Aadhaar Update Phishing Calls — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: HIGH | View Full Scam Details

Beware of Aadhaar Update Phishing Calls India 2026: A Growing UPI & WhatsApp Scam Threat

Aadhaar Update Phishing Calls are tricking thousands of Indians in 2026, resulting in financial loss and identity theft.

What Is the Aadhaar Update Phishing Calls Scam?

This scam involves fraudsters cold-calling or messaging Indians, pretending to be officials from UIDAI (Unique Identification Authority of India) or other government departments. Their false claim? That urgent updates or corrections to your Aadhaar details are needed to avoid Aadhaar suspension or UPI transaction failure. In reality, they want to steal your sensitive information like OTPs, bank details linked to Aadhaar, and even Aadhaar authentication passwords.

The scam targets anyone who uses Aadhaar for digital services, especially those reliant on UPI payments and WhatsApp for communication—common in cities and semi-urban areas with high smartphone adoption. Scammers increasingly focus on regions with high digital payment volumes, exploiting users' trust in government names and technologies.

India’s cybersecurity bodies like CERT-In (Indian Computer Emergency Response Team) and the I4C (Indian Cyber Crime Coordination Centre) have issued warnings about this scam’s rise. RBI has also reminded users to stay vigilant when receiving calls or messages demanding Aadhaar details or UPI PINs verbally or through links.

How This Scam Works — Step by Step

1. Initial Contact: You receive a call or a WhatsApp message from a number appearing to be an official government or UIDAI helpline. The caller ID might even show “UIDAI,” “Aadhaar Update Cell,” or a government department.

2. Urgent Alert: The fraudster warns of “temporary suspension” of your Aadhaar-linked UPI transactions or threats of losing benefits tied to Aadhaar. They create urgency to prevent you from thinking twice.

3. Request for Details: To “verify” your Aadhaar, they ask for sensitive data like your Aadhaar number, registered mobile number, and OTPs sent to your phone. Sometimes they ask you to share screenshots of messages or even your bank details.

4. Installation of Malicious Apps: The caller might persuade you to download an app (purportedly from UIDAI) on WhatsApp or provide a link to update Aadhaar information online—but these apps or websites steal your data.

5. SIM Swap or UPI Fraud: With your details, the fraudsters may perform a SIM swap via social engineering at mobile service providers or initiate unauthorized UPI transactions using your UPI PIN and linked bank accounts.

6. Money Drain: You notice unexplained deductions from your bank account or UPI wallet, but by then, the scammers have withdrawn significant amounts, often INR 10,000 or more at a time.

Real Warning Signs to Watch For

• Unexpected Calls/WhatsApp Messages Claiming Aadhaar Risk: Government officials do not cold-call people for Aadhaar updates.
• High-Pressure Tactics Urging Immediate Action: Scammers rush you to share OTPs or banking info.
• Requests to Share OTPs, UPI PIN, or Download Unknown Apps: Legitimate agencies never ask for these.
• Caller IDs or Numbers Not Matching Official UIDAI Helpline: Be wary of spoofed or unfamiliar numbers.
• Links or Files From Unknown Contacts Asking For Aadhaar Info Updates: These can lead to phishing or malware.
• Requests to Transfer Money or Share Bank Details Over Call/Message: Always reject such requests.
• Unusual Deduction Notifications After the Call: Check your bank account and UPI transaction history carefully.

What Happens to Victims

Victims often suffer immediate financial loss as money drains from their bank accounts or UPI wallets without their knowledge. Since UPI payments are instant and largely irreversible, victims struggle to recover funds. Furthermore, Aadhaar misuse can lead to identity theft, making it easier for scammers to open fraudulent accounts or avail loans in your name.

The emotional impact is severe — many victims report anxiety, loss of trust in digital payments, and fear about personal data misuse. Victims sometimes face difficulties in reversing these transactions due to delayed reporting or lack of awareness about reporting mechanisms.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) highlights that no government body or bank will ever ask for your UPI PIN, OTP, or passwords over a call or message. RBI’s 24x7 helpline for banking fraud-related queries is available to assist users.

CERT-In annually alerts the public about phishing and social engineering scams targeting Aadhaar users. It advises verifying caller identities and never sharing sensitive information digitally unless you initiate contact through official platforms.

The Indian Cyber Crime Coordination Centre (I4C) promotes awareness and urges citizens to report such incidents promptly. For cybercrime complaints, victims can contact the national cybercrime helpline at 1930 or file complaints via cybercrime.gov.in.

How to Protect Yourself

1. Never Share Your Aadhaar Number or OTP on Calls or WhatsApp: Legitimate officials don’t ask for these over phone.
2. Ignore Urgent Requests to Download Apps or Click Links From Unknown Numbers: Use official UIDAI or bank apps only.
3. Verify Caller ID Independently: Call UIDAI or your bank using official contact numbers found on their website.
4. Set Strong, Unique UPI PINs and Avoid Sharing Them: Memorize your PIN, never save it on your device.
5. Enable Mobile Phone Security: Use SIM lock and alert your telecom provider immediately if you suspect SIM swap attempts.
6. Regularly Monitor Your Bank and UPI Transactions: Use mobile banking apps or statements to detect unauthorized funds transfer early.
7. Use BharatSecure.app to Check Suspicious Messages or Calls: Our platform helps verify scam indicators for Indian users.

What to Do If You’ve Been Targeted

• Immediately Contact Your Bank: Block your UPI PIN, freeze your bank account if necessary to stop ongoing transfers.
• Report the Incident to UIDAI Helpline (1947) and RBI’s Fraud Helpline: Inform authorities to alert others and start investigation.
• File a Cybercrime Complaint: Visit cybercrime.gov.in or call the 1930 helpline to report phishing or fraud.
• Change All Associated Passwords: Update Aadhaar-linked service passwords, and UPI PIN right away.
• Inform Your Mobile Service Provider: If you suspect SIM swap fraud, report it to avoid further abuse.
• Keep Records: Document call details, messages, and transaction statements to assist law enforcement.

Frequently Asked Questions

Q: Can UIDAI or government officials call me for Aadhaar updates?
A: No, UIDAI and government agencies do not make unsolicited calls or messages demanding Aadhaar or banking details. Updates are done by the individual through official portals or centers only.

Q: What should I do if I accidentally shared my UPI PIN or OTP?
A: Immediately block your UPI facility by contacting your bank, change all passwords, and report the fraud on cybercrime.gov.in as well as to your bank’s helpline.

Q: How can I verify if a call about Aadhaar update is genuine?
A: Do not rely on caller ID alone; independently call UIDAI through official numbers or verify through their website. Do not share any sensitive information in the meanwhile.

Digital fraudsters are growing more sophisticated in India, especially exploiting Aadhaar and UPI ecosystems. Protect yourself by staying informed and cautious. When you get a suspicious call or message about Aadhaar updates, don’t panic—verify first at BharatSecure.app before sharing any personal info. Your vigilance is your best defense.