An alarming flaw which was recently pointed out here at ProPakistani about online NTN verification system at FBR’s website has been rectified now.
Earlier, as we had discussed, FBR website was exposing all personal and sensitive details of taxpayers by merely inputting his/her CNIC.
Thumbs up to FBR guys that they took notice and managed to do possible measures to overcome the flaw.
Now you can get NTN number of any individual, which is enough for layman to verify someone’s tax paying status.
So after the update, one can check NTN number against CNIC but the details are shown to authorized persons only, website asks to login for that, as it states:
i) e-Enrolled persons are requested to login at https://e.fbr.gov.pk and complete the change in particulars request
ii) The persons not e-Enrolled are requested to either get e-Enrolled by clicking e-Enrollment or prepare a paper request for change in particulars and submit at nearest NTN cell. Please click TRF-01 Form for downloading the taxpayer registration form.
Good work done by FBR, this shows the concern of the people responsible there – however, there’s always room available for betterment. Here, FBR can further secure it’s pages that contain sensitive information of taxpayers by implementing SSL encryption.