Railway booking systems face privacy and fraud concerns in Taiwan and China

In Taiwan, a passenger has raised concerns regarding the security of the Taiwan High Speed Rail booking system after their email and phone number were used by an unknown individual to successfully book tickets on three separate occasions. The complainant noted that while the identity and credit card used for payment belonged to the actual traveler, the contact information was incorrect. Taiwan High Speed Rail responded that the issue resulted from user input errors rather than a system breach, noting that email and phone numbers are used solely for notifications and are not mandatory for identity verification. Cybersecurity experts noted that while the core transaction is secured via ID numbers and payment authentication, the lack of contact information verification can lead to privacy concerns and unsolicited messages for third parties.

In China, CCTV has exposed four common deceptive tactics used by unauthorized third-party train ticket booking platforms. These platforms often market “speed acceleration” packages or “real-time monitoring” services that do not actually increase the chances of securing tickets. Some services repackage the official 12306 free waiting list feature as a paid service, while others use misleading advertisements regarding “internal access” to entice travelers. Authorities remind passengers that the official 12306 platform is the only authorized service and warns against paying extra fees for services that mimic existing free official functions.