A Kaspi.kz customer discovered that when transferring money through an ATM using the recipient's individual identification number (IIN), information about their instalment plans and debts is displayed on the screen. The situation raised questions about personal data protection and banking secrecy.
HOW THE ATM FUNCTION WAS DISCOVERED
According to krisp.kz, the subscriber accidentally discovered this feature when transferring money to an acquaintance at his request.
After entering the recipient's IIN, tabs with information about their instalment plans appeared on the ATM screen. Next to each one, the remaining outstanding amount was indicated.
In addition, a tab titled "All instalment plans and loans" was available in the menu.
WHAT DATA WAS DISPLAYED
According to the reader, the ATM showed the number of instalment plans and the unpaid amounts for each of them.
At the same time, individual loans taken out with Kaspi.kz were not displayed, but the total outstanding amount was visible.
The woman noted that to obtain such information, it is enough to know another person's IIN.
WHY QUESTIONS ABOUT CONFIDENTIALITY AROSE
The subscriber expressed concern that Kazakh citizens regularly provide their IIN at public service centres, clinics and banks.
In her opinion, a person who knows someone else's IIN could potentially obtain information about instalment plans and credit debt without the owner's consent.
The reader raised the question of whether the display of such data violates confidentiality and banking secrecy requirements.
At the same time, no violation of the law was established in the published material.
WHAT KASPI.KZ RESPONDED
On 14 October 2026, journalists from KRISP contacted the Kaspi.kz press service for clarification and provided the bank with a video recording.
Bank representatives said that the response is undergoing a lengthy approval procedure.
As of 19 October 2026, no official comment from Kaspi.kz had been received, the source noted.
