Aadhaar Misuse & Identity Theft in India: How to Protect Yourself

1. Introduction

Your Aadhaar number is used to open bank accounts, get SIM cards, and take loans — which makes its misuse a serious risk. UIDAI provides free tools to check and lock your Aadhaar, and the law provides remedies where it has been abused. This guide explains both.

2. Who should read this?

• Anyone who suspects their Aadhaar or identity documents have been misused.
• People who found an unknown loan, SIM, or bank account in their name.
• Anyone who shared an Aadhaar copy and now wants to secure it.

3. What the law says

• The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 governs Aadhaar and penalises impersonation, unauthorised use of identity information, and unauthorised access to the Aadhaar database.
• Identity theft and cheating by personation using a computer resource are offences under Sections 66C and 66D of the Information Technology Act, 2000.
• Cheating and forgery remain punishable under the general criminal law (formerly the Indian Penal Code, now the Bharatiya Nyaya Sanhita, 2023).
• UIDAI allows every resident to view their Aadhaar authentication history, lock and unlock biometrics, generate a time-limited Virtual ID instead of sharing the actual number, and download a masked Aadhaar that hides the first eight digits.
• Under the Digital Personal Data Protection Act, 2023, entities handling your personal data have obligations regarding its use and security, giving you an additional basis to complain about misuse.

4. Step-by-step process

1. Step 1Check your Aadhaar authentication history

   Log in on the UIDAI portal to see where and when your Aadhaar was used for authentication and spot anything unfamiliar.

2. Step 2Lock your biometrics and use a Virtual ID

   Lock biometrics on the UIDAI portal and share a Virtual ID or masked Aadhaar instead of your full number.

3. Step 3Check for accounts and SIMs in your name

   Review your credit report for unknown loans and use the government's TAFCOP portal to see mobile connections issued against your identity.

4. Step 4Report to UIDAI and the cyber-crime portal

   Complain to UIDAI (helpline 1947) and file a report at cybercrime.gov.in, or call 1930 where money has been lost.

5. Step 5Notify affected banks and lenders

   Write to any bank or lender where a fraudulent account or loan exists, and dispute the entry with the credit bureaus.

5. Documents required

• Your Aadhaar number and registered mobile number for OTP verification.
• Screenshots of the suspicious authentication history or unknown accounts.
• Credit report showing the fraudulent loan or card.
• Copy of the UIDAI and cyber-crime complaints with reference numbers.
• Bank statements, where money has been lost.

6. Fees and government charges

• Checking authentication history, locking biometrics, generating a Virtual ID, and complaining to UIDAI or the cyber-crime portal are all free.
• Advocate fees apply only if you pursue civil recovery or need representation.

Fees vary by state and change over time; treat these as general pointers, not exact figures.

7. Expected timeline

Biometric locking and Virtual ID generation are instant. Where money has been lost, reporting within the first few hours materially improves the chance of freezing the funds. Investigation and bank dispute resolution take longer, commonly weeks to months.

8. Common mistakes to avoid

• Sharing a full, unmasked Aadhaar copy freely instead of a masked version or Virtual ID.
• Never checking the authentication history, so misuse goes unnoticed for years.
• Not locking biometrics when Aadhaar is not actively needed.
• Reporting financial fraud late, after the window to freeze the transfer has passed.
• Complaining only to UIDAI without also disputing the fraudulent account with the lender and bureaus.

9. Frequently asked questions

10. When you should consult a lawyer

• A significant loan or account has been fraudulently opened in your name.
• A bank refuses to accept that a transaction was fraudulent.
• You are being pursued for a debt you never took.
• You want to claim compensation for losses caused by the misuse.

11. How LawMitran can help