns over being required to use Branch accounts, with Walmart allegedly threatening job termination for non-compliance.

The lawsuit highlights violations of the Consumer Financial Protection Act of 2010, asserting that these practices were unfair and abusive. The CFPB aims to secure redress for affected workers and set a precedent against such corporate behaviour.

Thailand tightens SIM card rules to combat scam

Authorities in Thailand are taking steps to regulate bulk SIM card purchases to combat their misuse in scams targeting Thai citizens. The issue came to light following the police seizure of 200,000 prepaid SIM cards linked to a Chinese call center gang.

Currently, there are no restrictions on corporate bulk SIM purchases, aside from a rule requiring registration for users holding more than five numbers. The lack of oversight has enabled SIM cards to be used illegally, particularly near borders where foreign SIMs are common.

Many of these cards are intentionally registered without clear user identities or are misused in IoT devices, GPS trackers, or sold to tourists. To address these gaps, the Ministry of Digital Economy and Society has proposed legal reforms requiring mobile operators and banks to verify buyer identities and notify users of suspicious transactions.

Additionally, stricter regulations on SMS messages with embedded links are set to take effect next year. Inspired by policies in countries like Singapore and Australia, these reforms aim to enhance accountability and curb abuse.

The National Broadcasting and Telecommunications Commission (NBTC) emphasises a gradual approach to implementing these measures to minimise inconvenience for consumers and avoid disrupting legitimate business operations. While tackling the misuse of SIM cards, authorities aim to strike a balance between protecting the public and ensuring businesses can operate smoothly. This measured approach reflects the broader goal of preventing scams while maintaining economic and social stability.

Greece targets crypto crimes with major seizure

Greek authorities have made their first-ever cryptocurrency seizure, confiscating 273,000 USDT (Tether) as part of a criminal investigation. The operation, conducted in December, was carried out under the supervision of the Greek European Public Prosecutor’s Office and involved collaboration with various law enforcement departments, including the Digital Evidence Examination Department.

The seizure, which is part of the ongoing ‘Admiral’ operation, highlights the growing challenges law enforcement faces in dealing with advanced technologies like blockchain and cryptocurrencies. Cryptocurrencies, known for their anonymity and security features, are often used in criminal activities such as fraud and money laundering. Experts stress the need for precision and expertise in handling digital assets, as mistakes can lead to irreversible losses.

Crypto-related scams are becoming more common in Greece, with many victims falling prey to fraudulent schemes. As cryptocurrencies gain popularity, particularly with the rise of Bitcoin and NFTs, the lack of understanding among the public increases the risk of scams. Experts warn that technological advances in AI are making these scams harder to detect, even for experienced investors.

In addition to combating fraud, authorities are also focusing on the management of seized cryptocurrencies, with plans to convert them into funds for the state, similar to practices in other European countries.

US healthcare sector faces new data breach

A recent cybersecurity breach involving US healthcare platform ConnectOnCall has compromised sensitive information belonging to more than 910,000 patients. The telehealth service, owned by Phreesia, experienced unauthorised access between February and May 2024, exposing names, phone numbers, medical details, and in some cases, Social Security numbers. Phreesia promptly took action after discovering the breach, enlisting cybersecurity experts and notifying federal authorities.

ConnectOnCall facilitates after-hours communication for healthcare providers, making the data theft particularly alarming due to the permanent and sensitive nature of health records. Cybercriminals may use this information for identity theft, fraudulent insurance claims, and targeted phishing attacks. Phreesia has since taken the service offline, offering identity and credit monitoring to affected patients, while working to implement more robust security measures.

The breach highlights the growing threat posed by cyberattacks on US healthcare platforms, where data is not only invaluable but also irreplaceable. Experts urge vigilance, such as monitoring accounts, using strong passwords, and employing identity theft protection. With incidents like this on the rise, calls are growing for stricter regulations to safeguard patient information and prevent similar breaches in the future.