Jaumo App Security Flaw Allows Fake Account Creation With Stolen Phone Number

Today, I learned that a fake account was created using my name and phone number on the Jaumo iOS app. Even though I don't use the app, I became aware of the situation when someone messaged me, and I realized that the account in the attached screenshot does not belong to me.

The fact that an account could be created by sharing my phone number without my consent or knowledge demonstrates a total lack of security measures during the signup process. I find it deeply disturbing for the security of my personal data that an account can be set up using both a phone number and a profile photo without any identity verification.

I demand that Jaumo immediately close this fake account created under my name and phone number, wipe all associated data from your system, and provide me with written confirmation once completed. Furthermore, I request a clear explanation of what security measures are taken regarding identity verification and phone number security, as well as how this incident occurred.

I expect all necessary security precautions to be implemented to prevent the unauthorized use of my name and personal data, to avoid similar issues in the future, and to be notified in writing.

Comments