- This topic has 51 replies, 24 voices, and was last updated 1 year, 4 months ago by
.
-
Posts
-
-
UI recently interviewed at a well-known IT company which gives employment to lakhs of people and received an email asking me to share my **Govt**. **ITR portal login (PAN + password)** for background verification (BGV). This seems **highly unusual and a serious privacy risk**.
ITR is a **government-secured portal**, and I don’t understand why a company needs full access to my tax records. They could verify income using **ITR PDFs or Form 16**, so why ask for login credentials?
I’m concerned about whether this is **even legal**. In other countries, companies would face **serious penalties** for this. But here, no one questions it. I’m not going to comply, even if it costs me the offer.
Has anyone else faced this? What did you do? Need insights from people familiar with IT laws in India.
-
-
UYes its from agency, but the agency asked to share pan and password to tap the income sources. But is there any law which prohibits this ?
-
-
-
UThere is a reason that the ITR portal is password protected. I don’t think you should share the credentials.
-
Uunfortunately it is becoming a standard practice to complete background verification, no one cares about cyber law and privacy even MNC which give employement to lakhs of people
-
-
-
-
-
ADo not join them unless really really desperate. Maybe with anonymous account tag them on twitter and maybe include labour law department and others.
Name and shame them. Things need to change and they wont if people give in.
-
Uconcerned about possible threatening from mnc. it’s infy. i mailed ITR and ministry of electronics and communications along with RTI asking whether any provision giving to bgv agencies
-
ADo it anonymously. Infosys handles income tax website. Mention in Twitter and tag finance minster asking is it right that the company that makes the income tax website is asking for account credentials for hiring. What a shit show and irony from them.
-
-
-
-
-
UNo ITR credentials is not required for BGV. If they insist ask them to send an official email with the reason.
-
-
UMost companies outsource the bgv but that doesn’t mean the company is not accountable. Speak with HR and ask them to send the reason for asking ITR the credentials
-
UYes , they mentioned that We need to check employement history to see if there are any dual employement. But why the F*ck they need that?
because all the employement agreement and NDA come into play only when candidate sign it. Until then employers don’t have any control to prohibit dual employement .
-
AIf they want to see employment history. Just download service history from EPFO UAN website and share with them. You can also just share your UAN Card with UAN No. They have employer’s EPFO portal where they can easily verify your employment history. Don’t share id and password of ITR at any cost.
-
UNo sure what company is this but first time hearing itr access as an requirement for bgv. If you are not offered a huge jump from existing package i advise you look for gor other offers
-
-
-
-
-
-
-
-
Uthey are not trusting a candidate but we should trust some third party agency because candidates are desperate for a job and easily exploitable
-
UDid you confirm with company telling the third party is asking these details, you can’t provide your financial track record to some xyz…
-
UActually , Infy HR shared the steps how do it which include all these . I also checked digiverifier . They asked me to put pan number and password and also asked me to disable two factor authentication
-
UAre you saying infy HR mentioned steps requesting you to share password? If yes, you can even report to oic team
-
-
-
-
-
-
-
Ui won’t but many are doing it . Because some candidates don’t have any other choice. Because it’s one of the biggest IT consulting firm in india where former CEO asked employee to work for 70hrs
-
-
-
CI think, they can afford to do it.
Because even if you choose to not do so, there will be thousands ready to do so.They are aware of their leverage over the candidate(s)
I must encourage you to think, do you have similar or better offers elsewhere ?
Do you have enough resources to support you and your family without this offer. If yes, you have the luxury to have principles based out of privacy.
-
-
UAsk it in writing.
If they are stupid enough to say that, complain to IT department and labour department and move on.
-
-
-
-
-
UTomorrow they’ll ask Gmail password…lol. I remember my previous employer assigned Deloitte as my tax consultant to handle tax filing for me due to overseas assignment which involves tax equalisation and some refunds which company wants to claim it from employee.
Even in such circumstances, Deloitte was insisting to get my credentials so that they can file my ITR. I politely refused to share it.
They agreed and provided me with the file to upload return myself.
Be clear and sharing personally identifiable information for background check providers should be governed by GDPR norms.
Like masking your Aadhaar etc -
-
VDo not share your credentials at any cost.
You can’t claim to be Hacked later as you voluntarily gave the password.
This is not a usual ask.
Not even a a single company I worked in the past 10 years has asked for this.
-
-
VVery suprising.
Sharing a document with a password is understandable but portal login is not something people would ask..
Check the source may be a scam.
Also, seek a confirmation from the organization on LinkedIn or some portal, if this is their standard practice.
If you are rejecting the offer, atleast call them out publicly.
Remember, when you make truthful statement you never have to worry about defamation
-
-
-
-
-
-
FThere may not be a law for everything. But somewhere on the ITR Portal (which is created by Infy by the way), it asks to not share credentials with anyone.
Even when you use CA to file your return, you are not supposed to provide your credentials to them. Because they can file the returns and mark it as submitted by Self.
Ask the agency if they will agree to you sharing your screen when you open the ITR Portal. You can share screen, login to ITR Portal, download the filed IT Returns and send it to them via email (all while you are sharing your screen)
By the way, it is kind of stupid to detect dual employment via IT Returns. You can just mark money as Income from other sources instead of putting in company name.
Easier to detect dual employment via EPFO portal (which they can access without your help, as far as I know) -
-
